A digital society depends on secure information technology systems and processes. However, IT security research, which makes a considerable contribution to IT security, is exposed to serious legal and, above all, criminal law risks. There is therefore a need for viable yet scientifically sound mitigation of such risks. This volume is dedicated to a thorough analysis of this problem and possible solutions. It originates from a workshop held at and funded by the Center for Advanced Internet Studies (CAIS) in Bochum.