Existing and potential threats 6. ICTs provide vast opportunities for social and economic development and are increasingly growing in importance for the international community. However, there are disturbing trends in the global ICT environment, which include a dramatic increase in incidents involving the malicious use of ICTs by State and non-State actors. These trends create risks for all States. Misuse of ICTs carries the serious risk of harming international peace and security. 7. ICTs can be used for both legitimate and malicious purposes due to their dual-use nature. A number of States are developing ICT capabilities for military purposes, making their use in future interState conflicts more likely (UNGA Resolution 73/27). The pursuit by some States of military objectives in cyberspace, including though introduction and formulation of rules of engagement in this realm, are increasing the risks of conflicts in cyberspace, thus undermining international peace and security. 8. Cyber operations against a State’s critical infrastructure and associated information systems constitute the most harmful attacks using ICTs which can undermine States’ national security, economic development and people’s livelihood. The risk of harmful ICT attacks against critical infrastructure is both real and serious, and is growing. Traditional military facilities constitute critical infrastructure, which if compromised, would have far reaching security ramifications. 9. The use of ICTs by malicious non-State actors for criminal and terrorist purposes, including recruitment, financing, training and incitement, as well as for attacks against ICTs or ICT-dependent infrastructure, carries grave risks for international peace and security, especially in light of the attribution related challenges. 10. The diversity of malicious non-State actors, including criminal groups and terrorists, their differing motives, the speed and anonymity associated with malicious ICT actions and the difficulty of attributing the source of an ICT incident, all increase risk. States are rightfully concerned about the danger of destabilizing misperceptions, the potential for conflict and the possibility of harm to their citizens, economy and national security. 11. The relative ease with which malicious technologies are available and accessible to a very large number of State and non-State actors, and their continued development, especially by technologically advanced States, increases their proliferation risks. Transfer, replication or reproduction of malicious technologies by terrorists and criminals poses a real threat. 12. Stockpiling of “vulnerabilities” in ICT systems and the potential threat posed by “autonomous cyber operations” that are capable of actively impersonating networks and people further undermines security in the ICT environment. 13. There exist real threats associated with manipulation and theft of digital identity, private data as well as targeted propaganda campaigns in ways that could undermine national economies and imperil national security, besides jeopardizing personal security of individuals. 14. Threats in the global ICT environment also undermine full realization of the opportunities offered by emerging technologies like artificial intelligence (AI), cloud computing, big data, the Internet of Things (IoT), e-government services, blockchain technology and digital finance. 15. Harmful hidden functions embedded in ICTs pose a threat to ICT supply chain, erode public trust in digital commerce and undermine national security and global development. Malicious use of ICTs thus impedes social and economic development and hampers progress towards the achievement of sustainable development goals. 16. The absence of common understandings on acceptable State behaviour with regard to the use of ICTs further aggravates the threat landscape. 2/5