Cyber Security Ethics

Here are the options:

Investigate ~ Internal investigation, what have been breached?
Public ~ Go public, "We have been breached"
Prevent ~ What can we do to prevent it from happening again

What was the procedure after the incident?

• Investigate, Public, Prevent

  

  
• Public, Investigate, Prevent

  

  
• Public, Prevent, Investigate

  

  
• Prevent, Investigate, Public

  

  
• Investigate, Prevent, Public

  

  
• Prevent, Public, Investigate

  

  

What is Costin's opinion on malware whitelisting?

• It is general practice to whitelist specific malware

  

  
• It is ok, but only for very specific cases (e.g., state interests)

  

  
• Malware can only be whitelisted if the information is made public

  

  
• All malware should be detected