Cyber Warfare In International Law - Challenges And Solutions
Author: LawSphereX
Category: Technology, Cyber & Privacy
Published:
Updated:
CYBER WARFARE IN INTERNATIONAL LAW:
CHALLENGES AND SOLUTIONS
Malika Garg, Ramaiah College of Law, Bangalore
ABSTRACT
Cyber warfare poses unique challenges and complexities in the context of international law. As stated by Stahl in "The Uncharted Waters of Cyberspace: Applying the Principles of International Maritime Law to the Problem of Cybersecurity," there is a need to apply the principles of existing international legal frameworks, such as maritime law, to address the issues surrounding cybersecurity in cyberspace (Roche, 2019). However, the application of maritime law to cyber warfare is not without its challenges. For one, the nature of cyberspace is vastly different from that of the physical maritime domain. Cyberspace is fluid, borderless, and lacks clear jurisdiction. This presents challenges in terms of defining and attributing cyber attacks, as well as determining the appropriate response and accountability (Roche, 2019).
Furthermore, the use of cyber attacks in military competition introduces complexities in terms of the rules and laws that govern such actions. In order to effectively address cyber warfare within the framework of international law, it is crucial to develop new legal and policy frameworks that are specifically tailored to the unique characteristics of cyberspace (Moșoiu et al. , 2020). These frameworks should address issues such as defining cyber attacks and their attribution, establishing rules of engagement, and outlining responses and consequences for cyber warfare actions. Additionally, international cooperation and collaboration are essential in this context. International cooperation and collaboration are crucial in addressing the challenges posed by cyber warfare within the framework of international law (Choucri & Goldsmith, 2012).
These efforts can include the development of voluntary norms of state behavior, as mentioned in one of the sources, that can eventually become binding international law. Civil society, including academics, also play a significant role in influencing the development of cyber stability norms and ensuring that these norms align with principles of human rights and protect the security of nations and individuals in cyberspace (Choucri, 2014). In conclusion, addressing the challenges of cyber warfare within the context of international law requires a multi-faceted approach that takes into account the unique characteristics of cyberspace,
develops new legal and policy frameworks specific to cyber warfare, promotes international cooperation and collaboration, and ensures the involvement of civil society in shaping cyber stability norms. In conclusion, the challenges of cyber warfare within the context of international law require the development of new legal and policy frameworks that are tailored to the unique characteristics of cyberspace. Additionally, international cooperation and collaboration are crucial in addressing these challenges and developing voluntary norms of state behavior that can eventually become binding international law. Keywords: Cyber warfare, cyberspace, cyberattacks, international law, legal framework. I.
INTRODUCTION
In recent years, the proliferation of cyber-attacks has presented unprecedented challenges to the traditional frameworks of international law, particularly those governing armed conflict and warfare. The nature of cyber warfare involves the use of digital tools and techniques to target and disrupt critical infrastructure, communication networks, and sensitive information systems. Unlike conventional warfare, where the physical destruction of infrastructure and loss of life are more readily apparent, cyber-attacks often operate in the realm of cyberspace, where attribution and the identification of aggressors can be complex and elusive. This presents unique difficulties in terms of determining responsibility and accountability under existing legal frameworks.
Moreover, the legal principles and doctrines that have historically governed armed conflict, such as the principles of proportionality and distinction, may not always translate seamlessly to the context of cyber warfare1. The interconnected and global nature of cyberspace further complicates matters, as attacks can easily cross international borders and involve multiple actors and jurisdictions. As a result, there is a pressing need for legal scholars, policymakers, and international organizations to grapple with these challenges and develop robust legal mechanisms to address cyber threats effectively. This may involve updating existing international
1 Cyber warfare: a multidisciplinary analysis. Green, James A., 1981-. London. 7 November 2016. ISBN
9780415787079.
agreements and conventions, as well as crafting new legal frameworks specifically tailored to the realities of cyber warfare. 2 Furthermore, cooperation and coordination among states, as well as between the public and private sectors, will be crucial in mitigating the risks posed by cyber-attacks and promoting stability and security in cyberspace. This may involve enhancing information sharing mechanisms, developing incident response protocols, and fostering greater transparency and accountability in cyber operations. In sum, the emergence of cyber warfare as a distinct and potent threat underscores the need for a comprehensive and adaptive approach to international law.
3 By addressing the legal challenges posed by cyber-attacks head-on, the international community can better safeguard against the potentially devastating consequences of cyber warfare and promote a more secure and resilient global cyberspace. When applying existing international law to cyberwarfare, it's crucial to take into account the unique characteristics of cyberspace. Unlike physical battlegrounds, cyberspace is a human-made domain, jointly managed by various public and private entities worldwide. It constantly evolves in response to technological advancements and lacks clear geopolitical or physical borders. 4 In cyberspace, information and electronic payloads can be transmitted instantly between any connected points, traversing the electromagnetic spectrum in digitized fragments along unpredictable routes.
