
This paper has been commissioned by the European Union Institute for Security Studies (EUISS) with the financial assistance of the European Union (EU) as a contribution to the side-event “The future of responsible state behaviour in a fragmented cyber capacity ecosystem” that took place on 13 May 2024 in the context of the intersessional meetings of the Open-ended working group on security of and in the use of information and communication technologies 2021-2025. The side-event was co-hosted by the EU, the EUISS, the Global Forum on Cyber Expertise (GFCE), and the United Nations Institute for Disarmament Research (UNIDIR). The contents of this paper are the sole responsibility of the authors and can under no circumstances be regarded as reflecting the position of the European Union or any of the side-event co-hosts.
Syria