Sovereignty and Attribution Challenges in Modern State Cyber Warfare
DOI:
https://doi.org/10.59022/IRSHAD-iijcl.12Keywords:
Sovereignty, Attribution, Cyber Warfare, State Responsibility, Deterrence, Proxy Actors, International LawAbstract
Cyber warfare increasingly challenges traditional sovereignty and attribution rules within international law. Existing legal frameworks remain territorially anchored, leaving hidden digital operations poorly addressed. This research examines how sovereignty doctrine and attribution standards intersect during modern state cyber conflict. It aims to identify gaps linking technical evidence to formal legal responsibility. The study uses a qualitative approach, applying doctrinal legal analysis and document review. Sources include treaties, judicial interpretations, and recent peer-reviewed scholarly literature. Results show attribution relies heavily on technical forensics rather than clear legal standards. Proxy actors weaken accountability, while treaties lack defined thresholds for armed attack. Deterrence weakens without reliable attribution, encouraging repeated cyber aggression across borders. Findings suggest combining evidentiary and legal frameworks could close these persistent gaps. Policymakers should invest in joint technical-legal institutions and clearer attribution standards today. This research concludes that sovereignty and accountability must be addressed together within evolving international cyber law.
References
Achuthan, K., et al. (2024). Advancing cybersecurity and privacy with artificial intelligence. In International Conference on Cyber Warfare, Security and Space Research (pp. 130–143). Springer. https://doi.org/10.1007/978-3-031-15784-4_11
Ades, P. A. (2021). Why international law and norms do little in preventing non-state cyber operations. Journal of Cybersecurity, 7(1), tyab009. https://doi.org/10.1093/cybsec/tyab009
AllahRakha, N. (2023). Cyber law: Safeguarding digital spaces in Uzbekistan. International Journal of Cyber Law, 1(5). https://doi.org/10.59022/ijcl.53
AllahRakha, N. (2023). Ensuring cyber-security in remote workforce: Legal implications and international best practices. International Journal of Law and Policy, 1(3). https://doi.org/10.59022/ijlp.43
Assaf, A. (2023). Violations of sovereignty in "cyberspace" under the United Nations Charter. HSE University Journal of International Law, 1(3), 4–20. https://doi.org/10.17323/jil.2023.18848
Balarabe, K. (2025). Digital borders and beyond: Establishing normative grounds for cybersecurity and sovereignty in international law. Computer Law & Security Review, 58, 106180. https://doi.org/10.1016/j.clsr.2025.106180
Banks, W. C. (2019). The bumpy road to a meaningful international law of cyber attribution. AJIL Unbound, 113, 191–196. https://doi.org/10.1017/aju.2019.32
Banks, W. C. (2021). Cyber attribution and state responsibility. International Law Studies, 97, 1039–1072. https://doi.org/10.5038/1944-0472.4.2.3
Beisenbayev, E. (2026). Parliamentary discourse and legislative approaches to cyber sovereignty. Frontiers in Political Science, 8, 1874183. https://doi.org/10.3389/fpos.2026.1874183
Boutin, B. (2023). State responsibility in relation to military applications of artificial intelligence. Leiden Journal of International Law, 36(1), 133–150. https://doi.org/10.1017/S0922156522000607
Broeders, D. (2024). Cyber intelligence and international security: Breaking the legal and diplomatic silence? Intelligence and National Security, 39(6), 1–18. https://doi.org/10.1080/02684527.2024.2398077
Buchan, R. (2016). Decoding Article 8 of the International Law Commission's Articles on State Responsibility: Attribution of cyber operations by non-State actors. Journal of Conflict and Security Law, 21(3), 405–428. https://doi.org/10.1093/jcsl/krw017
Carpenter, C. (2025). Whose crime is it anyway? State responsibility and individual criminal responsibility in cyberspace. Journal of International Criminal Justice, 23(1), 69–85. https://doi.org/10.1093/jicj/mqae005
Corn, G. P., & Taylor, R. (2017). Sovereignty in the age of cyber. AJIL Unbound, 111, 207–212. https://doi.org/10.1017/aju.2017.57
Delerue, F. (2020). Cyber operations and international law. Cambridge University Press. https://doi.org/10.1017/9781108780605
Di Scipio, J. (2021). Developing an international framework for addressing non-state actors in cyberspace. Undergraduate Research Journal, 5(1), 1–15. https://doi.org/10.25776/qzby-ga54
Dinniss, H. H. (2012). Cyber warfare and the laws of war. Cambridge University Press. https://doi.org/10.1017/CBO9781139061285
Ducheine, P. A. L., & Pijpers, P. B. M. J. (2021). The notion of cyber operations. In N. Tsagourias & R. Buchan (Eds.), Research handbook on international law and cyberspace (2nd ed., pp. 285–306). Edward Elgar Publishing. https://doi.org/10.4337/9781789904253.00024
Egloff, F. J., & Smeets, M. (2023). Publicly attributing cyber attacks: A framework. Journal of Strategic Studies, 46(3), 502–533. https://doi.org/10.1080/01402390.2021.1895117
Eichensehr, K. (2017). Cybersecurity & the new systems of collective defense. Virginia Journal of International Law, 57, 55–112. https://doi.org/10.2139/ssrn.2907855
Finlay, L., & Payne, C. (2019). The attribution problem and cyber armed attacks. American Journal of International Law, 113, 202–206. https://doi.org/10.1017/aju.2019.35
