THE ATTRIBUTION CHALLENGE IN CYBER WARFARE AND INTERNATIONAL LAW

AUTHOR – AMAN KUMAR JHA, SUJAL CHHAJED & TANISHK BHAWSAR

STUDENTS AT NATIONAL LAW INSTITUTE UNIVERSITY, BHOPAL

BEST CITATION – AMAN KUMAR JHA, SUJAL CHHAJED & TANISHK BHAWSAR, THE ATTRIBUTION CHALLENGE IN CYBER WARFARE AND INTERNATIONAL LAW, INDIAN JOURNAL OF LEGAL REVIEW (IJLR), 5 (11) OF 2025, PG. 763-772, APIS – 3920 – 0001 & ISSN – 2583-2344

abstract

The increasing frequency and sophistication of cyber operations directed against states has exposed a critical gap in international law, the problem of attribution. Unlike conventional armed attacks, cyber operations are often conducted through obfuscation techniques, proxy actors, and transnational infrastructures, making it exceedingly difficult to identify perpetrators with legal certainty. This paper examines the attribution challenge in the context of cyber warfare and its implications for state responsibility under international law. It begins by outlining the existing legal framework governing the use of force, sovereignty, and non-intervention, with particular attention to the U.N. Charter and the International Law Commission’s Draft Articles on State Responsibility. It then explores how these rules operate when applied to cyber operations, highlighting the unique technical and evidentiary barriers that complicate attribution. The paper further analyses landmark judicial decisions, including the ICJ’s Nicaragua case and relevant jurisprudence from international tribunals, to demonstrate how thresholds of “effective control” and “overall control” remain contested when transposed to cyberspace. The role of international initiatives such as the Tallinn Manual, U.N. GGE and OEWG reports, and state practice is critically assessed to evaluate the gradual evolution of norms. By engaging with case studies of cyber incidents such as the Stuxnet attack, WannaCry ransomware, and election interference campaigns, the paper illustrates the intersection of law, technology, and geopolitics in shaping attribution strategies. Ultimately, it advocates for a more nuanced approach to attribution that blends legal, technical, and policy considerations, and proposes potential pathways for developing clearer standards of state responsibility in cyberspace.

Keywords: Cyber Warfare, Attribution, State Responsibility, International Law