Cyber Attacks as "Force" under UN Charter Article 2(4)
I a 2010 article in Foreign Affairs, Deputy Secretary of Defense William Lynn revealed that in 2008 the Department of Defense suffered “the most significant breach of U.S. military computers ever” when a flash drive inserted into a US military laptop surreptitiously introduced malicious software into US Central Command’s classified and unclassified computer systems.1 Lynn explains that the US government is developing defensive systems to protect military and civilian electronic infrastructure from intrusions and, potentially worse, disruptions and destruction, and it is developing its own cyber-strategy “to defend the United States in the digital age.”2 To what extent is existing international law, including the UN Charter, adequate to regulate cyber attacks and related offensive and defensive activities today and in the future? By “cyber attacks” I mean efforts to alter, disrupt, degrade or destroy computer systems or networks or the information or programs on them.3 This article examines one slice of that legal puzzle: the UN Charter’s prohibitions of the threat or use of “force” contained in Article 2(4).4 Other writings in this volume deal with questions such as Article 51’s self-defense provisions and questions of State responsibility, and there are other international legal prohibitions and regulations that are relevant as well. But Article 2(4) is a good place to start
Warfighting for Cyber Deterrence: a Strategic and Moral Imperative
Theories of cyber deterrence are developing rapidly. However, the literature is missing an important ingredient—warfighting for deterrence. This controversial idea, most commonly associated with nuclear strategy during the later stages of the Cold War, affords a number of advantages. It provides enhanced credibility for deterrence, offers means to deal with deterrence failure (including intrawar deterrence and damage limitation), improves compliance with the requirements of just war and ultimately ensures that strategy continues to function in the post-deterrence environment. This paper assesses whether a warfighting for deterrence approach is suitable for the cyber domain. In doing so, it challenges the notion that warfighting concepts are unsuitable for operations in cyberspace. To do this, the work constructs a conceptual framework that is then applied to cyber deterrence. It is found that all of the advantages of taking a warfighting stance apply to cyber operations. The paper concludes by constructing a warfighting model for cyber deterrence. This model includes passive and active defences and cross-domain offensive capabilities. The central message of the paper is that a theory of victory (strategy) must guide the development of cyber deterrence.
Key resolutions of the United Nations General Assembly 1946-1996
1. Principles governing international relations 2. Maintenance and restoration of peace and security 3. Development and strengthening of international law 4. Problems of statehood 5. Economy and development 6. Human rights 7. Humanitarian law 8. Questions concerning territory, sea and space 9. Social issues 10. Environment 11. Functioning of the United Nations.