Microsoft argues that a digital Geneva Convention is needed to protect citizens and businesses on the Internet from attacks by states. The company believes that technology companies must work closely with governments to achieve this.
Tech companies should take on the role of first responder at the Geneva Digital Convention, among other things to protect citizens from dangers on the internet. Microsoft sees a role for tech companies that is comparable to that of the Red Cross: aid workers who enjoy extra protection.
While the Geneva Convention should protect citizens in wartime, Microsoft states that a digital variant should ensure that citizens can use the internet safely, especially in times of peace. Governments should come together to draw up international rules for this.
According to Microsoft, an organization is needed that can approach attacks in the digital domain in a way that the International Atomic Energy Agency deals with nuclear threats. The organization should be composed of technical experts from governments and the private sector, academics and citizens. That organization should be able to investigate specific attacks, including showing the evidence, to make it known if there is a state behind an attack.
The convention should urge governments to do everything they can to prevent attacks targeting the private sector, key infrastructure and the theft of intellectual property. In addition, governments should also assist security companies in detecting such attacks and threats and in taking measures. Microsoft also advocates a mandate that requires governments to report critical vulnerabilities to software developers, rather than having them store, abuse, or sell them themselves.
Microsoft believes there is a need for collaboration between governments and tech companies due to the increasing level of digital attacks. This is no longer just about financial gain, but increasingly about attacks carried out by states. As a turning point, Microsoft mentions the major hack on Sony, which, according to the FBI, was carried out by North Korea. The call for the introduction of a digital variant of the Geneva Convention was made by Microsoft at the RSA conference in San Francisco, a meeting for security experts.