International
Telecommunication
Union (ITU)
Background Guide Topic:

Combating Cyberattack

Director’s Note
Welcome to the ITU Japan Metropolitan Model United Nations Conference! My name is
Imari Nagase and I am beyond thrilled to be this year’s Intermediate Director. I cannot wait tosee you all virtually!
I was born in Japan and spent six years in an international school. Becoming friends withpeople from diverse nationalities was an experience that could not be replaced, and was one of
the incentives for me to join the MUN club. I am so grateful to be able to chair this conference
even with the delegates who live thousands of miles away from Japan. Sadly, due to the ongoingpandemic, many of us have lost the chances of directly meeting other delegates from around theworld. I was also helpless to attend Global Classrooms International MUN in 2020. However, I
have been engaged with various MUN club activities since my first year in Senzoku Gakuen.
Along my MUN journey, I was able to encounter amazing people and open my eyes to thechallenges society faces today. This is my first time chairing or directing a formal conference,but along with the two co-directors of this committee, we can bring you all a fun and memorable
experience!
With more than 4 billion people having access to the internet, cyberthreats have become apressing issue for not only governments, but also to each and every individual. Moreover, social
media plays a role in allowing hackers to target and exploit the vulnerable. I am afraid even I
have received a few sketchy emails that claim I can win a thousand dollars if I click on a red
button. Because it is an issue that pertains to all sorts of stakeholders, I highly encouragedelegates to research this topic from all sorts of angles.
I look forward to the heated discussions and negotiations that I am sure will occur in theconference!

Ⅱ

Sincerely,

Imari Nagase, Director
International Telecommunication Committee
Senzoku Gakuen Model United Nations ClubJapan Metropolitan Model United Nations 2022

Introduction of theCommittee

enabling the attacker to have access to theflow of the program. 4

Marcel Thué established the International
Telecommunication Union in 1865 with thegoal of connecting the world in numerous
ways.1 One of which is to facilitate easiercommunication and connection between
people. There are 193 member states andover 900 companies, organizations, andacademia involved in the ITU. Morespecifically, there are companies based on
Telecoms, the internet, broadcast, satellite,
software, Artificial Intelligence, FinTech,utilities, automotive, and smart cities. 2 ITU
works closely with industries, public andprivate sectors, to “define the newtechnologies that will support tomorrow’s
networks and services.” 3

Cyber threat actors: any person or persons
who attack an organization’s cybersecurity
with malicious intent. 5

Figure 1: Specific Cyber Actors and the motivations 6

Data Theft: the act of stealing dataintentionally. 7 Identity thefts related to tax
and finance such as bank accounts is also an

Key Terms
Buffer Overflow attack: the most common
DoS attack that occurs when a program isable to write more data to a buffer than it
was originally designed. This allows theexcessed data to overflow into adjacentbuffers, overwriting its contents and1

Discover ITU's HISTORY . ITU.
https://www.itu.int/en/history/Pages/DiscoverITUsHi
story.aspx.
2
About. ITU.
www.itu.int/en/about/Pages/default.aspx.
3
Our Vision. ITU.
www.itu.int/en/about/Pages/vision.aspx.

4

Malkiewicz, K. (March 8, 2021) This Year (So Far)in Buffer Overflows. Dover Micro Systems.
https://info.dovermicrosystems.com/blog/2021-buffer-overflows.
5
What Is a Threat Actor and Why Should You Care?.
Sophos Home.
home.sophos.com/en-us/security-news/2021/what-isa-threat-actor.aspx.
6
Cyber Threat and Cyber Threat Actors. Governmentof Canada,
cyber.gc.ca/en/guidance/cyber-threat-and-cyber-threa
t-actors.
7
Cybersecurity Glossary of Terms. Global
Knowledge.
www.globalknowledge.com/us-en/topics/cybersecurity/glossary-of-terms/#gref.

issue. Children are taken advantage of theirnaivety by identity thieves. 8

ransomware, the attackers are able to makemoney as cheaply as possible. 11

Denial of service (DoS) attack: an attack
meant to restrict the intended user’s accessto the internet and computer by “flooding
the target by traffic, or sending it
information that triggers a crash.” 9Internet Protocol (IP): a unique set of
numbers that identifies a device on theinternet or the local network. 12

