Asia-Europe Meeting
Total Page:16
File Type:pdf, Size:1020Kb
Asia-Europe Meeting Topic A: Identifying, Sharing and Remediating Faults in Cybersecurity Topic B: Tackling Local, Regional and Global Hunger MUNUC 32 TABLE OF CONTENTS ______________________________________________________ Letter from the Chair………………………………………………………….. 3 Topic A ………………………………………………………………………..… 4 Statement of the Problem…………………………………………….. 4 History of the Problem……………………………………….…..…….. 9 Past Actions…………………………………………………………….. 14 Possible Solutions………………………………………………………. 18 Bloc Positions…………………………………………………………… 20 Glossary…………………………………………………………………. 22 Topic B ………………………………………………………………...………. 23 Statement of the Problem…………………………………………….23 History of the Problem………………………………………………… 28 Past Actions…………………………………………………………….. 31 Possible Solutions………………………………………………………. 33 Bloc Positions…………………………………………………………… 35 Glossary…………………………………………………………………. 37 Bibliography……………………………………….…………………………. 38 2 Asia-Europe Meeting | MUNUC 32 LETTER FROM THE CHAIR ______________________________________________________ Dear Delegates, Welcome to the Asia-Europe Meeting Forum, or ASEM, at MUNUC 32! My name is Randolph Ramirez, and I usually go by Randy. I am a third year here at The University of Chicago studying Statistics and Political Science. I was born and raised in Wilton, Connecticut, and coming out to attend UChicago was my first trip out to Illinois! All throughout high school I was heavily involved in Model Congress, and partaking in MUNUC my first year here helped transition me into the world of Model UN! I am certain that this conference and committee will be a success, and I cannot wait to experience it with you all! The Asia-Europe Meeting Forum will offer a multitude of experiences, problems, solutions, and overall will hopefully give a descriptive look into the affairs of the two regions. Throughout this experience, I hope delegates learn the various factors that make solving the issues of cybersecurity and huger instability a difficult endeavor, and how best to go about solving them. When preparing for the conference, I sincerely advise delegates to research the policies, positions, and stances of their respective nations to best facilitate the problem solving and discussions of the committee. The most useful information to delegates pertains to that of their individual nations, and preparation for the conference will benefit the delegates greatly. Debate, conversation, and deliberations within the committee will prove inviting, exhilarating, and most of all productive so long as delegates provide their own insight, research, and possible solutions. I am more than excited for ASEM, and I hope you all look forward to MUNUC 32! Sincerely, Randy Ramirez 3 Asia-Europe Meeting | MUNUC 32 TOPIC A: IDENTIFYING, SHARING AND REMEDIATING FAULTS IN CYBERSECURITY ______________________________________________________ Statement of the Problem Relation to ASEM: Cybersecurity issues plague nearly every county and every company that operates in the modern age. With ASEM in particular, the countries in question often lead the forefront in a multitude of enterprises. Whether it includes healthcare, online marketplaces, auto industries, medical treatments, social networks, or any market one can think of, Asia and Europe hold considerable stake in the wellbeing of the world. Asia and Europe make up more than half of the world’s GDP after all, and combined the two overtake the United States. As such, maintaining cybersecurity is one of the main concerns of the two regions. As the world becomes more and more connected, with Europe and Asia leading the charge alongside North America, ensuring we do so safely requires well thought out, proactive cybersecurity policies. As an example, 74% of Asia and Central Europe use the internet, and this statistic grows higher and higher with time1. A Cyber Security Crisis has been looming over the heads of many nations and a body such ASEM holds the unique opportunity to take action. Before determining the best ways to do so however, a stronger understanding of what cybersecurity must be developed. Definition of Cybersecurity in the Modern Age: Cybersecurity encompasses an incredible range of relevant topics, issues, policies, and ideas. Additionally, the implications behind cybersecurity change with each and every country that interacts with the topic. Yet, certain unifying qualities bring about an agreeable definition from the ITU, or International Telecommunications Union: 1 “Individuals Using the Internet (% of Population) | Data.” Accessed May 21, 2019. https://data.worldbank.org/indicator/it.net.user.zs?most_recent_value_desc=true. 4 Asia-Europe Meeting | MUNUC 32 “Cybersecurity is