Beyond State-Centrism: International Law and Non-State Actors in Cyberspace

Abstract

Classically, States and non-State actors were differentiated not only by disparities in legal status but also by significant imbalances in resources and capabilities. Not surprisingly, international law developed a State-centric bias to account for these imbalances. Cyberspace and cyber operations, however, have closed a number of formerly significant gaps between States’ and non-State actors’ abilities to compromise international peace and security. In fact, some non-State actors now match, if not exceed, the cyber capabilities of many States in this respect. Where public international law had long proved chiefly relevant to States’ interactions with other States, cyber operations by non-State actors increase the frequency with which public international law provides relevant and binding legal rules. This article surveys existing public international law for norms relevant to the cyber interactions of cyber-empowered States and non-State actors. Specifically, the article illustrates how the principles of sovereignty, State responsibility and the jus ad bellum are particularly relevant to States engaged in struggles with non-State actors for security and supremacy in cyberspace.