The subject of the article is the international and national legal aspects of compensation for economic damages caused by cyber attacks. The purpose of the article is to contribute to the ongoing debate on attribution and liability for malicious and destructive cyber activity. Cyber attacks have become a global problem facing the international community, posing enormous risks to the stability of international security, economic and social development, and the safety and well-being of individuals. Cyber attacks have proven to be numerous problems for domestic and international law – international humanitarian law, human rights law, the law of armed conflict – how to counter the actions of hybrid warfare by legal means, what are the remedies for losses due to cyber attacks. This article examines cyber attacks to show how the international community is moving toward responsible behavior by states in cyberspace, protecting civilians and critical infrastructure. The article's methodology is based on doctrinal legal research in this area, as well as international legal instruments, in order to examine how economic damages should be paid to victims of malicious acts in cyberspace. The difficulty of attributing cyber attacks has been analyzed to show that perpetrators evade responsibility, a separate problem for international law. It is concluded that international law, as it currently stands, provides little legal basis for substantive guidance on responsible state behavior in cyberspace, the necessary levels of attribution to establish state or non-state responsibility for cyber attacks. Economic losses from cyber attacks can be covered by insurance schemes, although analysis has shown that they do not work because insurers argue that cyber attacks exclude military risk insurance clauses that exclude coverage, which is reasonable, although it leaves victims of cyber attacks without the ability to recover damages. The paper supplements current research with a comprehensive analysis of legal and economic issues and calls for the development of an appropriate strategic environment, legal and infrastructural framework. The need for a joint international framework is emphasized, as civil liability under national law is hardly possible because cyber attacks are predominantly transnational in nature. A joint structure is also needed to prevent, deter and respond to state-sponsored cyber attacks.
How to Cite
hybrid war, international law, cyber war, cyber threats, cyber attribution
Ali, A. J. (2013). Cyber attacks: a menace to global trade. Competitiveness Review, 23, 1. DOI: https://doi.org/10.1108/cr.2013.34723aaa.001
Aravindakshan, S. (2021). Cyber attacks: a look at evidentiary thresholds in International Law. Indian Journal of International Law, 59, 285–299. DOI: https://doi.org/10.1007/s40901-020-00113-0
Chopra, A. (2021). Cyber attack intangible damages in virtual world: Property insurance companies declare war on cyber-attack insurance claims. Ohio State Law Journal, 82(1), 121-[ii].
Council Regulation (EU) 2019/796 of 17 May 2019 concerning restrictive measures against cyber-attacks threatening the Union or its Member States.
Delerue, F. (2020). Measures of Self-Help against State-Sponsored Cyber Operations. In Cyber Operations and International Law (Cambridge Studies in International and Comparative Law, pp. 423-490). Cambridge: Cambridge University Press. DOI: https://doi.org/10.1017/9781108780605.015
Eichensehr, K. E. (2020). The law and politics of cyber attack attribution. UCLA Law Review, 67(3), 520–598.
Fogt, M. M. (2021). Legal challenges or "gaps" by countering hybrid warfare building resilience in jus ante bellum. Southwestern Journal of International Law, 27(1), 28–100.
International humanitarian law and cyber operations during armed conflicts: ICRC position paper submitted to the Open-Ended Working Group on Developments in the Field of Information and Telecommunications in the Context of International Security and the Group of Governmental Experts on Advancing Responsible State Behaviour in Cyberspace in the Context of International Security, November 2019. (2020). International Review of the Red Cross, 102(913), 481–492. DOI: https://doi.org/10.1017/S1816383120000478
INTERPOL (2020). Cybercriminals targeting critical healthcare institutions with ransomware. Available at: https://www.interpol.int/en/News-and-Events/News/2020/Cybercriminals-targeting-critical-healthcare-institutions-with-ransomware;
National Research Council (2009). “Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyber attack Capabilities”.
Nori Katagiri (2021). Why international law and norms do little in preventing non-state cyber attacks. Journal of Cybersecurity, 7(1), tyab009. DOI: https://doi.org/10.1093/cybsec/tyab009
Korhonen, O. (2015). Deconstructing the Conflict in Ukraine: The Relevance of International Law to Hybrid States and Wars. German Law Journal, 16(3), 452–478. DOI: https://doi.org/10.1017/S2071832200020940
Madubuike-Ekwe, J. N. (2021). Cyber attack and the Use of Force in International Law. Beijing Law Review, 12, 631–649. DOI: https://doi.org/10.4236/blr.2021.122034
Mihaylov, V.m & Sitek, S. (2021). Trade wars and the changing international order: a crisis of globalization? Miscellanea Geographica, 25(2), 99–109. DOI: https://doi.org/10.2478/mgrsd-2020-0051
Andrew Radin, Hybrid Warfare in the Baltics: Threats and Potential Responses (RR-1577-AF, Santa Monica, CA: RAND Corporation, 2017).
Russia’s Approach to Cyber Warfare (September, 2016) CNA’s Occasional Paper series. Available at: https://apps.dtic.mil/sti/pdfs/AD1019062.pdf
Report of the Group of Governmental Experts on Advancing responsible State behaviour in cyberspace in the context of international security. Available at: https://front.un-arm.org/wp-content/uploads/2021/06/final-report-2019-2021-gge-1-advance-copy.pdf
Watts, S. (2016). Beyond State-Centrism: International Law and Non-state Actors in Cyberspace. Journal of Conflict and Security Law, 21(3), 595–611. DOI: https://doi.org/10.1093/jcsl/krw019
Wan, K. S. (2020). Notpetya, not warfare: rethinking the insurance war exclusion in the context of international cyber attacks. Washington Law Review, 95(3), 1595–1620.
Cyberwarfare and Cyberterrorism: In Brief (2015, March). Congressional Research Service. Available at: https://fas.org/sgp/crs/natsec/R43955.pdf