Cybersecurity and International Law: The Challenge of Sovereignty in Cyberspace
DOI:
https://doi.org/10.53573/rhimrj.2025.v12n9.012Keywords:
Cybersecurity, International Law, Sovereignty, Tallinn Manual, Cyber Governance, Attribution, State Responsibility, Cyber WarfareAbstract
The fast proliferation of digital networks and interconnected infrastructures has transformed cyberspace into a major sphere of geopolitical contestation, generating difficult problems about state sovereignty, jurisdiction, and responsibility. Conventional international legal systems, predicated on distinctly delineated territorial boundaries, encounter difficulties in governing actions that surpass physical borders, including cross-border cyberattacks, data breaches, and state-sponsored cyber espionage. This paper critically analyses the ways in which cybersecurity undermines traditional concepts of sovereignty and assesses the effectiveness of current international legal frameworks, such as the UN Charter, the Tallinn Manual, and regional cybersecurity conventions, in addressing matters of attribution, self-defense, and the acceptable application of force in cyber operations. The research uncovers enduring legal uncertainty regarding the definition of a cyber “attack,” the conditions under which governments may legitimately respond, and the allocation of liability for transnational cyber injuries. The study contends that sovereignty in cyberspace should be redefined as shared, layered, and cooperative, rather than solely territorial, employing doctrinal analysis and contemporary cyber incidents as case studies. It proposes that forthcoming regulatory frameworks should incorporate state accountability, multi-stakeholder governance, and standards of due diligence to promote cyber-stability. To keep cyberspace from becoming a lawless area of conflict, we need to improve international collaboration and make legal rules more consistent.
References
Barlow, J. P. (1996, February 8). A declaration of the independence of cyberspace. Wired.
DeNardis, L. (2014). The global war for Internet governance. Yale University Press.
Eichensehr, K. E. (2020). The law and politics of cyberattack attribution. UCLA Law Review, 67(3), 520–575.
Jolley, J. D. (2017). Attribution, state responsibility, and the duty to prevent malicious cyber-attacks in international law.
Klimburg, A. (2017). The darkening web: The war for cyberspace. Penguin Press.
Nye, J. S. Jr. (2010). Cyber power (Harvard Kennedy School Belfer Center Paper). Harvard University.
Nye, J. S. Jr. (2017). The future of power in the cyber age: The illusion of unipower. International Security, 42(2), 102–114. https://doi.org/10.1162/ISEC_a_00295
Özdemir, J. Ö. (2022). Attribution of cyber operations in international law [Unpublished master’s essay]. Lund University.
Payne, T. (2016). Teaching old law new tricks: Applying and adapting state responsibility to cyber operations. Lewis & Clark Law Review, 20(2), 683–712.
Schmitt, M. N. (Ed.). (2017). Tallinn Manual 2.0 on the international law applicable to cyber operations. Cambridge University Press.
Segal, A. (2016). The hacked world order: How nations fight, trade, manoeuvre, and manipulate in the digital age. PublicAffairs.
Stoica, V. (2020). The application of international law to cyber operations: Some brief remarks on sovereignty, use of force and attribution. Romanian Journal of International Law, 24, 1.
Trachtman, J. P. (1998). Cyberspace, sovereignty, jurisdiction, and modernism.
United Nations General Assembly. (2015). Report of the Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security (A/70/174). United Nations.
Volkmer, I. (2021). Digital sovereignty and approaches to governing globalized data spaces. In G. Feindt, B. Gissibl, & J. Paulmann (Eds.), Cultural sovereignty beyond the modern state: Space, objects, and media (pp. 128–146). De Gruyter Oldenbourg.
Watts, S., & Richard, T. (2018). Baseline territorial sovereignty and cyberspace. Lewis & Clark Law Review, 22(3), 771–839.
