Wassenaar agreement will limit the indiscriminate sale of exploits

The Wassenaar Agreement , which controls the export of weapons and technology related to them to the US & EU, has been supplemented with an additional clause. It is a question that now under the control falls software that is of the type of so-called. Dual-use technologies ( dual use technologies ): 0day exploits, software with spyware (spyware, backdoors), and also essentially any software that is developed by private companies not for public use, and it can be exported to other countries.



Now companies that are engaged in the development of this type of software will have to coordinate with the state. the authorities of their country, the software technologies they export to other countries, including when it comes to special competitions like Pwn2Own, at which 0day exploits are presented. Exploits can potentially be used as offensive weapons and their export will be controlled in the countries mentioned above.
')
The document, which was adapted to reflect these changes, contains the following formulations defining the concept of the software that falls under control (cyber-weapon).

Intrusion software (offensive software) :
“Software” has been designed to ensure that it is not possible to protect it.
a. It can be taken from a computer or network device; or
b. There are also instructions.

IP network surveillance systems (spyware)
5. A. 1. j. IP network communications surveillance systems or equipment, and specially designed the components therefore,:
1. Performing all IP network backbone (eg, national grade IP backbone):
a. Analysis at the application layer (eg, Layer 7 of the Open Systems Interconnection (OSI) model (ISO / IEC 7498-1));
b. Extraction of selected metadata and application content (eg, voice, video, messages, attachments); and
c. Indexing of extracted data; and
2. Being specially designed to carry out all of the following:
a. Execution of searches on the basis of hard selectors; and
b. Mapping of the group of people.

Thus, the regulator (state bodies) of the US and the EU take control of digital technologies, which today are already weapons in cyberspace. The Wassenaar Agreement is intended to limit the scope for private companies to sell the technologies they develop to those countries that are in conflict with NATO or the EU (or sanctions have been imposed on them).