Blog series: Exploring cybersecurity discussion and human rights

Why Do We Need a New Definition for Cybersecurity?

This post originally appeared on the Freedom Online Coalition website.

The Freedom Online Coalition (FOC) is a partnership of 27 governments working to advance Internet freedom created in 2011. Coalition members spanning from Africa to Asia, Europe, the Americas, and the Middle East work closely together to coordinate their diplomatic efforts and engage with civil society and the private sector to support Internet freedom – freedom of expression, freedom of association, freedom of peaceful assembly, and freedom from arbitrary or unlawful interference with privacy – worldwide. In 2014, the Freedom Online Coalition established three working groups focusing on cybersecurity, on digital development and openness as well as on privacy and transparency online.

The primary purpose of FOC working group “An Internet Free and Secure” is to raise the profile of human rights as an integral consideration in cybersecurity policy-making. The working group’s goal is to build upon and advance existing cybersecurity policy-making efforts while increasing the priority placed on human rights protections, as a central concern to improve both security and promote the rights of individual internet users.

The first task of the working group was to generate a definition of cybersecurity. Why was a new definition of cybersecurity necessary? The term “cybersecurity” is used by different stakeholders to reference many different subjects often depending upon context, ranging from national security, to data security, to critical infrastructure security, and beyond. While it is true that numerous definitions relating to cybersecurity already exist, it is difficult to find any cybersecurity definitions that include clear commitments to and respect for human rights.

In order to enhance the quality of cybersecurity policy-making, the working group believed it crucial to put forth a human rights-respecting cybersecurity definition that others could adopt and integrate into policies and publications. Accordingly, in the fall of 2014, the working group developed and agreed to the following definition:

PREAMBLE: International human rights law and international humanitarian law apply online and well as offline. Cybersecurity must protect technological innovation and the exercise of human rights.

DEFINITION: Cybersecurity is the preservation – through policy, technology, and education – of the availability*, confidentiality* and integrity* of information and its underlying infrastructure so as to enhance the security of persons both online and offline.

*as defined by ISO 27000 standard which informed this process to ensure that the work of the technical community was adequately taken into account.

The definition includes three core elements:

  1. The ultimate goal of cybersecurity: “to enhance the security of persons both online and offline”;
  2. Articulation of how this ultimate goal and the dimensions of cybersecurity translate into technical terms: “cybersecurity is the preservation…of the availability, confidentiality and integrity of information and its underlying infrastructure”
  3. The means through which this goal is being achieved: “through policy, technology, and education” with the understanding that “policy” includes the law.

In developing the definition, the working group was driven by the belief that respecting human rights should be a central part of cybersecurity-related decision-making. Raising the profile of human rights protections in existing cybersecurity policy-making was seen as necessary to offset the current trend of addressing cybersecurity through the lens of national and international security. It was also seen as instrumental in reminding policy makers that cybersecurity must take into account security for individuals. In short, the working group tried to put forward a framing of cybersecurity that aims to promote a shift in perspective from a systems approach towards an approach that recognizes individual security as a core component of cybersecurity.

At the same time, rather than playing into a binary, zero-sum framing, common in many cybersecurity-related conversations, the definition supports the view that security and freedom (as well as cybersecurity and human rights) are deeply interrelated and synergistic, rather than zero-sum, and that cybersecurity and human rights protection are mutually reinforcing, interdependent, and both essential to promoting freedom and security.

Supporting and building on existing cybersecurity efforts in international fora, the working group decided to include a preamble stating that; “International human rights law and international humanitarian law apply online as well as offline.” This sentence is intended to emphasize the landmark resolution (A/HRC/20/8) adopted by the UN Human Rights Council in 2012 “affirm[ing] that the same rights that people have offline must also be protected online.” It also underscores the conclusion reached in 2013 by the UN Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security, that existing international law is applicable in cyberspace.

The definition also includes an assertion about the importance of technological innovation, which the working group sees as essential to the free flow of information, to the continued functioning of the open interoperable Internet as a platform for communication, and to the protection of both freedom and security.

Another intentional dimension of the definition was to include terminology that is well informed technically, and widely accepted by technical communities, so that it would provide a bridge between human rights policy and technical communities. The working group therefore relied on the International Organization of Standardization (ISO) 27000 standard to signal that the work of the technical community is adequately taken into account.

The working group’s hope is that policy makers and institutions utilize this human rights-respecting cybersecurity definition and integrate it into their work. Widespread adoption of this definition and approach could have the functional effect of breaking down policy-silo boundaries, dislodging the dominant zero-sum paradigm, and helping propagate the view that human rights and cybersecurity are mutually reinforcing, interdependent, and both essential to promoting freedom and security.