Distributed Denial of service (DDoS) attack:a type of an attack that takes advantage ofthe specific capacity limits that apply to any
network sources, such as infrastructure thatenables a company’s website. 10
Malware: a short for malicious software.
Typically used as a comprehensive term thatrefers to any software designed to cause
damage to a single computer, server, orcomputer network.
Ransomware: an ever-evolving form of
malware designed to encrypt files on a
device, rendering any files and the systems
that rely on them unusable. By using
8

15 Facts You Have to Know About Identity Theft.
Lifelock.
www.lifelock.com/learn-identity-theft-resources-facts-you-have-to-know-about-identity-theft.html.
9What is a Denial of Service Attack-Palo Alto
Networks. Paloalto Networks.
https://www.paloaltonetworks.com/cyberpedia/what-i
s-a-denial-of-service-attack-dos.
10
What is a DDoS Attack? - Meaning of DDoS.
Kaspersky.
https://www.kaspersky.com/resource-center/threats/d
dos-attacks

Current Situation
History of the Problem
Cyber threats only came to light decades
after the computer was first invented by
Charles Babbage. In 1972, The Advanced
Research Projects Agency Network(ARPANET), a research project, proved thatviruses can indeed exist.
Moreover, in 1988, the first case of a hostile
exploitation of buffer overflow occurred. 13 A
cyber worm called “the Morris worm”
attacked 6,000 of the approximately 60,000
computers that were then connected to theinternet. The extent of damage swelled up tomillions; some institutions wiped theirsystems and emails were delayed for weeks.
Robert Tappan Morris, the culprit of theincident, was found guilty, making him thefirst person sentenced under the 1986 law
11

Ransomware 101. CISA.
https://www.cisa.gov/stopransomware/ransomware-1
01
12
What is an IP Address - Definition andExplanation. Kaspersky.
https://www.kaspersky.com/resource-center/definitio
ns/what-is-an-ip-address
13
Buffer overflow. Wikipedia.
https://en.wikipedia.org/wiki/Buffer_overflow#Historywhich outlaws unauthorized access toprotected computers.
Ever since then, governments haveestablished laws and international treaties toensure the safety of its citizens.
Problems
Cyber attacks is a term encompassing
various types and purposes. Malware,
DDoS, Phishing, SQL injection attacks,
Cross-site scripting (XSS), and Botnets are
typical and damaging examples of Cyberattacks.

Figure 2: Types of Cyber Attacks

Security teams often encounter
disadvantageous situations against theattackers for they have to defend many of
their attack points; while the attacker only
needs to find one weakness. 14
Cybercrime is harder to tackle than othercriminal activities for being borderless. This“poses severe problems for law enforcement
since previously local or even national

14

Michael. C. 6 common types of cyber attacks andhow to prevent them. TechTarget.
https://searchsecurity.techtarget.com/tip/6-common-t
ypes-of-cyber-attacks-and-how-to-prevent-them.

crimes now require international
cooperation.” 15
In addition to being harder to police andprosecute, COVID-19 measures have also
been affected by cyber attacks andcontributing to its rise in crimes. The
COVID epidemic forced officials toembrace new solutions quickly, and resulted
in a 600 percent increase in data hacking
alone. Furthermore, in late 2020, UK
vaccine maker AstraZeneca was targeted by
North Korean cyber attackers for theirvaccine information. 16 Also, the situationthat remote workforces are increasing
creates more soft spots for cybercrimes. 17
Motives
There are multiple reasons that actors might
engage in cybersecurity violations. Below isa short list, followed by case studies of
specific crimes.
Attacks Toward Businesses
Financial purposes are most common.
Criminals may want things such as business'
15

Dennis. M.A. (September 19, 2019) Cybercrime.
Encyclopedia Britannica.
https://www.britannica.com/topic/cybercrime.
16
Raymond. P. Cybersecurity Threats to the
COVID-19 Vaccine. F5 Labs.
https://www.f5.com/labs/articles/threat-intelligence/c
ybersecurity-threats-to-the-covid-19-vaccine.
17
Rob. S. (March 16, 2019) 134 Cybersecurity
Statistics and Trends for 2021.Varonis.
https://www.varonis.com/blog/cybersecurity-statistics/.

and customers’ financial details, sensitive
personal data, clients lists, and intellectual
property. 18

for a decent amount of time.

