whitehat
Security researcher type
A whitehat is a computer hacker who uses their skills ethically, typically to find security vulnerabilities before malicious actors can exploit them.
The term comes from old Western films where heroes wore white hats and villains wore black ones.
Whitehat hackers often work for companies as security consultants or participate in bug bounty programs, getting paid to identify weaknesses in systems.
The company hired a whitehat to test their network defenses.
As an adjective, whitehat describes ethical hacking practices or security research conducted with permission.
Authorized security vulnerability assessment
- ethical hackingAuthorized security vulnerability testing
- bug bountyReward for finding vulnerabilities
- red teamSimulated attackers testing defenses
- capture the flagTeam infiltration contest
proof of concept · zero-day · reconnaissance · social engineering · payload · backdoor · privilege escalation · reverse engineering
Granted right to act
- authorizationFormal permission granted
- legalPermitted by statute
- consentVoluntary agreement given
- integrityMoral soundness and consistency
transparency · accountability · trustworthy · professional · code of conduct · scope · rules of engagement · constructive
Network access control system
- intrusion detectionSpotting unauthorized access attempts
- encryptionConverting data into code
- hardeningBecoming less soft
- access controlRestricting resource availability selectively
authentication · risk assessment · network security · compliance
Expert evaluating protective measures
- security analystExpert evaluating protective measures
- security researcherOne who finds system vulnerabilities
- compliance officerOversees organizational rule-following
- bug hunterOne who finds software flaws
forensic analyst · security engineer · infosec · certification · freelance · contractor
penetration testing
Authorized security vulnerability assessment
- ethical hackingAuthorized security vulnerability testing
- bug bountyReward for finding vulnerabilities
- red teamSimulated attackers testing defenses
capture the flag · proof of concept · zero-day · reconnaissance · social engineering · payload · backdoor · privilege escalation · reverse engineering · fuzzing
permission
Granted right to act
- authorizationFormal permission granted
- legalPermitted by statute
- consentVoluntary agreement given
integrity · transparency · accountability · trustworthy · professional · code of conduct · scope · rules of engagement · constructive · remediation
firewall
Network access control system
- intrusion detectionSpotting unauthorized access attempts
- encryptionConverting data into code
- hardeningBecoming less soft
access control · authentication · risk assessment · network security · compliance
security consultant
Expert evaluating protective measures
- security analystExpert evaluating protective measures
- security researcherOne who finds system vulnerabilities
- compliance officerOversees organizational rule-following
bug hunter · forensic analyst · security engineer · infosec · certification · freelance · contractor