This makes it challenging to attribute cyber operations accurately, as techniques like IP spoofing and the use of botnets can obscure the origin of attacks. Despite the widespread accessibility of the internet to governments, non-state actors, businesses, and individuals, identifying the responsible parties behind cyber-attacks remains particularly difficult. Therefore, when interpreting and implementing international law in the context of cyberwarfare, it's essential to account for these unique features of cyberspace and develop appropriate legal frameworks and 22 Shakarian, Paulo; Shakarian, Jana; Ruef, Andrew (2013). Introduction to cyber-warfare: a multidisciplinary approach. Amsterdam: Morgan Kaufmann Publishers – Elsevier. p. 2 3 Schmitt, Michael N (Gen. ed. ) (2013). Tallinn Manual on the International Law Applicable to Cyber Warfare.
New York, United States of America: Cambridge University Press
4 Ibid.
mechanisms to address the complexities of this domain effectively. II.
RESEARCH METHODOLOGY
This research paper discusses about Cyberwarfare and the application of international law to its context. The challenges of applying international law to cyberspace have been discussed in this paper. Since cyberspace is vast, it needs to be controlled and regulated. This paper discusses the principles of Public International law that apply to the digital domain. In order to write this paper, I conducted detailed research about cyber laws, cyberspace, cyber threats and attacks and cyber warfare. I referred to public domain websites, reports by the governmental organisations concerned with cyber security, textbooks, peer-reviewed journals, judgements and opiniojuris. A detailed literature review is provided further in the next section of this paper.
After collecting all the necessary data, I organized it year-wise and conducted and conducted a validity test to filter out all the relevant data I needed. Since I was heavily dependant on existing data for this research, I had to make sure that the sources were correct and had a balanced approach, without any ambiguities. The data collection and analysis were fairly easy since this research paper has all qualitative information, and does not follow the quantitative approach. While conducting this research, I understood that understanding cyberwarfare and the international legal framework that applies to it is crucial for several reasons. First and foremost, cyberwarfare poses significant threats to national security, including potential disruptions to critical infrastructure, economic espionage, and interference with democratic processes.
Without a comprehensive understanding of the legal framework, countries may struggle to establish effective cybersecurity measures to protect against such threats. Additionally, cyberwarfare can have destabilizing effects on the international community, leading to tensions between states and potential conflicts. By understanding the legal framework, countries can establish norms of behavior in cyberspace and mitigate the risk of escalation. Moreover, clarity on the legal framework enables attribution of cyberattacks to specific actors, whether state-sponsored or nonstate actors. This accountability is essential for holding perpetrators responsible and
imposing consequences for their actions. Furthermore, cyberwarfare can infringe upon human rights, including the right to privacy, freedom of expression, and access to information. Knowledge of the legal framework allows for the protection of these rights and ensures that cyber activities are conducted in accordance with international law. Finally, effective cyber diplomacy requires an understanding of the legal framework governing cyber activities. Countries engage in diplomatic efforts to establish norms, rules, and agreements to enhance cybersecurity and reduce the risk of conflict in cyberspace. In summary, awareness of cyberwarfare and its legal implications is essential for safeguarding national security, promoting international stability, ensuring accountability, protecting human rights, and facilitating diplomatic efforts to address cybersecurity challenges. III.
UNDERSTANDING CYBERSPACE
In legal terms, cyberspace is often referred to as the "fifth domain of warfare," following land, sea, air, and space. Originally coined by science fiction author William Gibson in 1981, cyberspace encompasses a vast network of interconnected information technology infrastructures. This includes the Internet, telecommunications networks, computer systems, and embedded processors and controllers. According to the US Department of Defense and cybersecurity experts like Richard Clarke, cyberspace is essentially the global environment where digital interactions occur. It's not just limited to the visible Internet but also includes other interconnected networks that may not be directly accessible from the public Internet. In the context of international law and interstate relations, sovereign states are the primary actors in cyberspace.
They possess the capability to conduct cyber operations for various purposes, including espionage, sabotage, and influencing political or economic outcomes. Additionally, there are non-state actors such as hacker groups or cybercriminal organizations that can also engage in cyber warfare tactics. Furthermore, many countries are establishing dedicated cyber divisions within their military structures to defend national interests and conduct offensive cyber operations. Identifying the perpetrators of cyber attacks, whether states or non-state actors, can be
challenging due to the complex and anonymous nature of cyberspace5. However, advancements in forensic techniques and international cooperation have improved the ability to attribute cyber attacks accurately. As cyberspace continues to evolve, there is a growing need for legal frameworks and international agreements to govern behavior in this domain, ensuring stability and security in the digital age. IV.
