041| The Ethics of Red Teaming

<p>Red team testing is somewhat intrusive by nature, as it involves breaking into companies - albeit at their request - to help them improve their security. Red teamers must bluff their way past receptionists and hack into employee computers, things that would put anyone else in a lot of trouble. At what point do red teaming activities cross the line into being unethical, or even criminal? F-Secure's veteran red teamer <a href= "https://twitter.com/0xtosh?lang=en" target="_blank" rel= "noopener">Tom Van de Wiele</a> stopped by to share what a red teamer is <em>not</em> willing to do in the name of security, why cyber security experts need a sense of ethics, and how red teamers and companies alike can make sure that their own ethical concerns are addressed.</p> <p><strong>Links:</strong></p> <p><a href="https://blog.f-secure.com/podcast-red-teaming-ethics/" target="_blank" rel="noopener">Episode 41 transcript</a></p> <p><a href= "https://www.f-secure.com/en/consulting/our-thinking/guide-to-rainbow-teaming" target="_blank" rel="noopener">The F-Secure Guide to Rainbow Teaming</a></p>