The European Youth Parliament,

A. Aware of the difference between cyberattacks1 and cyber-warfare2,

B. Deeply disturbed by the fact that more than 4000 ransomware attacks occur every day3,
C. Alarmed by the fact that cyber-attacks cause costs of of EUR 265 billion within the
European Union each year4,
D. Bearing in mind the capability of hackers to infringe the privacy of
i) The public sector
ii) The private sector
iii) Citizens of a state
E. Approving Microsofts efforts in creating a Digital Geneva Convention5 including pledges
to :
i) Not target the private sector
ii) Assist the private sector to respond to potential attacks
iii) Exercise restraint in the development of cyber-weapons
iv) Limit offensive operations,
F. Alarmed by the lack of explicitness in laws and punishments regarding cyber-felonies,
G. Concerned by the anonymity of cyber-criminals making it difficult to discern an attackers
origin and identity,
H. Regretting the lack of a necessary constant development of defences against cyber-
attacks,
I. Noting with regret the unfamiliarity of citizens in both the private and public sector
regarding cybercrime and cyber-defence,
J. Profoundly alarmed with the possible detrimental consequences of cyber-warfare on
confidential military information,
K. Deeply concerned by cyberattacks affecting digital voting systems,
L. Noting with regret the lack of funds being allocated for superior security and internet
supervision as a mere EUR 400 million were allocated to research and development of
cybersecurity from 2007 to 20136;

1. Calls upon the Member States of the United Nations to comply to the Digital Geneva
Convention as proposed by Microsoft;
2. Requests actors in the Member States public and private sectors to keep confidential
data stored in offline servers making it imperceptible to attacks through the internet;

1
An attack committed by hackers in an attempt to damage a computer or a system
2
Internet-based attacks involving politically motivated attacks on information
3
6 Must-Know Cybersecurity Statistics for 2017, https://blog.barkly.com/cyber-security-statistics-2017
4
Combating crime in a digital age, https://www.europol.europa.eu/about-europol/european-cybercrime-
centre-ec3
5
A document created by Microsoft which would oblige the signed states to respect a certain conduct,
namely the exclusion of citizens in government-on-government cyberattacks.
6
The European Commission fails to show conviction on fighting cybercrime,
http://www.cio.com/article/2390148/it-skills/eu-s-cybersecurity-budget-up-14-.html
 3. Invites the Member States to categorise legislation regarding cyber-attacks in:
a) the manner in which they occur,7
b) the inflicted damage;8
4. Encourages the Member States to create new backups of votes in separate databases
every three minutes throughout election periods;
5. Recommends an increase in funding from the Member States allocated to the research
and development of cyber-defence according to the guidelines set by the Digital Geneva
Convention;
6. Urges both public and private sectors of the Member States to keep their networking
systems up to date with:
a) constant supervision by experts,
b) mandatory preemptive system hacks done not less than every three months by
independent organisations;
7. Instructs Member States to promote police investigations into cybercrime by introducing:
a) a ban on bulletproof hosting9,
b) warrants provided for research of cybercrimes;
8. Encourages the media to discuss cyber-related issues more openly as well as to
educate both the highly-educated and less-educated citizens of the EU regarding the
dangers of the internet by holding:
a) educational lectures,
b) workshops,
c) public and private classes.

7
Phishing, malware, ransomware, etc.
8
Financial damage, intrusion of privacy, number of victims, etc.
9
A service provided by certain hosting firms that provides a shield for hackers when tried to be found.