THE CONCEPT OF CYBER SECURITY
Over the past two decades, the concept of Cyber Security has undergone significant evolution in response to the growing threat of cyber attacks from both state and nonstate actors6. This research study examines the fundamental principles of Cyber Security by analyzing legal, technical, and policy-related issues arising from recent developments in international law pertaining to cyberspace. 7 In the 1990s, the early doctrine of Cyber Security, known as the Doctrine of Prevention, focused on establishing Cyber Defence Systems to defend against specific cyber attacks targeting critical military infrastructure. This approach aimed to prevent vulnerabilities and unauthorized access to sensitive systems.
The Doctrine of Risk Management, which emerged in the early 2000s, involves assessing the cost and probability of cyber attacks to inform policy decisions, enact civil and criminal legislation on Cyber Security, and implement regulations in cyberspace. This approach seeks to manage cyber threats effectively by understanding their potential impact and likelihood. 8 The Doctrine of Accountability, also developed in the early 2000s, is based on the principles of necessity and proportionality outlined in Article 51 of the UN Charter. This doctrine encourages nation-states to deter cyber attacks by holding perpetrators accountable and threatening retribution for malicious cyber activities. In 2010, the Doctrine of Public Health proposed a conceptual shift in understanding Cyber Security as a public good akin to public health.
It emphasized that Cyber Security 5 "International Law in Cyberspace: The Koh Speech and Tallinn Manual Juxtaposed," by Eric Talbot Jensen and Ronald T. P. Alcala, Harvard National Security Journal (2014).
6 Ibid.
7 Ibid.
8 "The International Law of Cyber Operations," by David P. Fidler, Oxford University Press (2016).
is a non-excludable and non-rivalrous public good, meaning that its benefits are shared by all and cannot be depleted by use. This progressive approach led to the emergence of the contemporary Doctrine of Public Cyber Security, which advocates for the involvement of Internet Service Providers (ISPs) in safeguarding public interests in cyberspace. This includes measures to minimize exploitation and protect the integrity of online platforms and services. The doctrine of cyber security involves a set of principles and strategies aimed at safeguarding digital assets and networks from cyber threats. It includes proactive measures to reduce risks, respond to incidents, and ensure the confidentiality, integrity, and availability of information in cyberspace.
9 One important aspect of this doctrine is the acknowledgment of the ever-changing nature of cyber threats and the need for continuous adaptation in defense tactics. This entails staying updated on emerging technologies, vulnerabilities, and attack methods, as well as collaborating with stakeholders across various sectors to exchange information and best practices. Another key principle is the concept of layered security, which entails implementing multiple security measures to protect against different types of threats. This may involve measures such as network segmentation, encryption, access controls, and intrusion detection systems. Additionally, the doctrine underscores the importance of governance, risk management, and compliance frameworks to ensure that organizations have robust policies and oversight mechanisms to address cyber risks effectively.
Furthermore, it recognizes the interconnected nature of cyberspace and the need for international collaboration in combating cyber threats. This includes cooperation between governments, law enforcement agencies, industry partners, and international organizations to share threat intelligence, coordinate response efforts, and establish common standards for cyber behavior.
9 Ibid.
Overall, the doctrine of cyber security emphasizes the critical need to secure digital infrastructure and promote cyber resilience to protect against the growing and evolving cyber threats facing organizations and societies today. V.
CYBER WARFARE
Cyberwarfare encompasses the use of digital technologies, such as software, tools, and information, to conduct acts of war or conflict in the virtual environment known as cyberspace. This type of warfare isn't limited to traditional military forces but can also involve governments, non-state entities, and even individuals with malicious intent. In the realm of cyberspace, various types of attacks are prevalent, each with its own methods and objectives. 10 Malware attacks involve the deployment of malicious software to infiltrate and compromise computer systems, often with the aim of stealing sensitive information or causing disruption. Denial of Service (DOS) attacks aim to overwhelm a target system with a flood of traffic, rendering it inaccessible to legitimate users.
Phishing attacks involve tricking individuals into divulging sensitive information, such as passwords or financial details, through deceptive emails or websites. Advanced persistent threats (APTs) are sophisticated and prolonged cyberattacks orchestrated by skilled adversaries, often targeting high-value assets like government networks or critical infrastructure. Attributing cyber-attacks to their perpetrators can be challenging due to the use of techniques like masking IP addresses, employing proxies, or leveraging hacking tools to exploit vulnerabilities. International efforts to address these attribution challenges, such as the Tallinn Manual, provide guidance but lack binding authority and struggle to achieve consensus among nations, especially those with differing interests and technological capabilities.
