Attribution of cyberattacks requires identifying those responsible for bad acts, prominently including states, and accurate attribution is a crucial predicate in contexts as diverse as criminal indictments, insurance coverage disputes, and cyberwar. But the difficult technical side of attribution is just the precursor to highly contested legal and policy questions about when and how to accuse governments of responsibility for cyberattacks. Although politics may largely determine whether attributions are made public, this Article argues that when cyberattacks are publicly attributed to states, such attributions should be governed by legal standards. Instead of blocking the development of evidentiary standards for attribution, as the United States, France, the Netherlands, and the United Kingdom are currently doing, states should establish an international law requirement that public attributions must include sufficient evidence to enable cross-checking or corroboration of the accusations. This functionally defined standard harnesses both governmental and non-governmental attribution capabilities to shed light on states’ actions in cyberspace, and understanding state practice is a necessary precondition to establishing norms and customary international law to govern state behavior. Moreover, setting a clear evidentiary standard for cyberattack attribution has the potential to clarify currently unsettled general international law rules on evidence. The Article also engages debates about institutional design for attributing cyberattacks. Companies and think tanks have made several recent proposals for an international entity to handle attribution of state-sponsored cyberattacks. Although these proposals have much to recommend them, the Article argues that such an entity should supplement, not replace, the current decentralized system of attribution. Having a multiplicity of attributors—both governmental and non-governmental—yields a greater likelihood that public attributions will serve the goals that attributors aim to achieve, namely strengthening defenses, deterring attacks, and improving stability in and avoiding conflict over cyberspace.
En række amerikanske præsidentkandidater og kongresmedlemmer er i de sidste år begyndt at argumentere for, at USA burde lancere militære angreb mod...
We live in a golden age of student surveillance. Some surveillance is old school: video cameras, school resource officers, and tip lines. Old-school...
A resilience agenda is an essential part of protecting national security in a digital age. Digital technologies impact nearly all aspects of everyday...
Cyber stalking involves repeated, often relentless targeting of someone with abuse. Death and rape threats may be part of a perpetrator’s playbook...
Fifty years ago, federal and state lawmakers called for the regulation of a criminal justice “databank” connecting federal, state, and local agencies...
Large language models (LLMs) now perform extremely well on many natural language processing tasks. Their ability to convert legal texts to data may...
This chapter provides an overview of computational text analysis techniques used to study judicial behavior and decision-making. As legal texts become...
Generative AI is already beginning to alter legal practice. If optimistic forecasts prove warranted, how might this technology transform judicial...
In an era defined by partisan rifts and government gridlock, many celebrate the rare issues that prompt bipartisan consensus. But extreme consensus...
Working hand-in-hand with the private sector, largely in a regulatory vacuum, policing agencies at the federal, state, and local level are acquiring...
This article argues that the fact that an action will compound a prior injustice counts as a reason against doing the action. I call this reason The...
Since Russia invaded Ukraine in 2022, the United States and its allies have searched for the best way to express their horror and dismay. At the level...
Modern antitrust law has come under intense criticism in recent years, with a bipartisan chorus of complaints about the power of technology and...
The Russian invasion of Ukraine in 2022 provoked the imposition of economic sanctions that are unprecedented in their swiftness, severity, and novelty...