Recognizing and responsibly dealing with IT security gaps

Karlsruhe, 22th of April 2025 — IT security gaps affect us all. Whether in a private, a corporate, or a governmental environment - as soon as vulnerabilities can be exploited, the risk increases for everyone involved.

How can such risks be identified at an early stage and effectively limited? This is precisely what our publication “Verantwortungsbewusster Umgang mit IT-Sicherheitslücken: Problemlagen und Optimierungsoptionen für ein effizientes Zusammenwirken zwischen IT-Sicherheitsforschung und IT-Verantwortlichen“ is about.

Dr. Oliver Vettermann, a researcher at FIZ Karlsruhe’s Intellectual Property Rights unit, has, together with other experts, created a practical overview. The book shows how responsible security research works, what legal framework conditions apply - and what ethical hacking can achieve. Among other things, it covers case studies, structural contexts and the most important legal regulations.

The publication has been released as volume 4 of the series “digital/recht - Staat und digitale Gesellschaft”. It is aimed at anyone interested in IT security, digital responsibility and dealing with vulnerabilities.

A PDF of the publication is available at 
https://digitalrecht-oe.uni-trier.de/index.php/droe/catalog/view/9/8/59