The dynamic nature of cyberspace, marked by rapid technological advancements and the emergence of new attack methods, underscores the need for a comprehensive legal framework to govern behavior in this domain. Without such a framework, there's a risk of escalating tensions and conflicts arising from misunderstandings or
10 "The Emerging Law of Cyber War and Cyber Peace," by Paul Rosenzweig, Georgetown Journal of
International Law (2011).
misinterpretations of cyber-activity. Additionally, the absence of mechanisms for resolving disputes through arbitration or mediation could lead to countries interpreting cyber-attacks as acts of aggression and responding with physical force, resulting in significant harm to innocent civilians and property. Therefore, it's imperative for nations and their governments to remain vigilant and adaptable in the face of evolving threats in cyberspace. 11 This includes investing in cybersecurity measures, promoting international cooperation and dialogue, and working towards the development of effective legal frameworks that can address the complex challenges posed by cyberwarfare.
The concept of Cyber Warfare has undergone significant development in recent years due to shifts in the public policies of various nation-states towards the advancement of technologically sophisticated Cyber Capabilities and the pursuit of Cyber Superiority. This doctrine entails actions undertaken by nation-states or international organizations aimed at disrupting the computer systems or information networks of other states. A broader understanding of Cyber Warfare, as articulated by Parks and Duggan,
encompasses both offensive actions, referred to as Computer Network Attacks, and defensive measures, known as Computer Network Defense. However, determining appropriate and proportionate responses to Cyber Attacks poses practical challenges, as investigative techniques often fail to identify the intended target, complicating efforts to address emerging cyber threats. In this context, the application of international law principles, specifically Jus In Bello and Jus Ad Bellum, becomes essential when nation-states exercise their Right to Self- Defense against threats in cyberspace.
Nonetheless, the legal framework governing Cyber Warfare faces limitations, including unresolved issues concerning the identification of non-state proxy actors responsible for Cyber Attacks and the interpretation of terms such as armed conflicts, necessity, and proportionality within international agreements like the UN Charter, Geneva Conventions, and 4th Hague Convention.
11 Supra Note 5.
This February marked the two-years anniversary of the Russia Ukraine War which is being directed not only in Physical medium but also in Cyber-space. As we being the mere observers are witnessing both the nation’s fighting a battle in the physical space, but a lot of reports have been surfacing about attacks from the Russian side towards Ukraine under the aid of Cyber medium, from the starting of the war wherein the Russians attacked their networking satellites and against which the Ukrainian Digital Minister has formed an IT Army to counter them while using Twitter as a tool to amass support. All these activities could just be a precursor to a new variant of “warfare tactics” often referred to as “Cyber Warfare".
As we have spotted instances of it happening every now and then in compact bits, it’s often being related to the concept of Cyber Terrorism wherein at first, we witnessed some attacks where the cyberspace acted only as a quasi-reinforcement medium to the main attack but later it morphed into a huge problem when pure Cyberspace-based terrorism attacks started happening. In addition to it we have seen many instances of these kind of Internet-aided attacks happening in the physical space, it’s highly possible in the contemporary times that when we are talking about living a life in Metaverse, an idea of war in metaverse couldn’t be that far from our primal brains.
To aid all this we’ve developed certain technologies which we shall touch upon in brief while talking about, the ways where Cyber-Warfare as a concept can be used by the sovereign nations across the world, and while touching upon some points of differentia and advantages that Cyber warfare persists over the traditional(physical) warfare. Cyber warfare is observed widely in the following sectors all across the globe12: i. Public Order: The doctrine of cyber warfare encompasses a variety of tactics aimed at disrupting a state's public order, with potentially severe consequences for its citizens and broader societal well-being. These attacks, conducted through cyber means, can range from relatively minor disturbances to significant disruptions, and may be driven by personal grievances, geopolitical tensions, or strategic objectives.
12 “The Budding Concept of Cyber Warfare: A Comparative Study” by Kritik Kumar Jain and Tushar Ahuja, International Journal of Law and Legal Research.
Consider, for example, the case of an individual who, in response to a perceived injustice such as a job rejection, resorts to cyber-mediated vandalism by dumping sewage in public areas. This illustrates how personal grievances can manifest in acts of cyber sabotage that undermine public order and pose challenges for law enforcement authorities. Similarly, terrorist organizations or hostile states may leverage cyber capabilities to target a nation's critical infrastructure or disrupt essential services, such as energy distribution networks or financial systems. The Estonian cyber attacks of 2007 and 2022, reportedly originating from Russia, serve as notable examples. The 2007 attack occurred following Estonia's decision to relocate Soviet-era memorials, while the 2022 attack coincided with the country's involvement in the Russian-Ukrainian conflict.
These incidents underscore the potential for cyber warfare to exacerbate geopolitical tensions and destabilize regions. Moreover, the Colonial Pipeline Attack of 2021, orchestrated by a Russianbased group known as DARKSIDE, highlights the vulnerability of critical infrastructure to cyber threats. By compromising the operation of the pipeline, which transports gasoline and jet fuel across the southeastern United States, the attackers disrupted fuel supplies and raised concerns about national security and economic stability. The repercussions of such cyber attacks extend beyond immediate disruptions, as they can undermine public trust, disrupt economic activity, and pose significant challenges for recovery and resilience efforts.
