Cyber Warfare and IHL: Applying Old Rules Now

How existing IHL rules apply to cyber operations during armed conflict and the gaps that remain.

IHL Applies to Cyber Operations

The ICJ has confirmed that IHL applies to all forms of warfare, and the overwhelming consensus among states and legal experts is that IHL applies to cyber operations conducted during armed conflict. A cyber operation that constitutes an 'attack' under IHL must comply with the principles of distinction, proportionality, and precaution.

The Tallinn Manual on the International Law Applicable to Cyber Operations (2013, updated 2017), produced by an international group of experts, is the leading academic treatment. It applies existing IHL rules to cyber operations by analogy, treating cyber attacks that cause physical destruction, injury, or death as attacks under IHL.

Key Legal Challenges

The biggest challenge is defining what constitutes a cyber 'attack' under IHL. A cyber operation that destroys infrastructure (like Stuxnet, which damaged Iranian centrifuges) is clearly an attack. But what about operations that disable systems without physical damage, or that corrupt data, or that disrupt civilian services like banking or healthcare? If these do not qualify as attacks, the protective rules of IHL may not apply to them.

Attribution is another challenge. Cyber operations can be launched anonymously or through proxies, making it difficult to identify the responsible party. If you cannot attribute an attack, you cannot hold the attacker accountable. This attribution problem undermines the entire framework of IHL compliance and enforcement in the cyber domain.

Protecting Civilian Cyber Infrastructure

Civilian infrastructure that relies on digital systems, including hospitals, water treatment plants, power grids, and financial systems, is protected under IHL's rules on civilian objects. A cyber attack on a hospital's computer systems would violate IHL just as a kinetic attack on the hospital would. But the interconnected nature of cyber systems means that an attack on a military network could cascade into civilian infrastructure.

Going Deeper

The concept covered in this lesson connects to broader analytical frameworks that students of politics, diplomacy, and global affairs encounter across many topics. Mastery requires moving beyond memorization to application — understanding not just what the concept means, but how it operates in real-world contexts.

Connecting Theory to Cases

The most effective way to deepen understanding is through case-based learning. For any analytical concept, identify three to five real-world cases that illustrate it:

One canonical case: the most-cited example, often historical.
One contemporary case: a current situation where the concept applies.
One contrasting case: a situation that initially seems similar but where the concept does not apply, helping you understand the boundaries.
One contested case: a situation where scholars disagree about whether the concept applies.

Working through cases this way builds the analytical flexibility that distinguishes strong policy and diplomatic thinkers from those who can only apply concepts mechanically.

Cross-Disciplinary Connections

Political concepts rarely operate in isolation. The most sophisticated analysis connects:

Historical context: how did this concept develop, and why did it emerge when it did?
Theoretical lineage: which scholars and traditions have shaped how the concept is understood?
Empirical evidence: what does systematic research show about the concept's application?
Policy implications: how do decision-makers actually use this concept in practice?
Critiques: what are the strongest objections to the concept's usefulness?

The layered understanding that comes from working across these dimensions is what serious political and diplomatic research requires.

Building Your Analytical Vocabulary

For MUN delegates, debate competitors, IB and AP students, and political-research practitioners, building a substantial analytical vocabulary is one of the highest-leverage skills. Each concept you genuinely master is a tool you can apply across many different situations. Make a habit of working through Model Diplomat's broader glossary coverage of related concepts, building the connections that make your analytical work more sophisticated over time.