This article examines how the existing law of armed conflict may be applied or adapted to meet the challenges posed by cyber-attacks. It begins with a definition of cyber-attacks, cyberexploitation and cyberespionage and their differences. The article discusses how cyber-attacks are regulated by the existing body of laws such as the United Nations Charter, International humanitarian Law (IHL), international treaties and domestic laws. It notes that the existing law addresses only a small fraction of potential cyber-attacks. IHL, for example, provides a useful framework for a very small number of cyber-attack that amounts to an armed attack or that take place within the context of armed conflict. The article concludes that, since cyber-attacks are global in nature, there is need for a new international legal framework to more effectively deal with the challenges posed by cyber-attacks.
(2017). Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations. Cambridge: Cambridge University Press (Hereinafter Tallinn Manual 2.0).
Alston, P. (2010). Report of the Special Rapporteur on Extrajudicial, Summary or Arbitrary Executions, Addendum: Study on Targetted Killings. A/HRC/14/24/Add.6. https://www.refworld.org/docid/4c0767ff2.html
Armed Activities on the Territory of the Congo (Dem. Rep. Congo v. Uganda) 2005 I.C.J. 116, 165 (Dec. 19).
Brownlie, I. (2012). International Law and the Use of Force by States (p. 362). Oxford: Oxford University Press.
Convention on Cybercrime, Council of Europe, Nov. 23, 2001, 41 I.L.M. 282.
Dinstein, Y. (2002). Computer Network Attacks and Self Defense. In M. N. Schmitt, & B. T. O’Donnell (Eds.), Computer Network Attack and International Law (p. 99). International Law Series, Vol. 76, Newport, RI: Naval War College.
Dinstein, Y. (2005). War, Aggression and Self Defence (4th ed.). Cambridge: Cambridge University Press. https://doi.org/10.1017/CBO9780511841019
Geneva Convention Relative to the Treatment of Prisoners of War, Aug. 12, 1949, 6 U.S.T. 3316, 75 U.S.T.S. 135.
Gervais, M. (2012). Cyber-Attacks and the Laws of War. Berkeley Journal of International Law, 30, 525-531. https://doi.org/10.2139/ssrn.1939615
Graham, D. E. (2010). Cyber Threats and the Law of War. Journal of National Security Law and Policy, 4, 89.
Green, L. C. (2000). The Contemporary Law of Armed Conflict (2nd ed.). Manchester: Manchester University Press.
Hague Conventions IV Respecting the Laws and Customs of War on Land, Annex, Oct. 18, 1907, 36 Stat. 2277, 205 consol. T.S. 277.
Hathaway, O. A., & Crootof, R. (2012). The Law of Cyber Attack (p. 850). Faculty Scholarship Series, Paper 3852. https://digitalcommons.law.yale.edu/fss_papers/3852
Horowitz, J. (2020). Cyber Operations under International Humanitarian Law: Perspectives from the ICRC. ASIL Insights, 24. https://asil.org/insights/volume/24/issue/11/cyber-operations-under-international-humanitarian-law
Jensen, E. (2002). Computer Attacks on Critical National Infrastructure: A Use of Force Invoking the Right of Self-Defense. Stanford Journal of International Law, 38, 207.
Lin, H. (2010). Offensive Cyber Operations and the Use of Force. Journal of National Security Law & Policy, 4, 63.
Madubuike-Ekwe, N. J. (2017). The Applicability of the Law of Armed Conflict to Cyberwarfare: An Overview of Issues. I BUA L. J., 149.
Military and Paramilitary Activities in and against Nicaragua (Nicar V. US) 1986 I.C.J. 14 (June 27).
Moore, J. N. (2005). Development of International Law of Conflict Management. In J. N. Moore, & R. F. Turner (Eds.), National Security Law (2nd ed.). Durham, NC: Carolina Academic Press.
National Research Council (NRC) (2009). Technology, Policy, Law and Ethics regarding U.S. Acquisition and Use of Cyberattack Capabilities.
Prosecutor v. Tadic, Case No. IT-94-1-T, Sentencing Judgement 120 (July 14, 2007).
Protocol Additional to the Geneva Conventions of 12 August 1949, and Relating to the Protection of Victims of International Armed Conflicts. (Hereinafter Protocol 1).
Roscini, M. (2010). World Wide Warfare-Jus Ad Bellum and the Use of Cyber Force. Max Planck Yearbook of United Nations Law, 14, 85-130. https://doi.org/10.1163/18757413-90000050
Schmitt, M. N. (1999). Computer Network Attack and the Use of Force in International Law: Thoughts on a Normative Framework. Columbia Journal of Transnational Law, 37, 885-937. https://doi.org/10.21236/ADA471993
Shaw, M. (2010). International Law (6th ed.). Cambridge: Cambridge University Press.
Sklerov, M. J. (2009). Solving the Dilemma of State Responses to Cyber-Attacks: A Justification for the Use of Active Defenses against States Which Neglect Their Duty to Prevent. Military Law Review, 201, 1-85.
The International Law Commission Commentary, Official Records of the G.A. 53rd Session, December 10, 2001, Supplement No. 10 (A/56/10 Ch.IV. E.1).
The Paris Call for Trust and Security in Cyberspace, November 12, 2018. https://pariscall.international/en
U. N. Gen Ass Res. 3314 (XXIX) 1974.
U.N. G.A. Res 45/121, 3, U.N. Doc /A/RES/45/121 (Dec. 14, 1990).
U.S. Diplomatic and Consular Staff in Tehran (U.S. v. Iran) 1980 I.C.J. 3 (May 24).
U.S. Training & Doctrine Command, DCSINT Handbook No. 1.02 Critical Infrastructure Threats and Terrorism at VII-2 (2006).
UN Charter, arts 2, 27, 41, 42, 51.
United Nations Charter, Articles 2(3), 2(4), 41, 42, 51.
Wallace, R. M. M., & Martin-Ortega, O. (2013). International Law (7th ed.). Mytholmroyd: Sweet & Maxwell.
Wedgewood, R. (2002). Proportionality, Cyberwar and the Law of War. In M. N. Schmitt, & B. T. O’Donnell (Eds.), Computer Network Attack and International Law (pp. 219, 227-230).
Wingfield, T. (2000). The Law of Information Conflict: National Security Law in Cyberspace. Falls Church, VA: Aegis Research Corp.