As cyber warfare continues to evolve, it is imperative for states to strengthen their cyber defenses, enhance international cooperation, and develop robust legal and policy frameworks to address this growing threat effectively. ii. Intellectual Property of companies: Another significant area targeted by cyber attacks is the intellectual property rights (IPR) of companies, where foreign entities seek to disrupt a nation's economy by targeting its largest corporations or trade centers. These attacks involve infiltrating servers or accessing important
information, such as product designs, patents, or other intellectual property, which can have significant economic repercussions and immobilize essential services or products, ultimately leading to the devaluation of the economy. One notable example of such an attack occurred on November 24, 2014, when Sony Pictures Ltd. was targeted. The attackers released confidential data, including employee salaries, unreleased film scripts, and internal communications, through the use of a malware known as "Shamoon wiper. " The attack, attributed to a group known as Guardians of Peace, was allegedly linked to North Korea and was perceived as a warning related to the release of the film "The Interview. " Such attacks pose a threat to any major corporation, as hackers may exploit vulnerabilities to expose closely guarded secrets or other sensitive information. iii.
Militia: Cyberattacks targeting the defense sector have been ongoing since the early days of the internet, with notable incidents such as the STUXNET Attack, also known as "Operation Olympic Games," standing out as particularly impactful. This attack utilized a malicious computer worm to infiltrate an Iranian nuclear facility, causing significant damage to uranium centrifuges and thwarting Iran's nuclear ambitions. The attack affected over 200,000 computer systems and caused physical damage to approximately 1000 machines. Another concerning trend is the use of malware like Pegasus to target key individuals such as military personnel, government officials, and business leaders. Pegasus, originally developed by Israeli entities for tracking antinational elements, has raised concerns about its widespread use by nations for surveillance purposes.
Its ability to evade detection and transmit encrypted data packets makes it challenging to identify and neutralize. Spyware attacks, including those employing algorithms to gather intelligence on enemy plans and actions, remain prevalent. These attacks, exemplified by incidents like the STUXNET Attack and Russian actions against Ukrainian forces, underscore the continued threat posed by cyber
espionage. Advancements in technologies like Artificial Intelligence (AI) and the Internet of Things (IoT) present new opportunities for targeting and surveillance. China, for instance, has been accused of exploiting backdoors in IoT devices to gather intelligence, leading to concerns and actions such as the US ban on Huawei products. Overall, the evolving landscape of cyber warfare highlights the importance of robust cybersecurity measures and international cooperation to mitigate the risks posed by malicious actors and emerging technologies. To comprehend the evolving landscape of cyberwarfare, it is essential to examine key historical cases that have emerged over the past four decades: i. Morris Worm (1988)13: This marked the first public cyber-attack in the USA, inspiring subsequent generations of hackers.
Although computers are now immune to the Morris code, this attack laid the groundwork for future cyber-attacks. ii. Operation Anarchist (1998)14: The USA and UK hacked Israel's Air surveillance system, later releasing video footage of Israeli Air Force attacks in the Middle East, revealing state-sponsored cyber espionage. iii. Operation Desert Storm (1992)15: Dutch teenagers hacked into the US Department of Defense's logistical system before the Persian Gulf War, gaining unauthorized control. iv. Operation Orchard (2007)16: Israel utilized electronic warfare capabilities to strike Syrian nuclear facilities, taking over the Syrian Air defense system to facilitate the attack. v. Operation Dust Storm (2007)17: A large-scale cyber-espionage campaign
13 https://www.fbi.gov/news/stories/morris-worm-30-years-since-first-major-attack-on-internet-110218
14 Mohan B Gazula , “Cyber Warfare Conflict Analysis” CAMS.
15 Ibid.
16 Ibid.
17https://www.google.com/url?sa=i&url=https%3A%2F%2Fhistory.army.mil%2Fhtml%2Fbookshelves%2Fres mat%2Fdesert-
targeted Japanese, South Korean, US, and European companies, shifting focus to critical government infrastructures by 2015. vi. Operation Buckshot Yankeeṅ18: A benign worm known as "agent btz" targeted the US military network via thumb drives, prompting encryption measures and strict guidelines to prevent further breaches. vii. Kosovo War19: Non-state actors attempted to disrupt military operations through hacking during the conflict. viii. Operation Aurora20: A series of cyber-attacks from 2009 to 2010 targeted major US companies, with investigations implicating Chinese involvement, despite China's denial. ix. Duqu (2011)21: A computer worm disrupted Iraq's nuclear program, allegedly sponsored by Israeli efforts. x.
