Mouton, FrancoisMalan, Mercia M.Kimppa, Kai K.Venter, H.S. (Hein)2015-11-052015-11Mouton, F, Malan, MM, Kimppa, KK & Venter, HS 2015, 'Necessity for ethics in social engineering research', Computers and Security, vol. 55, pp. 114-127.0167-4048 (print)1872-6208 (online)10.1016/j.cose.2015.09.001http://hdl.handle.net/2263/50364Social engineering is deeply entrenched in the fields of both computer science and social psychology. Knowledge is required in both these disciplines to perform social engineering based research. Several ethical concerns and requirements need to be taken into account when social engineering research is conducted to ensure that harm does not befall those who participate in such research. These concerns and requirements have not yet been formalised and most researchers are unaware of the ethical concerns involved in social engineering research. This paper identifies a number of concerns regarding social engineering in public communication, penetration testing and social engineering research. It also discusses the identified concerns with regard to three different normative ethics approaches (virtue ethics, utilitarianism and deontology) and provides their corresponding ethical perspectives as well as practical examples of where these formalised ethical concerns for social engineering research can be beneficial.en© 2015 Elsevier Ltd. All rights reserved. Notice : this is the author’s version of a work that was accepted for publication in Computers and Security. Changes resulting from the publishing process, such as peer review, editing, corrections, structural formatting, and other quality control mechanisms may not be reflected in this document. Changes may have been made to this work since it was submitted for publication. A definitive version was subsequently published in Computers and Security, vol. 55, pp.114-127, 2015. doi : 10.1016/j.cose.2015.09.001.ConsequentialismDeontologyEthical concernsEthicsPenetration testingPublic communicationSocial engineeringSocial engineering researchUtilitarianismVirtue ethicsPostprint Article