Bringing Clarity to Cybersecurity

This post originally appeared on the Freedom Online Coalition website.

It seems a day does not go by without a new story about cyberspace security: the data of fortune 500 companies breached; cyber espionage campaigns uncovered; shadowy hacker groups breaking into websites and posting extremist propaganda. And, since June 2013, a series of riveting disclosures from former NSA contractor Edward Snowden, which have captured the world’s attention and put a spotlight on the most powerful signals intelligence (SIGINT) agencies.

Cybersecurity is important to all of us because our lives are now enmeshed with digital information and communication technologies.  Our kids, our work, our livelihood — everything we do — now depends on instantaneous access to communications and information networks.

While everyone can readily agree that cybersecurity is critical, how to secure cyberspace, to what end, and for whom are all questions around which there is widespread controversy and disagreement.  For some, cybersecurity means securing the global communications infrastructure regardless of territorial boundaries, from the code to the satellites and everything inbetween.  For others, cybersecurity is about securing one government’s critical infrastructure first and foremost, with some even developing offensive weapons to exploit vulnerabilities in other government’s networks.  For yet others, the security of cyberspace is a function of an overarching concern with the security of human rights.

Moving from the “what” to the “how” of cybersecurity brings yet more confusion: In what forums are the most important decisions around cybersecurity taken? Who is permitted to participate in those forums?  As cyberspace deepens and expands, these issues are becoming more complex. Staying on top of and engaging all of these different forums is a growing challenge for all stakeholders.

In attempt to bring clarity to these issues, the Freedom Online Coalition (FOC) has created a working group on “Internet Free and Secure” in the lead-up to the next meeting of the FOC in Mongolia in May 2015.  I am pleased to co chair that working group with Simone Halink from the Dutch Foreign Ministry.  A description of the working group can be found here.

As part of our working group’s outputs, we are producing a blog series (of which this post is the first).  Subsequent posts will be written by other working group members (or guest authors), and will cover a range of topics related to cybersecurity including discussions taking place at the ITU, the UN, the London Cyber Process, NATO, OSCE, WSIS, the IGF, and other regional forums.  Our aim (as we outlined it in our first working group meeting) is to create a blog series “that would serve as a platform to explore in depth the existence, relevance, and status of various spaces where cybersecurity issues are being discussed” and provide “a way to share this information with the broader community and highlight potential avenues for greater civil society engagement.” In an effort to add value to the ongoing work on cybersecurity done elsewhere, other activities undertaken by the working group include refining the definition of cybersecurity, developing a visual overview of relevant global spaces where cybersecurity debates are taking place, and advancing the normative debate on cybersecurity.

The working group represents a diverse group of stakeholders, including representatives from civil society and government.  No doubt, with such a diverse group we are going to have some views that overlap, but also some disagreement. (I recently outlined my own views on what I think are the most important concerns around cybersecurity today, which can be found here).   While we may not agree entirely on all of the outstanding questions around cybersecurity, we hope to generate through this series of blog posts some interesting insights.