Attacks Toward Personal Devices
According to IPA(Information-technology
Promotion Agency), primary purposes ofattacking personal devices include:
smartphone payment abuse for money,
phishing for personal information, andslandering to mentally damage the target. 19
Motives on Geopolitical Espionage
Cyber espionage is a type of cyberattack inwhich an unauthorized user attempts toaccess sensitive information or classified
data for economic gain or politicaladvantage. Assets such as politicalstrategies, affiliations, and military
intelligence are stolen by executing an APT(Advanced Persistent Threat) attack, which
are carefully planned to infiltrate a specificorganization and evade security measures

Figure 3: Cyber Espionage Targets 20

Case Studies
Subtopic I: Tackling
Cyberterrorism and warfare
The Fight Against Ransomware
CISA (Cybersecurity and Infrastructure
Security Agency) introduces ransomware as“an ever-evolving form of malware designed
to encrypt files on a device, rendering any
files and the systems that rely on them
unusable.” 21 By using ransomware, theattackers are able to make money as cheaplyas possible.
Case Study 1: Anonymous (Hacker Group)

18

Cybersecurity for Business. Invest Northern
Ireland.
https://www.nibusinessinfo.co.uk/content/reasons-be
hind-cyber-attacks.
19(July 30, 2021)
10
2021.
Information-technology Promotion Agency
Japan(IPA)
https://www.ipa.go.jp/security/vuln/10threats2021.ht
ml.

情報セキュリティ ⼤脅威

20

What is Cyber Espionage? Crowdstrike.
https://www.crowdstrike.com/cybersecurity-101/cyberattacks/cyber-espionage/
21
Ransomware 101. CISA.
https://www.cisa.gov/stopransomware/ransomware-1
01

Figure 4: Anonymous Symbol22

An amorphous group of hackers who callthemselves “Anonymous” gained media
attention when, in 2008, a series ofDistributed Denial of Service (DDoS)
attacks were used against the Church of
Scientology. A few of the organization’s
websites went offline. According to a
website controlled by Anonymous, its goal
was to “save people from Scientology byreversing the brainwashing.” 23
The leaderless organization has attacked anumber of websites ranging fromgovernments to small organizations. For
example, the group has targeted the Ku Klux
Klan and taken down terrorist groups’
22

Anonymous (Hacker Group).Wikipedia.
en.wikipedia.org/wiki/Anonymous_(hacker_group).
23
PCWorld. (January 28, 2008) Hackers Hit
Scientology With Online Attack. ABC News.
abcnews.go.com/Technology/GadgetGuide/story?id=
4194143.

twitter accounts. 24 Moreover, in 2011,
Egyptian government websites were shut
down by Anonymous until President Hosni
Mubarak resigned. 25 Anonymous has evenhacked into the dark web and published over1500 users’ data who visit childpornography websites. The list ofAnonymous’ operations goes on. However,regardless of the intention behind thehacking, it is still a dangerous form of
expression that poses a threat to people’s
daily lives. Some Anonymous hackers havebeen arrested. According to an FBI agent,“we’ve dismantled the leaders ofAnonymous.”26
In 1984, the U.S. congress passed theComputer Fraud and Abuse Act (CFAA).
This act makes activities conducted byorganizations like Anonymous illegal. Morespecifically, it criminalizes the act ofintentionally having access to a computer

24

Rory. C. (November 17, 2015) Anonymous Takes
on IS. BBC News.
www.bbc.com/news/technology-34850573.
25
Hacktivism 101: A Brief History and Timeline of
Notable Incidents - Wiadomości Bezpieczeństwa.
Hacktivism 101.
www.trendmicro.com/vinfo/pl/security/news/cyber-at
tacks/hacktivism-101-a-brief-history-of-notable-incid
ents.
26
Smith. G. (December 7, 2017) FBI Agent: We’ve
Dismantled The Leaders Of Anonymous. HuffPost.
www.huffpost.com/entry/anonymous-arrests-fbi_n_3
780980.

