united-states hacking digital-forensics
Ethical Hacking
<p>How is Ethical Hacking (Certified Ethical Hackers) defined by U.S. law? </p>

<p>Is there any law which protects an Ethical Hacker for helping to find out bugs and security loopholes in online/digital services being used by a corporation/government agency?</p>

<p>What is the stand of other countries on this matter?</p>

<p>In regards to U.S. Law to be employed by the government. You would need to be certified to DoDD8570 specs. Here is a <a href="https://www.sans.org/media/dod8570/dod8570.pdf">baseline</a> to understand what certifications are required depending on the role you are looking to be gainfully employed. These mostly require being <a href="http://www.giac.org">GIAC</a> certified among some of the other certifications.   </p>

<p>In regards to becoming a "Certified Ethical Hacker", you would need to pass the CEH test by the <a href="http://www.eccouncil.org/Certification/certified-ethical-hacker">ECCouncil</a>. </p>

<p>As for laws protecting "Ethical Hackers", there really isn't any. The law which applies is mostly for prosecuting criminal acts. Not really for the protection of the security consultant. This law is called <a href="http://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act">Computer Fraud and Abuse Act</a> in the U.S. and in the U.K. the <a href="http://en.wikipedia.org/wiki/Computer_Misuse_Act_1990">Computer Misuse Act 1990</a>.</p>