the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies that can be used to protect the cyber environment and organization and user’s assets”2. Although rather robust, this definition provides a good starting point for what cyber security is. At its core, cybersecurity pertains to any method or policy that aims to secure and protect one’s connection and usage of the internet. Cybersecurity continues to grow in importance, and as such the range of policies within cybersecurity grows in number as well. Studies to be discussed later on will show the vastness of cybersecurity and cybercrime, and also give brief insight as to how to address the problem. Prevalence of Cyber Attacks and Its Impact on Privacy and the Economy. Cybersecurity’s main connection to the average person, and thus the many residents and citizens of ASEM, pertains to cyber attacks on major corporations and its impact on the economy and people’s privacy. For instance, regarding privacy, multiple info breaches have occurred that compromise the privacy of up to billions of individuals, with the largest breach to occur in the world being Yahoo’s 2013 Data Breach3 of 3 billion individuals. Polls funded and issued by the European Commission in 2017 found that 86% of Europeans believe that the risk of being a victim to a cybercrime is increasing with time4. As for the companies themselves, the same poll found that 80% of European companies experienced some form of a cyber crime in the past year5. Further, certain member states cite that 50% of all of their crimes can be defined as cyber crimes6. These staggering numbers have increased since then as the growth rate of cybercrimes outmatches the rate at which policy develops to counteract said crimes. 2 “Cybersecurity.” Accessed May 21, 2019. https://www.itu.int/en/ITU-T/studygroups/com17/Pages/cybersecurity.aspx. 3 “All 3 Billion Yahoo Accounts Were Affected by 2013 Attack - The New York Times.” Accessed May 21, 2019. https://www.nytimes.com/2017/10/03/technology/yahoo-hack-3-billion-users.html. 4 “EU to Become More Cyber-Proof as Council Backs Deal on Common Certification and Beefed-up Agency - Consilium.” Accessed July 9, 2019. https://www.consilium.europa.eu/en/press/press-releases/2018/12/19/eu-to-become-more-cyber- proof-as-council-backs-deal-on-common-certification-and-beefed-up-agency/. 5 Ibid. 6 Ibid. 5 Asia-Europe Meeting | MUNUC 32 A similar trend can be found in Asia. Black Hat’s survey on Asian companies and executives found that 62% of those surveyed find it likely, very likely, or almost certain that a major data breach will affect their company in the next 12 months7. Note that a major data breach puts many more at risk than the standard cybercrime cited in the European study, and having so many officials fear such a breach contextualizes the state of cybersecurity in Asia specifically. Like Europe, Asia heavily relies on technology and media, yet lacks the infrastructure or policies to do so safely and securely. Additionally, Cybercrime greatly detriments both regional and global economies. A 2018 study from CSIS, or the Center for Strategic and International Studies found that nearly 1% of all global GDP, or $600 Billion, is lost to cyber crimes alone. Not only is this amount quickly approaching $1 Trillion, but it has increased from their 2014 study that reported $445 billion in losses. The EU noticed a 38% increase in rate of cybercrimes between 2014 and 2015. This combined with the financial impact prove the growing threat of cybercrime in the upcoming year, and prove that ASEM must respond in a timely manner. Lack of Collaboration Between Nations and Companies Currently Perhaps the most important reason for ASEM in particular to create and guide policy on the issue comes from the lack of unified policy in the first place. Many nations implement their own versions of cybersecurity policy that on a regional level would find much more success, since many other nations have no idea how to implement such policy. Awareness of cybersecurity policy falters greatly, as the 7“Cybersecurity_Risk_In_Asia.Pdf.” Accessed May 19, 2019. https://www.blackhat.com/docs/us- 18/Cybersecurity_Risk_In_Asia.pdf. 6 Asia-Europe Meeting | MUNUC 32 EU study finds that 69% of European Companies have either a very basic or no understanding of the risks to the cybersecurity of their company. Similarly, a study from Marsh and Mclennan have found Asia as a prime target for cybercriminals. More specifically, they found 70% of firms do not have a strong understanding of their cyber posture8. This leads to Asian firms taking 1.7 times longer to respond to breaches than others, and $81 Billion in revenue lost to cyber attacks alone. Without guidance of any sorts, such companies falter in the face of cybercrimes.