CYBERSECURITY, SOVEREIGNTY, AND INTERNATIONAL LAW: NORMATIVE CHALLENGES IN THE DIGITAL AGE

Abstract

Cyber operations now occupy a central position in strategic competition, yet international law continues to face persistent normative uncertainty regarding sovereignty, prohibited intervention, use of force, attribution, and permissible countermeasures. This article examines the sovereignty debate in cyberspace and argues that the primary challenge is not the absence of applicable law but the lack of shared interpretive consensus and operational thresholds. Drawing on the UN process on responsible state behaviour, the law of state responsibility, and the Tallinn Manual’s restatement approach, the study maps the principal legal tests invoked by states—sovereignty, due diligence, non-intervention, use of force or armed attack, and countermeasures—and analyzes how core technical characteristics of cyberspace complicate their application. Methodologically, the article combines doctrinal legal analysis with structured qualitative illustration drawn from widely discussed incident types, including industrial disruption malware and supply-chain compromise. The findings identify three recurring normative gaps: disagreement over the legal status of sovereignty, inconsistent thresholds for coercion and effects, and underdeveloped evidentiary standards for attribution. The article concludes by proposing incremental pathways for legal stabilization aimed at enhancing predictability and restraint in the cyber domain.