To Coerce or Not to Coerce? A Quantitative Investigation on Cybersecurity and Cybercrime Legislations Towards LargeScale Vulnerability Notifications The rise of largescale vulnerability scanners, which make the detection of vulnerabilities easy, has recently raised the attention to the security community. This leads to multiple research on the effectiveness of largescale vulnerability notifications as a countermeasure and several studies have examined the different factors that could impact the effectiveness and how they could incite people to apply vulnerability fixing steps. And we contend that using a legal constraint could improve the vulnerability fixing rate. In this paper, we survey the Cybersecurity and Cybercrime Legislations of 156 countries looking for Articles that consider the liability of vulnerable resource owners. We discovered that only two countries required companies, regardless of the industry, to implement cybersecurity measures and conduct vulnerability assessments. This study aims to define a more effective largescale vulnerability notifications system using Cybersecurity and Cybercrime Laws.

Reconciliation of Privacy with Preventive Cybersecurity: The Bright Internet Approach The emergence of a preventive cybersecurity paradigm that aims to eliminate the sources of cybercrime threats is becoming an increasingly necessary complement to the current selfdefensive cybersecurity systems. One concern associated with adopting such preventive measures is the risk of privacy infringement. Therefore, it is necessary to design the future Internet infrastructure so that it can appropriately balance preventive cybersecurity measures with privacy protections. This research proposes to design the Internet infrastructure using the preventive cybersecurity measures of the Bright Internet, namely preventive cybersecurity protocol and identifiable anonymity protocol, and ten privacy rights derived from Europexe2x80x99s General Data Protection Regulations (GDPR). We then analyze the legitimacy of the five steps of the preventive cybersecurity protocol and the four features of the identifiable anonymity protocol from the perspectives of ten privacy rights. We address the legitimacy from the perspective of potential victimsxe2x80x99 selfdefense rights. Finally, we discuss four potential risks that may occur to the innocent senders and proposed resilient recovery procedures.