[LINK] RFI: Legality of Pentesting

[Roger Clarke]

Australia's infosec students prepare for cyber battle
Allie Coyne
itNews
3 September 2015
http://www.itnews.com.au/news/australias-infosec-students-prepare-for-cyber-battle-408850

... teams will be asked to demonstrate the ability to break into networks, systems and web applications ...

... The students will be tasked with thoroughly assessing the enterprise's systems by pentesting its web-based intranet and corporate network ...


[I wonder how the Cyber Security Challenge stacks up against the computer crimes provisions in the Criminal Code Act 1995, Schedule 1 at ss. 476-478 and the Telecommunications offences at ss. 473-475
http://www.austlii.edu.au/au/legis/cth/consol_act/cca1995115/sch1.html

[Is there an 'it's okay with consent' clause?

[Or does the competition rely on some 'it's okay if the government breaks the law' provision?


[For clarity:  I think pentesting, and student competitions, are good things.]


-- 
Roger Clarke                                 http://www.rogerclarke.com/
			            
Xamax Consultancy Pty Ltd      78 Sidaway St, Chapman ACT 2611 AUSTRALIA
Tel: +61 2 6288 6916                        http://about.me/roger.clarke
mailto:Roger.Clarke at xamax.com.au                http://www.xamax.com.au/

Visiting Professor in the Faculty of Law            University of N.S.W.
Visiting Professor in Computer Science    Australian National University