# Updating the Wassenaar Debate Once Again: Surveillance, Intrusion Software, and Ambiguity

## TL;DR

This paper examines the ongoing international debate on regulating cyber weapons, focusing on the Wassenaar Arrangement's inclusion of intrusion software, highlighting historical parallels, political issues, and definitional ambiguities.

## Contribution

It provides a comprehensive analysis of the political and definitional challenges in regulating offensive cyber tools within the Wassenaar framework.

## Key findings

- Historical parallels with past arms control debates
- Identification of ambiguity problems in defining cyber weapons
- Discussion of political and regulatory challenges

## Abstract

This paper analyzes a recent debate on regulating cyber weapons through multilateral export controls. The background relates to the amending of the international Wassenaar Arrangement with offensive cyber security technologies known as intrusion software. Implicitly, such software is related to previously unregulated software vulnerabilities and exploits, which also make the ongoing debate particularly relevant. By placing the debate into a historical context, the paper reveals interesting historical parallels, elaborates the political background, and underlines many ambiguity problems related to rigorous definitions for cyber weapons. Many difficult problems remaining for framing offensive security tools with multilateral export controls are also pointed out.