Practical Cybersecurity Ethics: Mapping CyBOK to Ethical Concerns Article Swipe

MAKE IMPACT

Ivan Fléchais , George Chalhoub · YOU? · · 2023 · Open Access · · DOI: https://doi.org/10.48550/arxiv.2311.10165

Research into the ethics of cybersecurity is an established and growing topic of investigation, however the translation of this research into practice is lacking: there exists a small number of professional codes of ethics or codes of practice in cybersecurity, however these are very broad and do not offer much insight into the ethical dilemmas that can be faced while performing specific cybersecurity activities. In order to address this gap, we leverage ongoing work on the Cyber Security Body of Knowledge (CyBOK) to help elicit and document the responsibilities and ethics of the profession. Based on a literature review of the ethics of cybersecurity, we use CyBOK to frame the exploration of ethical challenges in the cybersecurity profession through a series of 15 interviews with cybersecurity experts. Our approach is qualitative and exploratory, aiming to answer the research question "What ethical challenges, insights, and solutions arise in different areas of cybersecurity?". Our findings indicate that there are broad ethical challenges across the whole of cybersecurity, but also that different areas of cybersecurity can face specific ethical considerations for which more detailed guidance can help professionals in those areas. In particular, our findings indicate that security decision-making is expected of all security professionals, but that this requires them to balance a complex mix of technical, objective and subjective points of view, and that resolving conflicts raises challenging ethical dilemmas. We conclude that more work is needed to explore, map, and integrate ethical considerations into cybersecurity practice; the urgent need to conduct further research into the ethics of cybersecurity AI; and highlight the importance of this work for individuals and professional bodies who seek to develop and mature the cybersecurity profession in a responsible manner.

Type

preprint

Language

en

Landing Page

http://arxiv.org/abs/2311.10165

PDF

https://arxiv.org/pdf/2311.10165

OA Status

green

Related Works

10

OpenAlex ID

https://openalex.org/W4388843187

Raw OpenAlex JSON

OpenAlex ID

https://openalex.org/W4388843187

Canonical identifier for this work in OpenAlex

DOI

https://doi.org/10.48550/arxiv.2311.10165

Digital Object Identifier

Title

Practical Cybersecurity Ethics: Mapping CyBOK to Ethical Concerns

Work title

Type

preprint

OpenAlex work type

Language

en

Primary language

Publication year

2023

Year of publication

Publication date

2023-11-16

Full publication date if available

Authors

Ivan Fléchais, George Chalhoub

List of authors in order

Landing page

https://arxiv.org/abs/2311.10165

Publisher landing page

PDF URL

https://arxiv.org/pdf/2311.10165

Direct link to full text PDF

Open access

Yes

Whether a free full text is available

OA status

green

Open access status per OpenAlex

OA URL

https://arxiv.org/pdf/2311.10165

Direct OA link when available

Concepts

Engineering ethics, Leverage (statistics), Computer security, Ethical code, Work (physics), Political science, Ethical decision, Computer science, Public relations, Engineering, Mechanical engineering, Machine learning

Top concepts (fields/topics) attached by OpenAlex

Cited by

0

Total citation count in OpenAlex

Related works (count)

10

Other works algorithmically related by OpenAlex

Full payload