“without authorization.” 27 Because of thevague notion of “without authorization”
which the CFAA did not define, manyprosecutors abuse this. For example,
prosecutors bring charges against
individuals which do not align with the
culpability Congress wanted to addresswhen it passed the law.
The vague language used in cybersecurity
laws is not unique to U.S. legislations. In
fact, according to the Human Rights Watch,
policies that deal with cybercrime often use“vague and ill-defined terms to criminalize
legitimate forms of online expression.” 28
There are even countries that do not have
any laws covering cybercrime and theprotection of personal information. Namibia
is one example of this. The country has
become one of the “most targeted countries
in Africa by cyber criminals.” 29 Currently,
the Commonwealth is assisting Namibia increating new laws to protect people’s dataand prevent cybercrimes from occuring.

Case Study 2: Data Breach at Equifax
With the prevalence of hacking growing
more than ever, numerous companies areexperiencing data breaches. 30 Data breaches
are when information such as personal datais stolen without consent from a certain
system or platform.
Hundreds of millions of users’ data werestolen in March 2017 from Equifax, an
American credit Bureau. 31 People’s names,
addresses, birth dates, social security
numbers, credit card numbers, and otherpersonal information were breached.

27

Williams. J. (April 13, 2016) Keys Case Spotlights
Flaws of Computer Hacking Law. Electronic Frontier
Foundation.
www.eff.org/deeplinks/2016/01/keys-case-spotlightsflaws-computer-hacking-law.
28(January 19, 2019) Proposed UN Cybercrime
Treaty Could Undermine Human Rights. Human
Rights Watch.
www.hrw.org/news/2021/01/19/proposed-un-cybercri
me-treaty-could-undermine-human-rights.
29(March 17, 2020) Commonwealth Helps Countries
Make New Cybercrime Laws and Fight Crime
Together. The Commonwealth.
thecommonwealth.org/media/news/commonwealth-h
elps-countries-make-new-cybercrime-laws-and-fightcrime-together.

30

Muhammad, Z. (February 29, 2020) Hacking Has
Become a Highly Popular Career Choice, Here’s
Why That’s a Good Thing. Digital Information World.
www.digitalinformationworld.com/2020/02/ethical-h
acking-is-becoming-a-highly-popular-profession-here-why.html.
31
Miyashiro. I.K.(April 30, 2021) Case Study:
Equifax Data Breach. Seven Pillars Institute.
sevenpillarsinstitute.org/case-study-equifax-data-breach.

Equifax representatives were advised toapply a vulnerability patching to its system
which Apache Software Foundation releaseda few days prior. However, the employee
who was in charge of the patching did notcomply. When Equifax’s IT agency ran
scans to identify if there were any
vulnerabilities, nothing was out of theordinary. The scans failed to work.

Figure 5: Numbers of impacted consumers 32

Apache Struts is an “open-source web
application framework used for Java EE web
applications” 33 which Equifax and manyother websites utilized. One issue was that
Apache Struts had a vulnerability which was
a command injection attack called
CVE-2017-5638.34 On March 9th 2017,32

Owen. J.C. (September 10, 2018). The Equifax
data breach, in one chart.MarketWatch.
https://www.marketwatch.com/story/the-equifax-data-breach-in-one-chart-2018-09-07.
33
Apache Struts. WhiteHat Security Glossary.
www.whitehatsec.com/glossary/content/apache-struts
34(September 14, 2017) CVE-2017-5638: The
Apache Struts vulnerability explained.Synopsys.
https://www.synopsys.com/blogs/software-security/c
ve-2017-5638-apache-struts-vulnerability-explained/.

Because of the lack of security in containing
databases, from May through July of 2017,
hackers obtained access to Equifax’s data.
The company published this information
more than a month after the attack was
discovered. The breach in Equifax wasinvestigated by the FBI, FTC, and the
CFPB.35 Moreover, congressional hearings
were held over Equifax’s 143 million users’
breach. The company faced lawsuits by stateand local governments such as the city of
San Francisco and Chicago for violating its
state policies. 36
In the U.S., senators Mark R. Warner,
Elizabeth Warren, Representatives Elijah
35

Fruhlinger. J. (February 12, 2020) Equifax data
breach FAQ: What happened, who was affected,
what…. CSO.
https://www.csoonline.com/article/3444488/equifax-d
ata-breach-faq-what-happened-who-was-affected-wh
at-was-the-impact.html.
36
Miyashiro. I.K. (April 30. 2021) Case Study:
Equifax Data Breach. Seven Pillars Institute.
https://sevenpillarsinstitute.org/case-study-equifax-da
ta-breach/.

