IDEAS home Printed from https://ideas.repec.org/a/eee/teinso/v63y2020ics0160791x19306840.html
   My bibliography  Save this article

Ethics in cybersecurity research and practice

Author

Listed:
  • Macnish, Kevin
  • van der Ham, Jeroen

Abstract

This paper critiques existing governance in cyber-security ethics through providing an overview of some of the ethical issues facing researchers in the cybersecurity community and highlighting shortfalls in governance practice. We separate these issues into those facing the academic research community and those facing the (corporate) practitioner community, drawing on two case studies. While there is overlap between these communities, there are also stark differences. Academic researchers can often rely on research ethics boards (REBs) to provide ethical oversight and governance which are typically unavailable to the practitioner community. However, we argue that even within the academic community the constitution of REBs is such that they may be (and in some cases at least are) unable to offer sound advice. Our recommendations are that ethics should be taught in far greater depth on computer science courses than is currently the case, and that codes of conduct should be developed and deployed provided they can be seen to be effective. In tandem with these, an active discussion regarding the ethics of cybersecurity and cybersecurity research is urgently needed.

Suggested Citation

  • Macnish, Kevin & van der Ham, Jeroen, 2020. "Ethics in cybersecurity research and practice," Technology in Society, Elsevier, vol. 63(C).
    • Handle: RePEc:eee:teinso:v:63:y:2020:i:c:s0160791x19306840
    DOI: 10.1016/j.techsoc.2020.101382
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S0160791X19306840
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.techsoc.2020.101382?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Hélène Hermansson, 2010. "Towards a fair procedure for risk management," Journal of Risk Research, Taylor & Francis Journals, vol. 13(4), pages 501-515, June.
    2. Kshetri, Nir, 2017. "Blockchain's roles in strengthening cybersecurity and protecting privacy," Telecommunications Policy, Elsevier, vol. 41(10), pages 1027-1038.
    3. Fershtman, Chaim & Gandal, Neil & Choi, Jay Pil, 2005. "Internet Security, Vulnerability Disclosure and Software Provision," CEPR Discussion Papers 5269, C.E.P.R. Discussion Papers.
    4. Ashish Arora & Rahul Telang & Hao Xu, 2008. "Optimal Policy for Software Vulnerability Disclosure," Management Science, INFORMS, vol. 54(4), pages 642-656, April.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Khan Babar, Abdul Haseeb & Ali, Yousaf, 2022. "Framework construction for augmentation of resilience in critical infrastructure: Developing countries a case in point," Technology in Society, Elsevier, vol. 68(C).
    2. Foecking, Nico & Wang, Mei & Huynh, Toan Luu Duc, 2021. "How do investors react to the data breaches news? Empirical evidence from Facebook Inc. during the years 2016–2019," Technology in Society, Elsevier, vol. 67(C).
    3. Straub, Jeremy, 2021. "Defining, evaluating, preparing for and responding to a cyber Pearl Harbor," Technology in Society, Elsevier, vol. 65(C).
    4. Raza, Syed Arshad, 2021. "Managing ethical requirements elicitation of complex socio-technical systems with critical systems thinking: A case of course-timetabling project," Technology in Society, Elsevier, vol. 66(C).
    5. Dong, Xuefan & Lian, Ying, 2021. "A review of social media-based public opinion analyses: Challenges and recommendations," Technology in Society, Elsevier, vol. 67(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Arora, Ashish & Forman, Chris & Nandkumar, Anand & Telang, Rahul, 2010. "Competition and patching of security vulnerabilities: An empirical analysis," Information Economics and Policy, Elsevier, vol. 22(2), pages 164-177, May.
    2. Ashish Arora & Ramayya Krishnan & Rahul Telang & Yubao Yang, 2010. "An Empirical Analysis of Software Vendors' Patch Release Behavior: Impact of Vulnerability Disclosure," Information Systems Research, INFORMS, vol. 21(1), pages 115-132, March.
    3. Debabrata Dey & Atanu Lahiri & Guoying Zhang, 2015. "Optimal Policies for Security Patch Management," INFORMS Journal on Computing, INFORMS, vol. 27(3), pages 462-477, August.
    4. Queiroz, Maciel M. & Fosso Wamba, Samuel, 2019. "Blockchain adoption challenges in supply chain: An empirical investigation of the main drivers in India and the USA," International Journal of Information Management, Elsevier, vol. 46(C), pages 70-82.
