Question

Murugan has gained access to the network of an organization with the authorization of its owner. He has been asked to identify and fix vulnerabilities before people with malicious intentions can exploit them. Which type of hacking is being described in this situation? Will it be considered as a cybercrime?

Hint:

The key difference between ethical hacking and cybercrime is authorization and consent. Hacking into any system without written permission, regardless of your intentions, is illegal.

Answer 1

Step 1: Identifying the Category of Hacking:
The scenario describes Ethical Hacking (also known as White-Hat Hacking or penetration testing).
• Context: Murugan has obtained explicit, legal authorization from the network owner to probe systems for security gaps.
• Purpose: His objective is defensive. He works to identify security vulnerabilities, document findings, and patch security holes before malicious actors (Black-hat hackers) can exploit them.

Step 2: Evaluating the Legal Status:
No, this activity is not considered a cybercrime.
• Lack of Malicious Intent: Cybercrimes require malicious intent (mens rea) and unauthorized action.
• Legal Authorization: Because Murugan is working with authorization under a formal contract, his actions are entirely legal and act as a critical cyber-defense practice for organizations.