Legal Aspects of Cybersecurity Artur Appazov

---

1 
Legal Aspects of Cybersecurity 
Artur Appazov 
Faculty of Law 
University of Copenhagen 
2014

---

2 
Contents 
1 
Purpose and Scope ......................................................................................................................................................... 3 
2 
Executive Summary ....................................................................................................................................................... 4 
3 
General Introductory Remarks ................................................................................................................................. 5 
4 
Legal Problematics ......................................................................................................................................................... 9 
4.1 
Sovereignty and Jurisdictional Fragmentation ..................................................................................... 10 
4.2 
Attribution: Determining the Responsibility for Harmful Conduct .............................................. 11 
5 
Cybersecurity as an Umbrella Concept .............................................................................................................. 14 
5.1 
Cybercrime and Cybercrime Tools ............................................................................................................. 22 
5.2 
Hacking and Hacktivism ................................................................................................................................. 27 
5.3 
Cyberwar and Cyberterrorism ..................................................................................................................... 31 
5.4 
Cyberespionage – the Advanced Persistent Threat ............................................................................. 33 
6 
Legal Solutions and Strategies ............................................................................................................................... 34 
6.1 
Criminalization ................................................................................................................................................... 36 
6.2 
Hacktivism and Criminalization .................................................................................................................. 37 
6.3 
Procedure and Evidence ................................................................................................................................. 38 
6.4 
Harmonization of Laws ................................................................................................................................... 40 
6.5 
Incident Reporting and Information Sharing ......................................................................................... 41 
6.6 
Institutional Arrangements for Cybersecurity Bureaucracy ........................................................... 42 
6.7 
Personnel Recruitment and Educational Training .............................................................................. 45 
7 
Technical Solutions ..................................................................................................................................................... 46 
7.1 
Defense and Monitoring Systems ................................................................................................................ 46 
7.2 
Standardization and Air-Gapped Networks ........................................................................................... 47 
8 
Policy Considerations ................................................................................................................................................ 48 
8.1 
Vulnerability Mitigation and Threat Deterrence .................................................................................. 50 
8.2 
Private-Public Sector Dynamic .................................................................................................................... 53 
9 
International Cooperation in Criminal Matters .............................................................................................. 56 
10 
Treaty-Based Approach to Cybersecurity and Cybercrime .................................................................. 62 
11 
General Recommendations ................................................................................................................................ 66 
12 
Bibliography and Consulted Literature ......................................................................................................... 68 

---

3