Last update: 10/07/2024

Participants are reminded that the Challenges to which they have been invited are based on sites, applications, networks and information systems (this list is not exhaustive) which are simulated on the MALICE platform for the sole purpose of cyber training (competition or cybersecurity training).

It is strictly forbidden to use the techniques implemented or learned during this event to access or maintain, fraudulently, all or part of an automated data processing system outside the MALICE platform. This constitutes a criminal offence punishable by up to five (5) years' imprisonment and fines of up to €150,000. Penalties are increased to seven (7) years' imprisonment and a fine of up to €300,000 if the offence involves an automated personal data processing system implemented by the State (articles 323-1 and 323-2 of the Code Pénal(French Criminal Code)).

It is also recalled that the fact, without legitimate reason, of importing, possessing, offering, transferring or making available equipment, an instrument, a computer program or any data designed or specially adapted to commit one or more of the offences provided for in articles 323-1 to 323-3 of the Code Pénal (French Criminal Code) is punishable by the penalties laid down respectively for the offence itself or for the most severely punished offence (article 323-3-1 of the Code Pénal (French Criminal Code)).

When the offences provided for in articles 323-1 to 323-3-1 of the Code Pénal (French Criminal Code) have been committed as part of an organized gang and against an automated personal data processing system implemented by the State, the penalty is increased to ten years' imprisonment and a fine of €300,000 (article 323-4-1 of the Code Pénal (French Criminal Code)).

Article 323-5 of the Code Pénal (French Criminal Code) also provides for additional penalties.

Attempted offences are subject to the same penalties (article 323-7 of the Code Pénal (French Penal Code)).

As a reminder, the offence of theft is committed by an individual who, without the owner's consent, removes computer data by fixing it on a medium [Constant jurisprudence of the Cour de Cassation (French Supreme Court)].