    5. Xiaobao Zhu & Jing Shi & Fengjie Xie & Rouqi Song, 2020. "Pricing strategy and system performance in a cloud-based manufacturing system built on blockchain technology," Journal of Intelligent Manufacturing, Springer, vol. 31(8), pages 1985-2002, December.
    6. Kirimhan, Destan, 2023. "Importance of anti-money laundering regulations among prosumers for a cybersecure decentralized finance," Journal of Business Research, Elsevier, vol. 157(C).
    7. Ma, Chao-Qun & Lei, Yu-Tian & Ren, Yi-Shuai & Chen, Xun-Qi & Wang, Yi-Ran & Narayan, Seema, 2024. "Systematic analysis of the blockchain in the energy sector: Trends, issues, and future directions," Telecommunications Policy, Elsevier, vol. 48(2).
    8. Terrence August & Duy Dao & Kihoon Kim, 2019. "Market Segmentation and Software Security: Pricing Patching Rights," Management Science, INFORMS, vol. 65(10), pages 4575-4597, October.
    9. Terrence August & Tunay I. Tunca, 2006. "Network Software Security and User Incentives," Management Science, INFORMS, vol. 52(11), pages 1703-1720, November.
    10. Priti Jagwani & V. B. Singh & Noopur Agrawal & Aditya P. Tripathi, 2023. "Blockchain technology and software engineering practices: a systematic review of literature using topic modelling approach," International Journal of System Assurance Engineering and Management, Springer;The Society for Reliability, Engineering Quality and Operations Management (SREQOM),India, and Division of Operation and Maintenance, Lulea University of Technology, Sweden, vol. 14(1), pages 1-17, March.
    11. Konstantinos Siassiakos & Stamatia Ilioudi & Tsaktsira Effrosyni & Vasiliki Mitsiou & Dimitris Nanouris, 2020. "Utilization of Blockchain Technology in Greek Public Administration," Advances in Management and Applied Economics, SCIENPRESS Ltd, vol. 10(4), pages 1-12.
    12. James R. Barth & Hemantha S. B. Herath & Tejaswini C. Herath & Pei Xu, 2020. "Cryptocurrency valuation and ethics: a text analytic approach," Journal of Management Analytics, Taylor & Francis Journals, vol. 7(3), pages 367-388, July.
    13. Dutta, Pankaj & Choi, Tsan-Ming & Somani, Surabhi & Butala, Richa, 2020. "Blockchain technology in supply chain operations: Applications, challenges and research opportunities," Transportation Research Part E: Logistics and Transportation Review, Elsevier, vol. 142(C).
    14. Irem Nur Ecemis & Fatih Ekinci & Koray Acici & Mehmet Serdar Guzel & Ihsan Tolga Medeni & Tunc Asuroglu, 2024. "Exploring Blockchain for Nuclear Material Tracking: A Scoping Review and Innovative Model Proposal," Energies, MDPI, vol. 17(12), pages 1-27, June.
    15. Ioannidis, Christos & Pym, David & Williams, Julian, 2012. "Information security trade-offs and optimal patching policies," European Journal of Operational Research, Elsevier, vol. 216(2), pages 434-444.
    16. Terrence August & Tunay I. Tunca, 2011. "Who Should Be Responsible for Software Security? A Comparative Analysis of Liability Policies in Network Environments," Management Science, INFORMS, vol. 57(5), pages 934-959, May.
    17. Teng, Sin Yong & Touš, Michal & Leong, Wei Dong & How, Bing Shen & Lam, Hon Loong & Máša, Vítězslav, 2021. "Recent advances on industrial data-driven energy savings: Digital twins and infrastructures," Renewable and Sustainable Energy Reviews, Elsevier, vol. 135(C).
    18. Julio C. Mendoza-Tello & Higinio Mora & Francisco A. Pujol-López & Miltiadis D. Lytras, 2019. "Disruptive innovation of cryptocurrencies in consumer acceptance and trust," Information Systems and e-Business Management, Springer, vol. 17(2), pages 195-222, December.
    19. Qiang Wang & Min Su & Min Zhang & Rongrong Li, 2021. "Integrating Digital Technologies and Public Health to Fight Covid-19 Pandemic: Key Technologies, Applications, Challenges and Outlook of Digital Healthcare," IJERPH, MDPI, vol. 18(11), pages 1-50, June.
    20. Anshul Tickoo & P. K. Kapur & A. K. Shrivastava & Sunil K. Khatri, 2016. "Testing effort based modeling to determine optimal release and patching time of software," International Journal of System Assurance Engineering and Management, Springer;The Society for Reliability, Engineering Quality and Operations Management (SREQOM),India, and Division of Operation and Maintenance, Lulea University of Technology, Sweden, vol. 7(4), pages 427-434, December.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:teinso:v:63:y:2020:i:c:s0160791x19306840. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/technology-in-society .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.