They are using the term "hacking" to describe offensive penetration testing regarding security, not "hacking" as in the action of "creatively overcoming a problem" or just generally programming. One would think the paper would start by defining what "hacker" and "hacking" is referring to in the paper, but they don't seem to do that.