european-union munition
Does Wassenaar Arrangement on the transfers of arms and dual-use goods and technologies apply to security training?
<p>Does the <a href="http://www.wassenaar.org/" rel="nofollow">Wassenaar Arrangement</a> on the transfers of conventional arms and dual-use goods and technologies apply to IT security training?</p>

<p>Does it apply to IT security training on exploitation techniques?</p>

<p>Is it applicable to institutions or individuals?</p>

<p>Yes, it arguably includes technical training according to the <a href="http://www.wassenaar.org/controllists/index.html" rel="nofollow">List of Dual-Use Goods and Technologies and Munitions List</a> (Wa-List (14) 2). Exploitation, as used in your question, can take many forms of course.</p>

<p>First, take a look at the definition of <strong>technology</strong> for GTN and both lists<sup>1</sup>:</p>

<p>Technology is defined as information.<br>
The information can take the form of technical assistance.<br>
Technical assistance may take the form of training.</p>

<p>Now we need to look to see if "exploitation" is on any of the lists and then if technology for exploitation is included.</p>

<p>The best I can find is at on the <em>Dual Use List - Category 4 - Computers</em>:</p>

<blockquote>
  <p>4.E.1.c "Technology" for the "development" of "intrusion software".</p>
</blockquote>

<p>Note that technology appears in quotes. This means that the term takes on the meaning defined in the List of Definitions (found on p. 201 of Wa-List (14) 2). I also think that "Intrusion software" as defined (page 212) comports with what  you call exploitation.</p>

<p>There are probably others, but we need to know more about what you mean by exploitation. For now I think this is enough. If you need more, I think that more answers will come from really understanding the definitions and how the defined words and phrases are used in the Wa-List.</p>

<hr>

<p><sup>1</sup><strong>Technology</strong><br>
<em>Specific <strong>information</strong> necessary for the "development", "production" or 
 "use" of a product. The information <strong>takes the form of</strong> 'technical data'
 or  <strong>'technical assistance'</strong>. Controlled "technology" for the Dual-Use
 List is  defined in the General Technology Note and in the Dual-Use
 List.  Controlled “technology” for the Munitions List is specified in
 ML22.   Technical Notes.<br>
1. 'Technical data' may take forms such as blueprints, plans, diagrams,  models, formulae, tables, engineering designs and
specifications,  manuals and instructions written or recorded on other
media or  devices such as disk, tape, read-only memories.<br>
2. '<strong>Technical assistance' may take forms such as instruction, skills,  training</strong>, working knowledge, consulting services.
 'Technical assistance' may involve transfer of 'technical data'.</em>  </p>