Cummings, and Raja Krishnamoorthi
reestablished the legislation of holding
companies including Equifax accountablefor its data breaches. The Data Breach
Prevention and Compensation Act enforces
strict penalties in which the FTC has to use
half of the compensation to consumers.
Equifax, under this legislation, would have a
total penalty of 1.5 billion dollars.
Furthermore, the Office of Cybersecurity
was established at the FTC for supervisingdata breaches. 37
Through this bill, more accountability will
be ensured in order to prevent future data
breaches from occurring.

Subtopic II: Cybersecurity in
Developing Countries
The Issue
Cyber attacks are a borderless issue, notexcluding developing countries. As a resultof developing countries rapidly expanding
their access to cyberspace, they tend to face
“more damage than benefit to both the state
and the local economy” 38. This is37(May 7, 2019) Warner, Warren Reintroduce
Legislation to Hold Equifax, Other .... Mark R.
Warner.
https://www.warner.senate.gov/public/index.cfm/201
9/5/warner-warren-reintroduce-legislation-to-hold-eq
uifax-other-credit-reporting-agencies-accountable-for-data-breaches.
38
Muller. L.P. Cyber Security Capacity Building in
Developing Countries: Challenges andOpportunities.

particularly difficult for LDCs (Least
Developed Countries) which lackfundamental structures, financial stability,
human capacity and expertise. 39 Many
developing countries face numerous issues
other than cyber attacks - it is a pressing
goal for Governments to advance theircyberspace for both its citizens safety and its
economic growth.
Objectives
The ITU launched “Enhancing
Cybersecurity in Least Developed
Countries,” aiming to ensure LDCs tomaximize the economic benefit of ICT in acybersecure environment. 40
Case Study: Afghanistan
Afghanistan, a developing country in the
middle east, ranked 171st in the GGI(Global Cybersecurity Index. Measures thecommitment of countries to cybersecurity)
held by the ITU in 2020. 41 There are
currently over four million internet users outof its thirty-four million population. Before
https://core.ac.uk/download/pdf/52116225.pdf
39
Enhancing Cybersecurity in Least Developed
Countries. ITU.
https://www.itu.int/en/ITU-D/Cybersecurity/Pages/C
YBLDC.aspx.
40
Enhancing Cybersecurity in Least Developed
Countries. ITU.
https://www.itu.int/en/ITU-D/Cybersecurity/Pages/C
YBLDC.aspx.
41
Global Cybersecurity Index 2020.ITU
Publications.
https://www.itu.int/epublications/publication/global-c
ybersecurity-index-2020/en/.

the Taliban regime took over Afghanistan,
Russian hacker group Turla is suspected tohave targeted the Afghanistan government
to take political information. 42 The
investigation team found the same malware
in the United States and Germany as well. A
backdoor, which is “an undocumented way
gaining access to the computer system” 43,
was installed in the infected machines as analternative for when the main malware is
identified and removed. Despite the close
investigation of Afghan’s security systems,
Turla succeeded in placing this backdoor foralmost two years.
We can conclude that data and information
are especially vulnerable to theft indeveloping countries.

2004: ITU passed a resolution about
creating a global culture of cybersecurity
and protecting critical information
infrastructures.
2010: ITU passed a resolution for creating a
global culture of cybersecurity and taking
stock of national efforts to protect criticalinformation cybersecurity. 44

Questions to Consider● What were the major cyber crimes
that have occurred in your country
and the measures taken to deal withthat?
● What does your country lack incybersecurity such as financial
issues?
● In what ways can your country
contribute to global cybersecurity?
● Were there any conflicts that occured
due to problems caused by cybercrimes in your country?

Past Actions
2001: ITU passed a resolution to combat themisuse of information technologies.
2002: ITU passed a resolution to combat themisuse of information technologies.
2003: ITU passed a resolution on creation ofa global culture of cybersecurity.