US 2016 Elections: Russian actors associated with Russian military intelligence (GRU) hacked email accounts and utilized social media to spread disinformation, straining US-Russian relations and resulting in US sanctions against Russia. xi. Russo-Ukrainian War: Russian authorities conducted cyber-attacks on the Ukrainian power grid during the invasion of Ukraine in 2015, with multiple cyber-attacks occurring on Ukrainian government sites during the 2022 Russian invasion of Ukraine. These cases underscore the diverse nature of cyber-attacks and their significant geopolitical implications, highlighting the need for robust cybersecurity measures and international cooperation to address emerging threats in cyberspace. storm%2Findex. html&psig=AOvVaw0g82DLgEOWjJMbuTDP6fPG&ust=1709747794094000&source=image s&cd=vfe&opi=89978449&ved=0CAYQn5wMahcKEwiAnZiG2d2EAxUAAAAAHQAAAAAQBA
18 https://www.ukessays.com/essays/security/operation-buckshot-yankee-7988.php
19 https://www.jstor.org/stable/27695024
20 Supra Note 14.
21 Ibid.
VI.
PROBABLE THREATS OF CYBER ATTACKS
The prospect of cyber-attacks has become a prominent concern within the international community, highlighting vulnerabilities in weaponry systems. These attacks aim to disrupt and incapacitate systems, computers, and programs that control weaponry, often through the infiltration of malware and viruses. Such remote access capabilities grant attackers the ability to manipulate missiles, deactivate defense mechanisms, and potentially result in catastrophic consequences. Hacked weapons may be manipulated to fire at the command of the attackers, leading to disastrous outcomes. Another significant threat lies in targeting critical infrastructure, including strategic corridors, communication channels, and logistics networks. Cyber assailants' assaults on these vital assets could result in strategic setbacks for the targeted nation.
Transportation routes for military and defense supply movements, as well as other critical infrastructure such as highways, railways, and airports, are reliant on advanced technologies for their operations. This increasing technological dependence heightens the risk of cyber threats, posing significant challenges to national security. Past events, such as cyber strikes during the Ukraine-Russia conflict, demonstrate the potential consequences of attacks on vital transport hubs or power grid systems. These incidents resulted in significant transport disruptions and power supply shortages, underscoring the severity of the threat. In addition to these challenges, governments face fundamental responsibilities to protect sovereignty, integrity, and ensure the security of the state22.
Hypothetical scenarios, such as attacks on "Just in Time" logistics systems, present further risks, as these systems rely on precise timing and any compromise could disrupt the entire supply chain movement. VII.
INTERNATIONAL LAW PRINCIPLES APPLICABLE TO CYBER WARFARE
International law offers a framework for governing cyber warfare, although the exact legal status of such warfare is still evolving. Several key international laws and
22 Supra Note 8.
agreements are relevant to cyber warfare23: i. United Nations Charter: The UN Charter prohibits the use of force by states against other states, except in self-defense or when authorized by the UN Security Council. Cyber attacks causing physical harm may be considered a use of force, allowing states to respond with force in self-defense. ii. International Humanitarian Law (IHL): IHL governs armed conflict, including cyber warfare. It mandates that attacks target only military objectives and avoid unnecessary harm to civilians or civilian objects. Cyber attacks causing harm to civilians may violate IHL. iii. Geneva Conventions: These conventions establish rules for the treatment of civilians and prisoners of war during armed conflict. Cyber attacks resulting in harm to civilians or prisoners of war may breach the Geneva Conventions. iv.
Tallinn Manual: The Tallinn Manual is a significant document that outlines international legal principles applicable to cyber warfare and provides ninetyfive specific rules governing such conflicts. It was developed between 2009 and
2012 by an international group of around twenty experts, at the invitation of the
NATO Cooperative Cyber Defence Centre of Excellence based in Tallinn, Estonia. The manual was subsequently published by Cambridge University Press in April 2013. The drafting process involved legal scholars and practitioners from various countries, making it the first comprehensive and authoritative effort to analyze the legal aspects of cyber operations and warfare. Observers from three organizations participated throughout the process: NATO's Allied Command Transformation, representing NATO's relationship with the Cyber Defence Centre of Excellence; the International Committee of the Red Cross, representing its role in overseeing international humanitarian law; and the 23 "Cyber Warfare and International Law: A Comparative Analysis," by K. Sridhar and S. K. Suman, Journal of International Law and International Relations (2015).
United States Cyber Command, providing insights from an operationally experienced entity. Developed by experts convened by NATO, the Tallinn Manual provides a nonbinding analysis of legal issues in cyber warfare. It asserts that existing international law, including the UN Charter and customary international law, applies to cyber warfare and recognizes states' right to use cyber operations in self-defense. v. Council of Europe Convention on Cybercrime: This treaty addresses criminal activities committed over the internet and requires states to criminalize various cyber crimes, such as hacking and cyber terrorism. These international laws and agreements provide a basis for understanding and regulating cyber warfare, addressing issues of state responsibility, self-defense, civilian protection, and criminal activity in cyberspace.
