The General Assembly;
Noting the proliferation of electronic attacks as an alternative to conventional warfare, capable of damaging nation-states’ critical infrastructure without great loss of life, and
Seeking to ensure that these attacks remain discriminate in their application,
Hereby:
- Defines:
- "cyberattack" as any unauthorised disruption of a computer system where digital input is executed to destroy, deny service by, gain unauthorised access to, or otherwise compromise a computer system or related infrastructure, and
- "cyberwarfare" as any cyberattack or series of cyberattacks primarily made, sponsored, or encouraged by national, state, local or otherwise government-based actors;
- Resolves that:
- member states must not conduct cyberwarfare on any legitimate medical institutions or civilian infrastructure,
- member states must not conduct cyberwarfare on any individual citizens of a nation, except where:
- the individual is a member of that nation’s military, or
- the individual is a member of that nation’s government or direct governmental staff, or
- the individual is actively involved in conducting attacks of any sort on the member state, its citizens, any of the member state's treatied allies, or any of the member state's treatied allies' citizens, or
- conducting cyberwarfare against that individual is absolutely necessary to prevent imminent loss of life, or
- conducting cyberwarfare against that individual constitutes enforcing extant WA legislation;
and the information or infrastructure targeted by the member state's cyberwarfare is immediately relevant to the grounds for attacking that individual,
- member states must limit the damage caused by cyberwarfare they conduct, with the goal of limiting further cyberattacks or exploitation by opportunistic third parties, and
- member states must neither enable nor encourage non-compliant nations to conduct cyberwarfare.