buy abilify buy accutane buy aceon buy aciphex buy actos buy adalat buy aggrenox buy albenza buy aldactone buy alesse buy allegra buy alprostadil buy altace buy amalaki buy amaryl buy amoxil buy anafranil buy antabuse buy arava buy arcoxia buy aricept buy arjuna buy artane buy asacol buy astelin buy atarax buy augmentin buy avalide buy avapro buy avelox buy avodart buy ayurslim buy azulfidine buy bactrim buy bactroban buy benicar buy betagan buy betnovate buy biaxin buy bimatoprost buy botox buy brahmi buy buspar buy bystolic buy calan buy cardura buy casodex buy cefixime buy ceftin buy celebrex buy celexa buy cenforce buy chloromycetin buy cialis buy cipro buy clarinex buy claritin buy cleocin buy clomid buy combivir buy copegus buy cordarone buy coreg buy coumadin buy cozaar buy crestor buy cymbalta buy cytoxan buy deltasone buy depakote buy desyrel buy detrol buy diabecon buy diamox buy diflucan buy diovan buy duphaston buy duricef buy effexor buy elavil buy eldepryl buy epivir buy eulexin buy evecare buy evista buy exelon buy famvir buy feldene buy flagyl buy fliban buy flomax buy flonase buy floxin buy geodon buy glucophage buy glucotrol buy glucovance buy grifulvin buy guduchi buy haridra buy himplasia buy hytrin buy hyzaar buy ilosone buy imdur buy imitrex buy imodium buy inderal buy indocin buy janya buy kapikachhu buy karela buy keflex buy kemadrin buy lamictal buy lanoxin buy lasix buy lasuna buy levaquin buy levitra buy lexapro buy lioresal buy lipitor buy lopid buy lopressor buy lozol buy luvox buy manjishtha buy megaslim buy menosan buy meshashringi buy mestinon buy metaglip buy micardis buy micronase buy microzide buy minipress buy mobic buy moduretic buy motilium buy motrin buy myambutol buy mysoline buy naprosyn buy neem buy neurontin buy nexium buy nizoral buy nolvadex buy noroxin buy norvasc buy omnicef buy oxytrol buy pamelor buy paracetamol buy parlodel buy paxil buy penisole buy periactin buy persantine buy plavix buy ponstel buy prandin buy precose buy prednisone buy prevacid buy priligy buy prilosec buy prograf buy propecia buy proscar buy protonix buy provestra buy punarnava buy rebetol buy reglan buy requip buy retrovir buy risperdal buy rulide buy serevent buy seroquel buy shallaki buy shatavari buy shigru buy sinemet buy sinequan buy singulair buy speman buy sporanox buy starlix buy strattera buy stromectol buy sumycin buy suprax buy sustiva buy symmetrel buy tegretol buy tenoretic buy terramycin buy tofranil buy topamax buy trandate buy trental buy tricor buy trikatu buy trileptal buy triphala buy tulasi buy urispas buy uroxatral buy valtrex buy vantin buy vasaka buy vasotec buy ventolin buy vermox buy viagra buy vigorelle buy vigrx buy voltaren buy vrikshamla buy vytorin buy wondersleep buy xenical buy zanaflex buy zantac buy zebeta buy zestoretic buy zetia buy ziac buy zithromax buy zocor buy zofran buy zoloft buy zovirax buy zyloprim buy zyrtec viagra

amox-clav 875-125 mg tablet buy cialis cialis for daily use daily cialis viagra without a doctor prescription usa natural viagra cialis from canada viamedic cialis viagra samples viagra savings offer trial viagra sample sex viagra for women cialis professional cost of viagra amoxycillin viagra cialis natural viagra alternatives that work cialis daily otc viagra what is cialis is viagra government funded in america amoxicillin uti cialis 20mg directions viagra coupons cialis voucher amox/k clav 875-125 cialis coupons printable amoxicillin 500 mg for sinus infection amoxicillin clavulanate discount cialis does viagra work amoxidal amoxicillin dosing cialis patent expiration date extended what is amoxicillin viagra prices without insurance amox-clav 875-125 mg sophia viagra amoxacilin axlotl cialis prices sildenafil vs viagra where to buy viagra cialis coupons from manufacturer revatio vs viagra cialis cost cialis canada viagra costs buy viagra online anadrol generic cialis at walmart canadian cialis cialis testimonials cialis for sale augmentin 875-125 side effects of amoxicillin cialis or viagra cialis generic availability viagra on line no prec what is anoxia amoxi cialis free trial cialis dosage recommendations amoxicillin/clavulanic acid amoxil dosage non prescribed viagra cilias cialis 20 mg amoxicillian axoloti viagra online amoxicillin 500mg cialis trial wholesale cialis cialis cheap cialis reviews viagra government funding viagra government funded viagra cost viagra pill side effects of cialis viagra vs cialis cheap viagra viagra side effects cialas cialis for men amoxicillan axolotyl cialis coupons healthy man viagra cialis patent expiration cialis coupon 20 mg canada cialis amoxicillin 500 mg amox clav 875 amoxicillin for cats cialis side effects mexican salamander when will cialis go generic cialis online amoxicillin medscape viagra pills cialis pills for sale cialis sample amoxin liquid cialis female viagra pills cialis effects over the counter viagra viagra best price viagra dosage cialis 10 mg cialis savings card viagra single packs viagra without prescription cialis generic tadalafil viagra ingredients dosage of amoxicillin how much does viagra cost viagra pills for sale cialis coupon print amox order online viagra cialis pills viagra from amazon cialis copay card best price viagra mexican walking fish viagra 100mg price walmart amoxicillin and clavulanate potassium 875 125 viagra coupons 75 off augmentin drug class viagra price amoxicillin 250mg generic cialis tadalafil cialis pricing amoxil 500 mg amoxicillin tablets viagra porn augmentin 500 cialis otc cialis generic cialis discount discount viagra viagra substitute viagra 100mg tablets retail price axolotl amoxcillin tamoxifen viagra coupon amox clav 875-125 viagra sex cialis 30 day sample what does viagra do is viagra funded by government herbal viagra amoxicillin dosage amoxicilin cialis 5mg amoxicillin 500 mg and alcohol online viagra cialis medication cyalis cialis for women viagra without a doctor prescription amoxil cialis website walgreens viagra substitute canadian viagra viagra pharmacy viagra for women side effects of amoxicillin 500 mg how does viagra work viagra single packs cost cialis coupons 2017 amox-clav 875-125 utilisation viagra cialis samples overnight side effect of amoxicillin viagra girls lowest cialis prices viagra generic how much does cialis cost moxil women viagra viagra cheap cialis female viagra amoxicillin side effects in men buy viagra generic for cialis cialis 20mg amoxicillin side effects in women amoxicillin rash how long does viagra last amoxillin is viagra federally funded side effects of viagra viagra patent expiration cialis cialis 5 mg amoxicillin 875 mg is viagra covered by insurance viagra vs cialis viagra canada cialis or viagra axoltl cialis dosage strengths levitra vs viagra cialis on line cost of cialis viagra dose cialis price cialis vs viagra amoxicilina cialis tadalafil cialis coupon cialis samples canada viagra what is viagra viagra prices viagra from canada axolotls cialis without a doctor’s prescription amoxicillin 500 free cialis generic viagra available in usa generic for viagra amovil inexpensive viagra pills cialis for bph cialis alternative trimox generic cialis xolotl cealis amoxicillin viagra activate amoxicillin trihydrate 500mg what is amoxicillin used for cialis patent expiration 2017 viagra alternatives does the government fund viagra generic viagra viagra vs cialis vs levitra how does cialis work is viagra government funded stendra vs viagra amoxicillin side effects cialis canadian pharmacy cialis 30 day trial coupon viagra on line cialis dosage cialis vs viagra how to take cialis augmentin dosage pfizer viagra cvs pharmacy viagra coupons 200 cialis coupon axolot pfizer viagra coupons price cialis erectile dysfunction cialis viagra for sale viagra coupons from pfizer buy cialis online generic viagra 100mg online cialis free viagra cialis pharmacy prices cialis 5mg daily amoxicillin 500mg capsules amoxicillin uses

