Virtuous human hacking: The ethics of social engineering in penetration-testing

摘要: Abstract This paper offers a virtue ethics analysis of social engineering in penetration-testing. It begins by considering previous research on this topic and argues that such attempts misconstrue or more often overlook Aristotelian tradition. articulates the core tenets applies them to an white hat engineering. A requires individuals firms initiate penetration-test be placed within larger communal context which obligates who are potential human hacking victims participate constitution flourishing communities. As such, for consent is not necessary condition positive ethical status If methods consistent with moderation (i.e. golden mean) manipulation at lower orders hierarchy communities can justified if it reasonably understood as part individual's participatory obligation results participation essential ensure eudaimonia community. Nevertheless, mean robust mitigation strategies lessen degree harm inflicted victims. Where possible, should attained mitigation. Finally, penetration-testing must able demonstrate training program governs its use