42

Luca Bertuzz. Russian Hackers Targeted Afghan
government before Taliban takeover, cybersecurity
firm says. Euractiv.
https://www.euractiv.com/section/cybersecurity/news/russian-hackers-targeted-afghan-government-beforetaliban-takeover-cybersecurity-firm-says/
43
Glossary. Computer Security Resource Center.
https://csrc.nist.gov/glossary/term/backdoor#:~:text=
Definition(s)%3A,is%20a%20potential%20security%
20risk.

Guidelines for Position
PapersPosition papers must clearly articulate thecurrent situation of your country and briefly
explain the past actions it has taken, further
denoting possible solutions. Papers may also
include international resolutions and44

UN Resolutions . ITU.
https://www.itu.int/en/action/cybersecurity/Pages/unresolutions.aspx

strategies to eradicate child labour; however,
the main focus must be on your country.
Every year, a handful of delegates submit
position papers with very basic information
about their countries, such as geographicallocation and major trade exports. Unlesssuch information directly relates to the topic,
it should not be addressed in position papers
at all.

Closing Remarks
Thank you all for taking interest in andparticipating in JMMUN.
Cybersecurity is a broad topic that applies toall sorts of actors such as the governments,
hackers, and victims. It is always important
to ask yourself “is this enough?” whenever
you are researching about the actions
governments or organizations have taken.
We hope this experience will benefit you.

Works Cited
About. ITU. www.itu.int/en/about/Pages/default.aspx.
Ekhtyar. H. (August 16, 2017) Afghanistan: Cyber
Crime Code Signed into Law. Library of Congress.
https://www.loc.gov/item/global-legal-monitor/201708-16/afghanistan-cyber-crime-code-signed-into-law/.
Rory. C. (November 17, 2015) Anonymous Takes on
IS. BBC News.
www.bbc.com/news/technology-34850573.
Apache Struts. WhiteHat Security Glossary.
www.whitehatsec.com/glossary/content/apache-struts

Buffer overflow. Wikipedia.
https://en.wikipedia.org/wiki/Buffer_overflow#HistoryMiyashiro. I.K.(April 30, 2021) Case Study: Equifax
Data Breach. Seven Pillars Institute.
sevenpillarsinstitute.org/case-study-equifax-data-breach.
(March 17, 2020) Commonwealth Helps Countries
Make New Cybercrime Laws and Fight Crime
Together. The Commonwealth.
thecommonwealth.org/media/news/commonwealth-h
elps-countries-make-new-cybercrime-laws-and-fightcrime-together.
(September 14, 2017) CVE-2017-5638: The Apache
Struts vulnerability explained.Synopsys.
https://www.synopsys.com/blogs/software-security/c
ve-2017-5638-apache-struts-vulnerability-explained/.
Dennis. M.A. (September 19, 2019) Cybercrime.
Encyclopedia Britannica.
https://www.britannica.com/topic/cybercrime.
Muller. L.P. Cyber Security Capacity Building in
Developing Countries: Challenges andOpportunities.
https://core.ac.uk/download/pdf/52116225.pdf
Cybersecurity for Business. Invest Northern Ireland .
https://www.nibusinessinfo.co.uk/content/reasons-be
hind-cyber-attacks.
Cybersecurity Glossary of Terms. Global Knowledge.
www.globalknowledge.com/us-en/topics/cybersecurity/glossary-of-terms/#gref.
Rob. S. (March 16, 2019) 134 Cybersecurity
Statistics and Trends for 2021.Varonis.
https://www.varonis.com/blog/cybersecurity-statistics/.
Raymond. P. Cybersecurity Threats to the COVID-19
Vaccine. F5 Labs.
https://www.f5.com/labs/articles/threat-intelligence/c
ybersecurity-threats-to-the-covid-19-vaccine.

