For both research and non-research developed software, please reference Guidance for Stony Brook Developed Software (NetID and password required)

Encryption - Special Rules

Encryption is a complex area of control under both the Export Administration Regulations and the International Traffic in Arms Regulations. Any projects that involve strong cryptography should be reviewed in conjunction with the appropriate regulations.

The Bureau of Industry and Security, Department of Commerce, provides extensive information on encryption, including classification tools.

Cybersecurity Items- Special Rules 

Cyber Rule under the Export Administration Regulations (EAR) for certain dual-use 'cybersecurity items'.    Effective March 2022, added to the EAR: ECCNs 4A005 and 4D004, and a new paragraph 4E001.c, commodities, software and technology relating to the “generation, command and control or delivery of ‘intrusion software”  and new paragraph 5A001.j  relating to “IP network communications surveillance systems or equipment”.   

The Bureau of Industry and Security, Department of Commerce, provides a Cyber Tools Flow Chart and extensive FAQ.