Legal exam useful

BASICS:
https://treaties.un.org/doc/publication/ctc/uncharter.pdf

Article 2 (4)
All Members shall refrain in their international relations from the threat or use of force against the territorial integrity or political independence of any state, or in any other manner inconsistent with the Purposes of the UnitedNations
Article 51
Nothing in the present Charter shall impair theinherent right of individual or collective selfdefenseif an armed attack occurs against a Mem10her of the United Nations, until the Security Councilhas taken the measures necessary to maintaininternational peace and security. Measures takenby Members in the exercise of this right of selfdefenseshall be immediately reported to the SecurityCouncil and shall not in any way affect thea uthority and responsibility of the Security Council under the present Charter to take at any time such action as it deems necessary in order to maintainor restore international peace and security.

Sources of international law
Article 38(1) of the Statute of the International Court of Justice:
a) international conventions, whether general or particular,establishing rules expressly recognized by the contesting states;

b) international custom, as evidence of a general practice accepted as law;()
(smthg what is not written down on the paper)
c) the general principles of law recognized by civilized nations;

d) subject to the provisions of Article 59, judicial decisions and the teachings of the most highly qualified publicists of the various nations, as subsidiary means for the determination of rules of law

internationnal law is not perfect, but it is the best tool, on which all states agreed.

National strategies:

 https://moodle.hitsa.ee/pluginfile.php/2510099/mod_resource/content/1/Presentation_Cybersecurity%20strategies%20and%20soft%20law%20instruments.pdf

National Cyber Security Framework Manual (NATO CCD COE 2012)URL
helping toformulate a conceptual picture of what ‘national cyber security’ can entail. History of internet is mentioned as well as numbers (written in 2012)
 ITU “Cyberspace is more than the internet, including not only hardware, software and information systems, but also people and social interaction within these networks. “
ISO “‘the complex environment resulting from the interaction ofpeople, software and services on the internet by means of technology devices andnetworks connected to it, which does not exist in any physical form”

Basically the definition differs by country, the definitions are also constantly changing.

” the highest risk factors in the supply chain are‘after build’ (e.g., during the install and operate and retire phases) because thisis where multiple vendors participate in the process (“
“more than 50 nations have published some form of a cyber strategy defining what security meansto their future national and economic security initiatives.”

definitions of security
CYBER CRIME, Cyber ESPIONAGE, Cyber WARFARE
“In general, there is agreement that cyber activities can be a legitimate military activity, but there is no global agreement on the rules that should apply to it. “

NATIONAL CYBER SECURITY
table comparing strategies
“The Netherlands was one of the first countries to move away from a threat-basednational security picture to a more ‘risk’ based view”

Cyberspace is viewed as an operational domain of military operations, equal to land, air, sea and space.

three dimensions: Governmental, International, National

five mandates’:Military Cyber, Counter Cyber Crime,Critical Infrastructure Protection and National Crisis Management,Cyber Diplomacy’ and Internet Governance: and the

five dilemmas
1) Stimulate the Economy vs. Improve National Security
2) Infrastructure Modernisation vs. CriticalInfrastructure Protection
3) Private Sector vs. Public Sector
4) Data Protection vs. Information Sharing
5) Freedom of Expression vs. Political Stability

EU cyber strategy
The EU adopted a cybersecurity strategy in 2013. Cybersecurity is a combination of technical, socio-economic, ethical and jurisdictional challenges.
GDPR
personal data which are now the most sensitive, such as religion, health and sexual orientation can be better described in terms of”intimacy” rather than privacy
Cybersecurity industry
“Europe has excellent research and development capacities, but many of the global leaders providing innovative ICT products and services are located outside the EU. It is key to ensure that hardware and software components produced in the EU and in third countries that are used in critical services and infrastructure and increasingly in mobile devices are trustworthy, secure and guarantee the protection of personal data”

Trust and security
about establishing trust in online systems. More trust does not necessarily mean more cybersecurity. The real issue is that too much trust exacerbates vulnerabilities. Some academics have put it in striking terms, such as “trust is bad for security”33. Placing more trust in the system does not necessarily make it more secure.
Cryptographic standards and backdoors
Backdoors can harmsmall business and producers, who may suffer more from a loss ofconsumers trust, because consumers can more easily turn away to othercompetitors than in cases of big companies that cannot be so easilyreplaced or where there are no real alternative solutions/providers.

HARD/SOFT LAW
if you break hard law, one of the consequences can be jail. Not possible to request them strictly. No real sanctions for violating soft law, not binding. For example African union convention of cyber security. 
https://en.wikipedia.org/wiki/Soft_law

OVERVIEW OF CYBER DIPLOMATIC INITIATIVES
https://moodle.hitsa.ee/pluginfile.php/2505208/mod_resource/content/2/GCSC-Briefings.pdf

RUSSIA CHINA INDIA – social media can inflame socal tenson, should be considered as threat.
RUSSIA, CHINA – content transmitted online can be a threat

Cyber sec conventoin in the close future – unlikely