Cyber Threat and Cyber Threat Actors. Governmentof Canada.
cyber.gc.ca/en/guidance/cyber-threat-and-cyber-threa
t-actors.
Discover ITU's HISTORY . ITU.
https://www.itu.int/en/history/Pages/DiscoverITUsHi
story.aspx.
Enhancing Cybersecurity in Least Developed
Countries. ITU.
https://www.itu.int/en/ITU-D/Cybersecurity/Pages/C
YBLDC.aspx.
Fruhlinger. J. (February 12, 2020) Equifax data
breach FAQ: What happened, who was affected,
what…. CSO.
https://www.csoonline.com/article/3444488/equifax-d
ata-breach-faq-what-happened-who-was-affected-wh
at-was-the-impact.html.

tacks/hacktivism-101-a-brief-history-of-notable-incid
ents.
Williams. J. (April 13, 2016) Keys Case Spotlights
Flaws of Computer Hacking Law. Electronic Frontier
Foundation.
www.eff.org/deeplinks/2016/01/keys-case-spotlightsflaws-computer-hacking-law.
Our Vision. ITU.
www.itu.int/en/about/Pages/vision.aspx.
(January 19, 2019) Proposed UN Cybercrime Treaty
Could Undermine Human Rights. Human Rights
Watch.
www.hrw.org/news/2021/01/19/proposed-un-cybercri
me-treaty-could-undermine-human-rights.
Ransomware 101. CISA.
https://www.cisa.gov/stopransomware/ransomware-1
01

Smith. G. (December 7, 2017) FBI Agent: We’ve
Dismantled The Leaders Of Anonymous. HuffPost.
www.huffpost.com/entry/anonymous-arrests-fbi_n_3
780980.

Owen. J.C. (September 10, 2018). The Equifax data
breach, in one chart. MarketWatch.
https://www.marketwatch.com/story/the-equifax-data-breach-in-one-chart-2018-09-07.

Global Cybersecurity Index 2020.ITU Publications.
https://www.itu.int/epublications/publication/global-c
ybersecurity-index-2020/en/.

Malkiewicz, K. (March 8, 2021) This Year (So Far)in Buffer Overflows. Dover Micro Systems.
https://info.dovermicrosystems.com/blog/2021-buffer-overflows.

Glossary. Computer Security Resource Center.
https://csrc.nist.gov/glossary/term/backdoor#:~:text=
Definition(s)%3A,is%20a%20potential%20security%
20risk.
Muhammad, Z. (February 29, 2020) Hacking Has
Become a Highly Popular Career Choice, Here’s
Why That’s a Good Thing. Digital Information World.
www.digitalinformationworld.com/2020/02/ethical-h
acking-is-becoming-a-highly-popular-profession-here-why.html.
Hacktivism 101: A Brief History and Timeline of
Notable Incidents - Wiadomości Bezpieczeństwa.
Hacktivism 101.
www.trendmicro.com/vinfo/pl/security/news/cyber-at

UN Resolutions . ITU.
https://www.itu.int/en/action/cybersecurity/Pages/unresolutions.aspx.
(May 7, 2019) Warner, Warren Reintroduce
Legislation to Hold Equifax, Other .... Mark R.
Warner.
https://www.warner.senate.gov/public/index.cfm/201
9/5/warner-warren-reintroduce-legislation-to-hold-eq
uifax-other-credit-reporting-agencies-accountable-for-data-breaches.
What is a DDoS Attack? - Meaning of DDoS.
Kaspersky.

https://www.kaspersky.com/resource-center/threats/d
dos-attacks
What is a Denial of Service Attack-Palo Alto
Networks. Paloalto Networks.
https://www.paloaltonetworks.com/cyberpedia/what-i
s-a-denial-of-service-attack-dos.
What Is a Threat Actor and Why Should You Care?.
Sophos Home.
home.sophos.com/en-us/security-news/2021/what-isa-threat-actor.aspx.
What is an IP Address - Definition and Explanation.
Kaspersky.
https://www.kaspersky.com/resource-center/definitio
ns/what-is-an-ip-addres
What is Cyber Espionage? Crowdstrike.
https://www.crowdstrike.com/cybersecurity-101/cyberattacks/cyber-espionage/
Michael. C. 6 common types of cyber attacks andhow to prevent them. TechTarget.
https://searchsecurity.techtarget.com/tip/6-common-t
ypes-of-cyber-attacks-and-how-to-prevent-them.
15 Facts You Have to Know About Identity Theft.
Lifelock.
www.lifelock.com/learn-identity-theft-resources-facts-you-have-to-know-about-identity-theft.html.