Abstract
Cybersecurity research involves ethics risks such as accidental privacy breaches, corruption of production services, and discovery of weaknesses in networked systems. Although literature describes these and other issues in some depth, re- flection on these issues is not yet well embedded in typical Ethics Review Board procedures. In this paper, we operationalize existing guidance on cybersecurity research ethics into a proposal that can be directly implemented in an Ethics Review Board. We provide a set of self-assessment questions to effectively and efficiently probe the ethics of proposed cybersecurity research, a Coordinated Vulnerability Disclosure procedure for discoveries made in the course of research, and an outline of a university policy to institutionally embed this procedure, which could be adapted and adopted by research institutes. With this paper, we hope to contribute to more Ethics Review Boards taking up the challenge of addressing cybersecurity research ethics in an adequate and productive manner.
| Original language | English |
|---|---|
| Title of host publication | Proceedings EthiCS 2023 |
| Subtitle of host publication | The 2nd International Workshop on Ethics in Computer Security, February 27, 2022, San Diego, CA, USA |
| Place of Publication | Reston, VA |
| Publisher | Internet Society |
| Number of pages | 7 |
| ISBN (Electronic) | 1-891562-85-1 |
| DOIs | |
| Publication status | Published - 27 Feb 2023 |
| Event | 2nd International Workshop on Ethics in Computer Security, EthiCS 2023 - San Diego, United States Duration: 27 Feb 2023 → 27 Feb 2023 Conference number: 2 |
Conference
| Conference | 2nd International Workshop on Ethics in Computer Security, EthiCS 2023 |
|---|---|
| Abbreviated title | EthiCS 2023 |
| Country/Territory | United States |
| City | San Diego |
| Period | 27/02/23 → 27/02/23 |