Context

• Recent tensions involving the United States, Israel, and Iran reveal a significant transformation in the nature of warfare.
• Modern conflicts are no longer fought only through conventional military action but increasingly through cyber operations targeting communication systems, digital infrastructure, and the information environment.
• Cyberattacks on news websites, applications, and essential services demonstrate how digital tools are now integrated into military strategy.

Rise of Cyber Warfare in Modern Conflict

• States and non-state actors use hacking, digital disruption, and information manipulation to weaken opponents before or alongside physical attacks.
• Such operations target infrastructure, defence systems, and communication networks, thereby extending conflict beyond traditional battlefields.
• Groups such as the Handala Hack Team have reportedly carried out attacks on foreign organisations, including a U.S.-based medical technology company.
• These incidents demonstrate how cyber conflict affects civilian, commercial, and governmental sectors simultaneously.
• Unlike traditional warfare, cyberattacks can occur across borders without direct military confrontation, making them difficult to control or regulate.

The Difficulty is Establishing Threshold

• Applicability of International Law
  • The prohibition on the use of force under Article 2(4) of the United Nations Charter and the doctrine of state responsibility provide a legal basis for addressing cyberattacks.
  • If a cyber operation causes severe disruption to critical systems or essential services, it may qualify as an internationally wrongful act.
  • However, determining the legal threshold remains extremely difficult.
  • Cyberattacks often create indirect, temporary, or non-physical damage that is harder to measure than conventional military destruction.
  • As a result, deciding when a cyber operation becomes serious enough to constitute a prohibited use of force remains uncertain.
• Gap Between Law and Practice
  • Although international law theoretically allows affected states to seek accountability and compensation, legal remedies are rarely successful in practice.
  • This creates a growing gap between legal principles and real-world enforcement.
  • Cyber incidents frequently cause significant disruption, yet they seldom lead to meaningful legal consequences.

Concerns that Hinder Litigation

• The Problem of Attribution
  • Cyber operations are usually conducted through hidden networks and multiple jurisdictions, making it difficult to identify the actual perpetrator.
  • Governments may possess intelligence indicating responsibility, but transforming such information into legally admissible evidence is highly challenging.
  • This creates a divide between political certainty and legal proof. Without reliable attribution, holding states accountable under international law becomes nearly impossible.
• Lack of Effective Judicial Forums
  • International institutions such as the International Court of Justice generally require state consent before hearing disputes, which states involved in cyber operations rarely provide.
  • Domestic courts also face limitations because foreign governments are often protected by sovereign immunity.
  • As a result, victims of cyberattacks have very limited opportunities to pursue legal remedies or compensation.
• Political and Strategic Constraints
  • States often avoid legal proceedings due to political and strategic concerns.
  • Pursuing litigation may escalate tensions, expose sensitive intelligence capabilities, or provoke retaliation.
  • Consequently, many cyber incidents are addressed through diplomacy and political negotiations rather than through courts.
• Challenges Related to Evidence
  • Cyber litigation also faces evidentiary difficulties. Cyberattacks involve complex technical data, classified intelligence, and complicated chains of causation.
  • Courts frequently struggle to establish who conducted the operation, how much damage occurred, and how the attack caused specific harm.
  • This makes legal proceedings uncertain and difficult.

International Efforts and Their Limitations

• International initiatives such as the Budapest Convention on Cybercrime and the United Nations Convention against Cybercrime aim to improve cooperation against cybercrime.
• However, these frameworks mainly focus on criminal activities and law enforcement rather than geopolitical conflict or state-sponsored cyber warfare.
• As cyber operations become more frequent and damaging, the absence of strong international mechanisms for accountability highlights the limitations of current global legal systems.

India’s Necessity and Role in Shaping Cyber Norms

• India’s Growing Vulnerability
  • For India, the issue is especially important because of its increasing dependence on digital infrastructure in sectors such as finance, governance, communication, and energy.
  • Greater digital connectivity also increases vulnerability to cyber threats and attacks on critical systems.
• Need for Active International Engagement
  • India must strengthen its cyber resilience while also participating actively in global discussions on accountability, attribution, and responsible state behaviour in cyberspace.
  • Developing stronger legal standards and international cooperation is essential for addressing future cyber conflicts effectively.

Conclusion

• Cyber warfare has become an inseparable part of modern conflict, operating alongside traditional military force.
• Although international law formally applies to cyberspace, practical barriers such as attribution problems, lack of judicial forums, political constraints, and evidentiary difficulties prevent effective enforcement.
• If cyber operations continue to expand without credible mechanisms of accountability, the gap between law and reality will continue to widen, creating a dangerous environment in which significant harm occurs beyond the effective reach of legal systems.