Why do young people start and continue with ethical hacking? A qualitative study on individual and social aspects in the lives of ethical hackers

Research Summary

This qualitative interview study examined individual and social aspects in the lives of 15 hackers who started with ethical hacking before the age of 18. We examined what motivated and stimulated them to start with ethical hacking and how and why they continued. Results show that individual aspects, such as an early interest in ICT (Information and Communication Technology), the motivation to make systems more secure, and thinking of reporting vulnerabilities as a moral duty, contribute to the initiation of ethical hacking. Social aspects, such as role models, mainly play a role in the further development of the ethical hacking career. For example, peers, parents, friends, and hacker communities have a motivating and stimulating effect on young ethical hackers. Similarly, positive reactions from public and private system owners can further stimulate the development and self-image of ethical hackers.

Policy Implications

In contrast to criminal hackers, ethical hackers improve cybersecurity, for example, by reporting weaknesses or errors in computer systems. Nowadays, an increasing number of public and private organizations around the world are creating cybersecurity policies and practices around ethical hacking. The interest in hacking usually arises at an early age, making it important to gain knowledge about what stimulates and motivates young people to start and continue with ethical hacking, to inform these policies and practices. Our results show that recognition and reactions from system owners are important in the ethical hacking career. Our recommendations based on these results could stimulate more young people to take the ethical path. Simultaneously, this increases the security of public and private organizations, reducing opportunities for criminal hackers.     

Backloading to extinction: Coping with values conflict in the administration of Australia's federal biodiversity offset policy

Policy-makers are frequently required to consider and manage conflicting public values. An example of this in the environmental domain is biodiversity offset policy, which governments worldwide have adopted as a mechanism to balance environmental protection with socio-economic development. However, little work has examined administrative practices underpinning biodiversity offset policy implementation, and how the adoption of coping strategies to manage value conflicts may influence resulting policy outcomes. This study fills this research gap using a case study of Australia's federal biodiversity offset policy under the Environment Protection and Biodiversity Conservation (EPBC) Act 1999. Using data from 13 interviews of federal policy administrators, I show that the introduction of a new policy in 2012 enabled a shift from the use of precedent to a technical approach for setting offset requirements under the EPBC Act. Yet, multiple sources of policy ambiguity remain, and administrators have adopted post-approval condition-setting, or ‘backloading’—a form of cycling, facilitated by structural separation—to defer detailed assessments of offset requirements until after biodiversity losses are approved. Backloading thus undermines the effectiveness of environmental policy and will persist as coping strategy unless policy ambiguity is reduced via legislative amendments and adequate resourcing of biodiversity conservation.

Points for practitioners

• Biodiversity offset policy requires administrators to manage conflicting environmental and socioeconomic values.
• Technical decision tools reduce reliance on case-by-case decision-making, but multiple ambiguities persist.
• Backloading (post-approval condition-setting) defers values conflict, but reduces transparency, accountability, and policy effectiveness.
• Policy ambiguity must be reduced at the political level to facilitate effective biodiversity conservation.