CSE3PE Ethics Case Study Essay Assignment

Do you want to get CSE3PE Ethics Case Study Essay Assignment Answer Help at a budget-friendly price? We have a team of experienced writers who provides you with guaranteed plagiarism free content with Case Study Assignment Help. For assignment related queries, you can contact us through live chat support. When you avail of our CSE3PE Ethics Case Study Essay Assignment Services, you can get in touch with Assignment Help Aus any time you want. Hurry up. Place your order now!

order-now

 

Assignment Details:

  • Words: 1000

 

Case Study: Ethics and Vulnerability disclosures

 

Background

 

The relationship between system vulnerabilities and ethical hackers (also known as security researchers) is a complex and interdependent one.

 

On one hand, it can be near-impossible for companies to develop complex systems and platforms without any vulnerabilities for hacking. It is why any of the apps or programs we use are regularly required to be updated: while at times it might be to release new features, more commonly it is to provide fixes for bugs or vulnerabilities.

 

The role of internal teams to identify bugs and vulnerabilities is limited as they can find it difficult to consider alternative perspectives on threat potential. Increasingly, third parties provide a role in identifying issues and disclosing these to companies so they can develop fixes.

 

Some companies have embraced this process, and many now provide vulnerability disclosure policies to provide guidance for ‘ethical’ hackers.

 

The role of third-party ethical hackers are to identify vulnerabilities and advise companies in an effort to

  1. improve the overall platform performance, and
  2. be rewarded for their efforts in identifying platform risks.

 

These rewards are often known as bounties

 

Typically, those who work in the space of identifying system vulnerabilities collaborate with the impacted platforms, with both parties benefiting from the reward of a more secure platform and a financial reward for the efforts of those identifying the issues.

 

Windows Zero-Day

 

On 22 November 2021 Bleeping Computer reported that security researcher Abdelhamid Naceri released what is known as a zero-day vulnerability relating to Windows 10, Windows 11, and Windows Server.

 

(A zero-day vulnerability is when a third-party releases details of a vulnerability publicly when there are no known fixes for the issue.)

 

In detailing the vulnerability, Naceri advised that threat actors with access to a device can elevate their privileges from a status of standard user to a system privilege, enabling greater ability to access and interfere with the impacted Windows systems.

 

Providing details of how to exploit a vulnerability without any known way to prevent it from happening puts all users of the impacted Windows systems at risk. This means that anyone with malicious intent could exploit the vulnerability and Microsoft would be unable to provide assurances to their enormous user base.

 

Within days, it was reported that threat actors had begun abusing the vulnerability with malware.

 

What motivated Naceri to take such an action?

 

Naceri defended the decision to release the details of the vulnerability because he was frustrated by Microsoft’s ‘decreasing payouts in their bug bounty program’. On Twitter, @MalwareTechBlog stated ‘Under Microsoft’s new bug bounty program one of my zerodays has gone from being worth $10,000 to $1,000’.

 

Source: Abram, L. (2021) New Windows zero-day with public exploit lets you become an admin, Bleeping Computer. Accessed 26 November 2021 https://www.bleepingcomputer.com/news/microsoft/new-windows-zero- day-with-public-exploit-lets-you-become-an-admin/

 

Assignment

 

This assignment is centred on the ethics of power and negotiation in IT. In this assignment you will write a 3-part report to analyse and respond to the ethical concerns around the topic identified in the case study.

 

To clarify, you are permitted to discuss the ethics of vulnerability disclosures and the relationships between large software/platform providers and security researchers/ethical hackers. You can draw on other examples of the ethics around these relationships outside of the Naceri/Microsoft example provided above.

 

Your assignment should include analysis of the problem from an ethical perspective, not from a technical perspective.

 

The assignment is to be delivered/submitted online through LMS. Your paper should include analysis of the issue and the response in a carefully considered series of steps.

 

Response Part 1: Establish the facts

 

  1. Outline a chronological sequence of relevant events of the issue and the actions that occurred after (i.e. as a consequence of the respective events you have outlined).
  2. Clearly state the ethical dilemma/s as you see
  3. Choose one ethical dilemma as the focus of your
  • State why you believe this ethical dilemma is the more important dilemma of the ones you have iden

 

Response Part 2: Analysing the ethical dilemma and options

 

  1. Come up with a list of the variety of ways you could resolve the dilemma, without judgement (even options you might immediately recognise as ‘wrong’)
  1. Assess the ethical dilemma from the perspectives covered in this Subject.

 

Law, guidelines, policies

 

    1. Does the law provide an answer to the ethical dilemma?
    2. Is there a violation of corporate or professional codes and responsibilities?
    3. Do informal guidelines (industry practice or culture, etc) provide guidance?

 

Ethical principles

 

  • Consequentialism
      1. Could an option to resolve the dilemma minimise harm or result in a better outcome for the people involved?
  • Deontology (and Kant’s Categorical Imperative)
      1. In the actions considered, are (human) rights being impacted? Are duties or responsibilities not being met?
      2. Would it be okay if everyone chose this option or acted in this way? Are people being treated as ends rather than means?
  • Virtue ethics
    1. Are actions to resolve the dilemma centred on the principles of fair play, trust, compassion, kindness at play?

 

Response Part 3: Your evaluation of the outcome 

 

  1. This section centres on your opinion based on the ethical analysis you have State your viewpoint on what you believe is the best way to resolve the dilemma, based on your analysis of the options and ethical considerations.
  • Be sure to elaborate in the context of two (2) theoretical approaches in ethics that have been discussed in this Subject.
  • Why do you think your recommendation is the morally right one to make?

 

Strategies for Approaching this Assignment

 

When considering this assignment, you need to answer the above 3 parts.

With any series of events – particularly when the issues at large are diverse, contentious, and hotly debated it is important that you remain impartial to the issues when you analyse it.

 

There will be many ethical issues involved with this assignment – however it is of critical importance that during your analysis you actively seek out the primary (i.e. the major or most important) ethical dilemma that is involved.

 

The basic way to determine which is the main (major) ethical dilemma is to list all the ethical issues/dilemma’s you can that are involved with the case in question, then, determine which ethical dilemma/issue that, if resolved, solves all or most of the other dilemmas or ethical issues than are involved in the case. Whichever ethical dilemma achieves this is the main ethical dilemma, which is what is required in Part 2, section 1 above.

 

You will notice that if a surface analysis is performed – the main ethical dilemma is generally not detected and it is only when a deeper analysis is performed that the major dilemma then becomes very evident/visible – and it is that dilemma that will generally solve many of the other ethical dilemmas. You may observe that many of these other dilemmas simply evaporate as a consequence of solving the main (or major) ethical dilemma.

 

Once having determined the main ethical dilemma you can then proceed with the analysis of the different ways to resolve the ethical dilemma. Assess each against the different guidelines (informal and formal) and ethical perspectives.

 

In Part 3 you are required to present your recommendation on the best way to resolve the ethical dilemma, stating your reasons why and drawing on the ethical frameworks covered in section 2. Why do you think your recommendation is the morally right one to make?

 

For REF… Use: #getanswers2002099