A company notices a drift in model performance due to suspicious alterations of the source data. It hires a specialist to test the security of its…

A white hat hacker, also known as an ethical hacker, is a cybersecurity professional who is legally authorized by an organization to attempt to penetrate its computer systems, networks, and applications. The goal is to identify security vulnerabilities before malicious actors (black hat hackers) can exploit them. The specialist in the scenario is hired by the company to perform exactly this function: test security and find vulnerabilities. This authorized and defensive purpose is the defining characteristic of a white hat hacker.

A. Black hat hacker: Acts maliciously and without authorization to exploit vulnerabilities for personal gain, which is the opposite of being hired to help.

C. Hacktivist: Is motivated by political or social causes to disrupt systems, not by a professional contract to improve a company's security.

D. Industrial spy: Steals proprietary information from a company to benefit a competitor or another entity, not to help the targeted company.

1. University Courseware: In the course materials for "Computer Systems Security," MIT defines the roles of security professionals. White hat hackers are described as those who "use their skills for good" by helping organizations, contrasting with black hat hackers who act maliciously. This aligns with the hired specialist's role.

Source: Saltzer, J. H., & Kaashoek, M. F. (2009). Principles of Computer System Design: An Introduction. Morgan Kaufmann. (Textbook frequently used in courses like MIT's 6.858 Computer Systems Security). Chapter 11, Section 11.1, "Security Goals."

2. Peer-Reviewed Academic Publication: Research on cybersecurity ethics clearly distinguishes hacker types. White hat hackers are defined by their authorization and intent. "The white hat hacker has authorization to perform the security assessment. The main difference between a white hat hacker and a black hat hacker is the motive and the explicit permission from the organization."

Source: Pashel, B. (2006). Teaching students ethical hacking techniques. Journal of Digital Forensics, Security and Law, 1(4), Article 4. Page 4, Paragraph 2. https://doi.org/10.15394/jdfsl.2006.1012

3. Official Vendor/Government Documentation: The National Institute of Standards and Technology (NIST) outlines methodologies for security assessments. These assessments, often called penetration tests, are conducted by authorized personnel to identify system vulnerabilities. This practice is the core function of a white hat hacker.

Source: National Institute of Standards and Technology (NIST). (2008). Special Publication 800-115: Technical Guide to Information Security Testing and Assessment. Section 2.3, "Security Testing," describes the authorized activities performed by security professionals to evaluate system security.