Traditional principles of scientific ethics for studies involving people are primarily designed to address direct human-centered research. However, online research in cybersecurity is inherently data-centered in nature. Consequently, cyber-researchers often operate with limited awareness or oversight of the potential human risks and effects of their activities. Newly proposed changes in the US policies and regulations governing human studies are likely to have a significant impact on the online research community. Furthermore, given the inherently transnational nature of online studies, there is a pressing need for harmonizing ethics observance regulations and guidelines for security research on virtual worlds, social network systems, and other cyber-environments across multiple jurisdictions.
