Attempts to duplicate the intent and actions of black

hat hackers without causing harm

Conducts penetration tests to determine what an

attacker can find out about an information system during the reconnaissance and

scanning phases

An individual who uses his or her capabilities for

harmful purposes against computer systems

Operates with the permission and knowledge of the

organization they are trying to defend