The research study delves into the intricate application of two fundamental principles of international law, namely Jus Ad Bellum and Jus In Bello, within the realm of international cyber security. Jus In Bello, which governs the conduct of war, draws its principles from internationally adopted agreements such as the Geneva Conventions and the Hague Convention. This principle becomes relevant when nation-states find themselves embroiled in armed conflicts, facing the looming threat of cyber attacks aimed at disrupting critical infrastructure and military systems. Under the auspices of Jus In Bello, states are compelled to bolster their cyber capabilities, both offensive and defensive, in order to safeguard their cyber security interests and protect their sovereign territories within the expansive domain of cyberspace.
Conversely, Jus Ad Bellum, rooted in the provisions of the UN Charter pertaining to the permissible use of force, governs the decision-making process of states regarding the initiation of military action. For instance, in 2011, the government of Albania embarked on a collaborative one-year program with the United States, focusing on the development of air control mechanisms and strategic cyber capabilities as part of the Albanian Cyber-Security Program. Similarly, the United Kingdom allocated substantial financial resources towards the implementation of a comprehensive three-fold Cyber
Security Strategy spanning the period from 2009 to 2013. Moreover, in April 2010, the government of India took proactive measures by establishing a dedicated Cyber Security Laboratory, aimed at enhancing the nation's cyber capabilities through the generation of current threat assessments and the development of offensive cyber capabilities, among other initiatives. These endeavors underscore the growing recognition among nation-states of the imperative to fortify their cyber defenses and bolster their offensive cyber capabilities in response to the evolving landscape of cyber threats and vulnerabilities. Implementing legal frameworks in the context of cyber warfare presents numerous hurdles. A primary obstacle lies in the intricacies of attributing responsibility for cyberattacks.
Unlike conventional military operations, which often leave identifiable traces, cyberattacks can be executed covertly or routed through intermediary servers, obscuring the true source of the attack. This anonymity complicates efforts to hold perpetrators accountable and determine appropriate responses. Furthermore, the concept of proportionality, a cornerstone of international humanitarian law (IHL), becomes particularly challenging in the context of cyber warfare. In traditional warfare, the principle of proportionality dictates that the level of force used in an attack must be commensurate with the military objective24. However, in the realm of cyber warfare, assessing proportionality is complex. For instance, a cyberattack targeting critical infrastructure may not involve physical force but could result in widespread disruption and harm.
Determining the appropriate response in such cases becomes a nuanced and contentious issue. Additionally, the lack of consensus on defining acts of aggression in cyberspace further complicates matters. While the United Nations Charter prohibits the use of force in international relations, there is no universally agreed-upon definition of what constitutes a cyberattack warranting a response under international law. Some argue that cyberattacks causing physical damage or loss of life should be considered acts of aggression, akin to traditional military actions. Others contend that only attacks involving physical force meet the threshold for aggression, leaving room for ambiguity and differing interpretations. 24 Gervais, M. (2012). Cyber-Attacks and the Laws of War. Berkeley Journal of International Law, 30, 525-531. https://doi. org/10. 2139/ssrn. 1939615
The convergence of cyberwarfare and international legal norms presents numerous complexities and obstacles. One significant challenge revolves around the difficulty of identifying the perpetrators behind cyberattacks and assigning accountability to specific states or actors. This poses challenges in enforcing established international laws and standards that govern state conduct in cyberspace. Another hurdle is the lack of consensus regarding the appropriate legal framework for regulating cyberwarfare. Existing international laws, such as those found in the United Nations Charter and International Humanitarian Law, were primarily designed to address conventional warfare and may not adequately address the distinct features of cyber conflicts.
Consequently, ongoing discussions among policymakers, scholars, and practitioners seek to determine the most suitable legal framework for governing cyberwarfare. Moreover, there is a dearth of clear guidelines outlining what constitutes an act of cyberwarfare and under what circumstances a state is justified in utilizing cyberattacks for self-defence purposes. This ambiguity raises concerns regarding the potential for heightened tensions and misjudgements in international relations, as well as the unforeseen repercussions stemming from cyber operations. VIII.
INTERNATIONAL CONVENTIONS APPLICABLE TO CYBERSPACE
Article 2(4) of the UN Charter adopts a broad interpretation of the term "use of force," reflecting its encompassing nature in addressing the application of international legal principles within the realm of cyberspace. This provision underscores the importance of considering cyber activities within the context of international law and acknowledges the evolving nature of conflicts in the digital age. Similarly, Article 51 of the UN Charter enshrines the right of nation-states to self-defense against emerging threats of cyber warfare. This right, however, is subject to the well-established principles of proportionality and necessity under international law. This means that any defensive actions taken by states in response to cyber attacks must be proportional to the threat posed and necessary to repel the attack.
