Export controls may harm global cyber research

Subject

The impact of the new additions to the Wassenaar Arrangement.

Significance

The US Bureau of Industry and Security (BIS) is taking public comments on its proposed implementation of the cyber security provisions of the the most recent additions to the Wassenaar Arrangement on arms-export controls. The Wassenaar Arrangement is a multilateral agreement to manage the international trade in conventional arms and certain dual-use goods and technologies to contribute to international stability and prevent human rights abuses. In December 2013, it added two types of cyber security technologies to its control lists -- the first such restriction on the export of commercially-available and widely-used software since the creation of the Arrangement in 1996.

Impacts

• Governments not participating in the Wassenaar Arrangement may turn to alternative suppliers.
• Using export controls as a proxy for regulating the technology's use may limit research into cyber vulnerabilities.
• The easily transferable nature of software could undermine the effectiveness of export control regimes.