Ghannadi, A. R. (2025). Artificial intelligence and international law: Challenges and opportunities. Legal Studies in Digital Age, 5(1), 1–15. https://doi.org/10.61838/kman.lsda.207
Gill, T. D., & Tsagourias, N. (2015). The 2008 cyber operations in the Georgia-Russia conflict. Yearbook of International Humanitarian Law, 14, 311–333. https://doi.org/10.1007/978-94-6236-017-4_10
Haataja, S. (2023). Complicity in unlawful offensive cyber operations under international law on state responsibility. European Conference on Cyber Warfare and Security Proceedings, 1–10. https://doi.org/10.34190/eccws.22.1.1114
Hakimi, M. (2019). Introduction to the symposium on cyber attribution. AJIL Unbound, 113, 189–190. https://doi.org/10.1017/aju.2019.30
Henrico, S. (2025). Cyber attacks in South Africa: Geopolitical and legal implications. Nnamdi Azikiwe Journal of Political Science, 8(1), 101–115. https://doi.org/10.1080/10246029.2025.2489352
Hidalgo, E. S., Calleja, A., & Espelt, R. (2024). Co-creation of the Digital Democracy and Data Commons Manifesto: Alternative sociotechnical visions of data. Open Research Europe, 4, 45. https://doi.org/10.12688/openreseurope.17020.2
Hulkó, G. (2025). The politics of digital sovereignty and the European Union. Frontiers in Political Science, 7, 1548562. https://doi.org/10.3389/fpos.2025.1548562
Kajander, A., Liivoja, R., & Naagel, M. (2025). Cybersecurity of weapon systems: International law requirements and technical standards. Journal of Cybersecurity, 11(1), tyaf017. https://doi.org/10.1093/cybsec/tyaf017
Leventopoulos, S. (2024). Retaliating against cyber-attacks: A decision-taking framework for policy makers. AI & Society, 39(1), 1–15. https://doi.org/10.1365/s43439-024-00113-5
Liebetrau, T. (2022). Cyber conflict short of war: A European strategic vacuum. European Security, 31(4), 497–516. https://doi.org/10.1080/09662839.2022.2031991
Lindsay, J. R. (2013). Stuxnet and the limits of cyber warfare. Security Studies, 22(3), 365–404. https://doi.org/10.1080/09636412.2013.816122
Lindsay, J. R. (2015). Tipping the scales: The attribution problem and the feasibility of cyber deterrence. Journal of Cybersecurity, 1(1), 53–67. https://doi.org/10.1093/cybsec/tyv003
Mačák, K. (2021). Unblurring the lines: Military cyber operations and international law. Journal of Cyber Policy, 6(3), 411–428. https://doi.org/10.1080/23738871.2021.2014919
Marelli, M. (2022). The SolarWinds hack: Lessons for international humanitarian organizations. International Review of the Red Cross, 104(919), 1–25. https://doi.org/10.1017/S181638312200025X
Pierucci, F. (2025). Sovereignty in the digital era: Rethinking territoriality and state responsibility in cyberspace. Digital Society, 4(1), 1–15. https://doi.org/10.1007/s44206-025-00189-4
Pohle, J., & Thiel, T. (2020). Digital sovereignty. Internet Policy Review, 9(4). https://doi.org/10.14763/2020.4.1532
Popalzay, A. W. (2025). The evolving landscape of the Israel–Iran conflict 2024–2025: Cyber warfare and precision-guided munitions. Journal of Cybersecurity and International Affairs, 2(1), 1–15. https://doi.org/10.1142/S2630531325500179
Prasad, N., Diro, A., Warren, M., & Fernando, M. (2025). A survey of cyber threat attribution: Challenges, techniques, and future directions. Computers & Security, 157, 104606. https://doi.org/10.1016/j.cose.2025.104606
Rid, T., & Buchanan, B. (2015). Attributing cyber attacks. Journal of Strategic Studies, 38(1-2), 4–37. https://doi.org/10.1080/01402390.2014.977382
Roberts, H. (2024). Digital sovereignty and artificial intelligence: A normative approach. Ethics and Information Technology, 26(4), 70. https://doi.org/10.1007/s10676-024-09810-5
Schmitt, M. N. (Ed.). (2013). Tallinn manual on the international law applicable to cyber warfare. Cambridge University Press. https://doi.org/10.1017/CBO9781139169288
Schmitt, M. N. (Ed.). (2017). Tallinn manual 2.0 on the international law applicable to cyber operations. Cambridge University Press. https://doi.org/10.1017/9781316822524
Spector, P. (2017). In defense of sovereignty, in the wake of Tallinn 2.0. AJIL Unbound, 111, 205–206. https://doi.org/10.1017/aju.2017.58
Su, C. (2023). A comparative study on TikTok's data policy: How to think about cyber sovereignty. Chinese Journal of Communication, 13(1), 8–26. https://doi.org/10.1080/17544750.2019.1687536
Sukumar, A., & Basu, A. (2024). Back to the territorial state: China and Russia's use of UN cybercrime negotiations to challenge the liberal cyber order. Journal of Cyber Policy, 9(2), 256–287. https://doi.org/10.1080/23738871.2024.2436591
Thumfart, J. (2020). Public and private just wars: Distributed cyber deterrence based on Vitoria and Grotius. Internet Policy Review, 9(3). https://doi.org/10.14763/2020.3.1500
Tsagourias, N. (2012). Cyber attacks, self-defence and the problem of attribution. Journal of Conflict and Security Law, 17(2), 229–244. https://doi.org/10.1093/jcsl/krs013
Zhang, C. (2025). A cross-national comparative study of metaverse policy and digital sovereignty. Politics and Governance, 13(1), 1–15. https://doi.org/10.17645/pag.10239
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Javlonbek Omonboev (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