The applicability of various international conventions to cyberspace is predicated on the consent of the nation-states that ratify them. By ratifying these conventions, states commit to enacting domestic legislation to address cyber crimes and enhance cooperation in law enforcement efforts. For example, the UN Convention Against
Transnational Organized Crime (2000) mandates member states to enact laws targeting cyber crime and establish mechanisms for international cooperation in combating such offenses. Moreover, conventions such as the Convention on the Rights of the Child (1989) aim to protect children from exploitation and abuse, including in cyberspace. Provisions within this convention may include measures to prevent access to child pornography and prohibit the solicitation of children for sexual purposes online. Additionally, the Council of Europe has developed international conventions specifically addressing cyber security concerns. The Budapest Convention, also known as the Convention on Cyber Crime (2001), facilitates cooperation among law enforcement agencies to combat computer-related crimes.
Similarly, the Convention on the Protection of Children Against Sexual Abuse (2007) includes provisions aimed at combating child pornography and preventing the online solicitation of minors for sexual purposes. Overall, these international legal instruments play a crucial role in shaping the legal framework for addressing cyber security challenges and upholding fundamental principles of international law in cyberspace. IX.
CASES TO SUPPORT THE APPLICATION OF INTERNATIONAL LAW IN
CYBERSPACE
The emergence of cyber warfare in armed conflicts is a relatively recent development, and there have been limited instances where international law has been applied to such warfare. However, several notable cases have played a role in shaping the legal framework surrounding cyber warfare. One significant case occurred in 2007, involving Israel and Syria25. During an airstrike on a Syrian nuclear reactor, the Israeli Air Force allegedly utilized a computer virus to disable Syrian air defenses. While neither side publicly acknowledged the incident, it is widely believed to be one of the earliest instances of cyber warfare being employed alongside conventional military operations. Another case took place in 2007, when
25 https://www.aljazeera.com/news/2018/3/21/israel-confirms-bombing-syria-nuclear-reactor-in-
2007#:~:text=The%20Israeli%20army%20said%20a,September%205%20to%206%2C%202007.
Estonia26 faced a series of cyberattacks that targeted government and commercial websites. These attacks, believed to be orchestrated by Russian hackers, were in response to a dispute over the relocation of a Soviet-era war memorial. The incident underscored the need for international norms and legal frameworks to govern cyber warfare. In 2010, the discovery of the Stuxnet virus revealed its use in sabotaging Iran's nuclear program27. Developed by the United States and Israel, Stuxnet caused significant damage to Iran's nuclear facilities and raised questions about the legality of employing cyber warfare to disrupt critical infrastructure. Overall, these cases highlight the evolving nature of cyber warfare and the challenges it poses for existing legal frameworks.
They underscore the importance of developing international norms and laws to address the unique complexities of cyber warfare in armed conflicts. X.
CONCLUSION
Cyberwarfare operates beyond conventional borders, existing within the intangible realm of cyberspace where battles are waged through digital means rather than traditional weaponry. In light of this, nations are advised to implement the following recommendations to fortify their defensive stance against cyber threats and warfare.
1) Nations should establish a strategic framework detailing their readiness and
response strategies to cyberattacks. Continuously evaluating their cybersecurity posture will enable nations to adapt their strategies to evolving threats.
2) Recognizing the dynamic nature of cyberspace, nations must maintain flexible
cybersecurity strategies that can be adjusted in response to changing threats and global dynamics.
3) Effective cybersecurity requires robust defense mechanisms, international
cooperation, and a skilled workforce. Establishing an executive professional 26https://www.ccdcoe.org/uploads/2018/10/Ottis2008_AnalysisOf2007FromTheInformationWarfarePerspective. pdf
27 https://www.csoonline.com/article/562691/stuxnet-explained-the-first-known-cyberweapon.html
body within relevant government departments can aid in planning and executing cybersecurity strategies, providing guidance to policymakers. Similarly, the international community should consider the following recommendations to bolster their defensive capabilities against cyber threats and warfare.
1) Given that cyberspace is shared globally, conflicts in cyberspace can impact all
nations. It is imperative for the international community to collaborate and share information to address mutual concerns and mitigate the risk of escalating cyber conflicts.
2) Non-state actors pose a significant threat in cyberspace, potentially engaging in
cyberattacks for economic and financial gain. An international consensus is needed to prohibit the use of cyberattacks by non-state actors, with penalties imposed in accordance with national laws.
3) Creation of an independent agency under the auspices of the United Nations to
monitor, regulate, and respond to cyber threats is recommended. Such an agency could enforce agreements and sanctions against nations or non-state actors found to be in violation, promoting global cybersecurity. The establishment of an "International Treaty on Cybersecurity" could provide a framework for regulating cyber threats and attacks, outlining preventive, punitive, and prohibitive measures. However, it is acknowledged that technologically advanced countries may be hesitant to sign such agreements due to geopolitical interests. Therefore, it is incumbent upon world leaders to prioritize discussions on this issue, organizing summits and conferences to foster international dialogue and cooperation on cybersecurity matters.