Session D: Automatic Control, IT and Artificial Intelligence
Legal issues of ethical hacking: A systematic review of authorization, compliance, and liability frameworks
1 Faculty of Mechanical and Civil Engineering in Kraljevo, University of Kragujevac, Serbia
2 Graduate School of Business, La Salle University, Philadelphia, United States
³ Academy of Technical and Art Applied Studies Belgrade, School of Electrical and Computer Engineering, Serbia
2 Graduate School of Business, La Salle University, Philadelphia, United States
³ Academy of Technical and Art Applied Studies Belgrade, School of Electrical and Computer Engineering, Serbia
Corresponding author: Vladimir Milićević · milicevic.v@mfkv.kg.ac.rs
Abstract
The practice of ethical hacking, aimed at identifying and addressing vulnerabilities in information systems, applications, or networks, presents several legal considerations. This abstract explores the key legal issues associated with ethical hacking, emphasizing the importance of authorization, compliance with laws and regulations, data handling and privacy, documentation and reporting, professionalism and integrity, liability waivers and indemnification. By navigating these legal challenges, ethical hackers can effectively contribute to improving cybersecurity while mitigating legal risks. Ethical hacking plays a pivotal role in fortifying cybersecurity defenses, but its efficacy hinges on navigating complex legal considerations. By obtaining proper authorization, ensuring compliance with laws and regulations, handling data responsibly, documenting activities rigorously, maintaining professionalism and integrity, and utilizing liability waivers where appropriate, ethical hackers can effectively contribute to enhancing security while minimizing legal risks and liabilities.
Keywords
Ethical hackingDataCybersecurityInformation systems
Cite this paper
Recommended citation · Engineering TODAY style
V. Milićević, M. Jovanović, N. Biga, M. M. Živanović, and I. Franc, “Legal issues of ethical hacking: A systematic review of authorization, compliance, and liability frameworks”, Proceedings of the XII International Triennial Conference Engineering TODAY (ET 2026), Vrnjačka Banja (Serbia), pp. D57–D67, https://doi.org/10.46793/ET26.D07M, (2026)