Cybersecurity Ethics This textbook ofers an accessible introduction to the topic of cybersecurity ethics. The second edition has been revised and updated, and contains new chapters on social justice, AI, and Big Data. The book is split into three parts. Part I provides an introduction to the feld of ethics, philosophy, and philosophy of science, three ethical frameworks – virtue ethics, utilitarian ethics, and communitarian ethics – and the notion of ethical hacking. Part II applies these frameworks to particular issues within the feld of cybersecurity, including privacy rights, surveillance, and intellectual property. The third part concludes by exploring current codes of ethics used in cybersecurity, with chapters on artifcial intelligence, social diversity, Big Data, and cyberwarfare. The overall aims of the book are to: • Provide ethical frameworks to aid decision-making • Present the key ethical issues in relation to computer security • Highlight the connection between values and beliefs and the professional code of ethics The textbook also includes three diferent features to aid students: “Going Deeper” features provide background on individuals, events, and institutions in cybersecurity; “Critical Issues” features contemporary case studies; and “Tech Talks” contain features that assume some familiarity with technological developments. The book will be of much interest to students of cybersecurity, cyberethics, hacking, surveillance studies, ethics, and information science. Mary Manjikian is Professor at the College of Arts and Sciences, Regent University in Virginia Beach, USA, and a professor in the Fleet Seminar Program for the US Naval War College. She is the author of several books, including, most recently, Introduction to Cyber Politics and Policy (2020), and is co-editor of the Routledge Companion to Global Cyber-Strategy (2021). ‘This book is a rich and valuable resource for students to learn more about non-technical aspects of cybersecurity.’ —Markus Christen, Managing Director, Digital Society Initiative, University of Zurich, Switzerland ‘The authoritative text on cybersecurity ethics, covering a wide selection of topics includ- ing privacy, intellectual property theft, artifcial intelligence and big data. This is a terrifc resource for students in Europe and beyond.’ —Max Smeets, ETH Zurich, Center for Security Studies (CSS) and Director of European Cyber Confict Research Initiative ‘A comprehensive tour de force in cybersecurity ethics. This illuminating book weaves together ethical frameworks that address the evolving nature of some of the most com- plicated cyber issues in the 21st century. Are we prepared to understand and respond to the ethical challenges that continue to emerge across cyber domains and technological advances? The author addresses these challenges head on and this book will prove to be an excellent resource to those who wish to advance their understanding of cybersecurity ethics.’ —William Travis Morris, Director, Norwich University Peace and War Center, USA —Norwich University Praise for the 1st edition ‘This book is a bold and innovative synthesis of thinking from diverse yet interlinked disciplines. It is vital reading for scholars, policymakers, security professionals and organi- zational leaders. Manjikian’s explication of the ACM Code of Ethics shows why it is a foundational concept for cybersecurity.’ —Steven Metz, U.S. Army War College, USA ‘As cyber confict, espionage and crime increasingly challenge nations and their citizens, Manjikian’s Cybersecurity Ethics provides a comprehensive and needed addition to the cyber literature canon. This work constitutes a robust framework for decisions and actions in cyberspace and is essential reading for policymakers, practitioners, and students engag- ing the feld of cybersecurity.’ —Aaron F. Brantly, Army Cyber Institute, United States Military Academy, West Point ‘Mary Manjikian’s introduction to cybersecurity ethics nicely links philosophy to practical cyber concerns of students, corporate and government information managers, and even cyber warriors. Complicated concepts are easy to understand and relevant to personal decision-making.’ —John A. Gentry, Georgetown University, USA ‘Dr Manjikian has done a masterful job of outlining ethical standards to the constantly evolving cybersecurity domain. This book is a vital reference for those who are con- cerned with ethics related to hacking, privacy, surveillance, and cyberwarfare in an ever changing virtual environment that transcends boundaries and cultures and challenges the traditional ways that humans have dealt with each other. Ground-breaking and should be required reading for any serious cybersecurity professional.’ —Keith Dayton, George C. Marshall European Center for Security Studies, Germany ‘A great introductory text to complex conceptual and practical issues in cybersecurity.’ —Heather Rof, Arizona State University, USA ‘Mary Manjikian’s excellent textbook, Cybersecurity Ethics, delivers an eminently read- able perspective for the experienced professional as well as a casual cyberspace consumer. . . . Overall, Cybersecurity Ethics excellently fulflls the stated goal to provide an ethical framework and illustrate several current issues regarding cybersecurity through a new textbook. The construction was splendid, material assembled coherently, and sources presented thoroughly and accurately. This book is an excellent introduction to ethical processes associated with cyberspace.’ —Mark Peters, Strategic Studies Quarterly Cybersecurity Ethics An Introduction Second Edition Mary Manjikian Cover image: © Getty Images – Credit: monsitj Second edition published 2023 by Routledge 4 Park Square, Milton Park, Abingdon, Oxon OX14 4RN and by Routledge 605 Third Avenue, New York, NY 10158 Routledge is an imprint of the Taylor & Francis Group, an informa business © 2023 Mary Manjikian The right of Mary Manjikian to be identifed as author of this work has been asserted in accordance with sections 77 and 78 of the Copyright, Designs and Patents Act 1988. All rights reserved. No part of this book may be reprinted or reproduced or utilised in any form or by any electronic, mechanical, or other means, now known or hereafter invented, including photocopying and recording, or in any information storage or retrieval system, without permission in writing from the publishers. Trademark notice: Product or corporate names may be trademarks or registered trademarks, and are used only for identifcation and explanation without intent to infringe. First edition published by Routledge 2017 British Library Cataloguing-in-Publication Data A catalogue record for this book is available from the British Library Library of Congress Cataloging-in-Publication Data Names: Manjikian, Mary, author. Title: Cybersecurity ethics : an introduction / Mary Manjikian. Description: Second edition. | Abingdon, Oxon ; New York, NY : Routeldge, 2023. | Includes bibliographical references and index. Identifers: LCCN 2022036730 (print) | LCCN 2022036731 (ebook) | ISBN 9781032164991 (hbk) | ISBN 9781032164977 (pbk) | ISBN 9781003248828 (ebk) Subjects: LCSH: Internet—Moral and ethical aspects. | Computer networks—Security measures—Moral and ethical aspects. | Computer crimes. Classifcation: LCC TK5105.878 .M36 2023 (print) | LCC TK5105.878 (ebook) | DDC 005.8—dc23/eng/20221017 LC record available at https://lccn.loc.gov/2022036730 LC ebook record available at https://lccn.loc.gov/2022036731 ISBN: 978-1-032-16499-1 (hbk) ISBN: 978-1-032-16497-7 (pbk) ISBN: 978-1-003-24882-8 (ebk) DOI: 10.4324/9781003248828 Typeset in Bembo by Apex CoVantage, LLC To my husband Ara, whose paranoia about everything internet teaches us to be more careful. Contents List of Tables xi List of Figures xii List of Boxes xiii List of Acronyms and Abbreviations xiv Preface to the Second Edition xvi Acknowledgments xix PART I 1 What Is Ethics? 3 2 Three Ethical Frameworks 23 3 The Ethical Hacker 43 PART II 4 The Problem of Privacy 69 5 The Problem of Surveillance 100 6 The Problem of Intellectual Property 126 PART III 7 Ethics of Artifcial Intelligence 153 8 Cybersecurity, Diversity, Equity, and Inclusion 176