prednisone keflex cymbalta prednisone viagra viagra prednisone prednisone cymbalta levitra prednisone prednisone viagra viagra viagra viagra keflex viagra prednisone viagra prednisone cymbalta prednisone prednisone prednisone keflex viagra prednisone prednisone prednisone prednisone prednisone viagra prednisone viagra cymbalta viagra prednisone keflex viagra prednisone prednisone viagra cymbalta viagra keflex viagra prednisone levitra keflex prednisone levitra keflex keflex keflex viagra viagra prednisone viagra viagra cymbalta viagra viagra viagra viagra cymbalta viagra prednisone viagra viagra viagra viagra viagra viagra cymbalta prednisone cymbalta prednisone viagra prednisone viagra viagra viagra viagra viagra viagra prednisone prednisone viagra cymbalta cymbalta viagra viagra prednisone cymbalta viagra prednisone prednisone keflex prednisone cymbalta prednisone viagra prednisone viagra cymbalta cymbalta viagra cymbalta viagra viagra prednisone prednisone viagra viagra viagra prednisone viagra cymbalta keflex levitra cymbalta viagra levitra prednisone prednisone viagra cymbalta keflex viagra viagra viagra prednisone cymbalta cymbalta prednisone prednisone keflex viagra prednisone viagra viagra cymbalta cymbalta viagra cymbalta cymbalta cymbalta viagra cymbalta prednisone viagra viagra viagra viagra viagra cymbalta viagra cymbalta viagra levitra prednisone prednisone prednisone cymbalta keflex viagra viagra cymbalta viagra viagra levitra viagra keflex cymbalta viagra cymbalta viagra prednisone cymbalta prednisone prednisone cymbalta cymbalta viagra viagra prednisone levitra levitra cymbalta prednisone viagra viagra viagra viagra viagra prednisone prednisone prednisone viagra viagra prednisone prednisone prednisone viagra prednisone cymbalta viagra viagra prednisone cymbalta keflex levitra viagra levitra cymbalta viagra viagra viagra viagra prednisone prednisone prednisone viagra viagra keflex viagra prednisone prednisone viagra prednisone viagra prednisone keflex viagra prednisone viagra viagra viagra cymbalta viagra cymbalta levitra viagra viagra prednisone viagra levitra viagra cymbalta viagra viagra