Cyber operations against critical infrastructure under norms of responsible state behaviour and international law. (17th April 2023)

• Record Type: Journal Article
• Authors: Haataja, Samuli
• Is Part Of: International journal of law and information technology. Volume 30:Number 4(2022)
• Page Start: 423
• Page End: 443
• Publication Date: 2023-04-17
• Subjects: cyber norms -- international law -- cyber operations -- critical infrastructure -- cyberspace; Computers -- Law and legislation -- Periodicals; Legal research -- Data processing -- Periodicals; Information storage and retrieval systems -- Law -- Periodicals; Information technology -- Periodicals; 343.0999
• DOI: 10.1093/ijlit/eaad006
• Languages: English
• ISSNs: 0967-0769

Abstract

Abstract: There has been agreement at the United Nations level about a set of norms of responsible state behaviour in cyberspace, including norm (f) which prohibits cyber operations that cause intentional damage or impairment to critical infrastructure (CI). This article examines norm (f) in light of existing international law prohibiting malicious cyber operations against CI. It argues that norm (f) introduces complexity to the application of the law in this context that is counterproductive to developing clarity about the cyber operations against CI that are prohibited by international law. This is due to the subjectivity of the concept of CI, the contradictory legal status of norm (f), and due to existing uncertainties in how international law applies to state conduct in cyberspace which are compounded by norm (f). The article concludes that states need to develop more clarity about the relationship between international law and the norms of responsible state behaviour in cyberspace, and about how international law applies to cyber operations, particularly where CI is targeted.