International Cybersecurity: De-escalating tensions in a digital Era

Within the last decade, nation-states and their populations have experienced an exponential rise in cyberattacks against critical infrastructure. Cyberattacks are an attractive addition to traditional warfare for adversaries, as nation-state actors who utilize them can more easily evade attribution. However, cybertactics that target critical infrastructure cause the same grave damage as purely kinetic attacks. Developing international cybersecurity norms encourages a more peaceful and collaborative international sphere, averting cyberattacks before they occur. This report aims to provide a cohesive understanding of a range of nation-state cyber actor types and preferences, investigating what constitutes the basis of each country’s current cyberstrategy and using that as a foundation for understanding each country’s stance towards creating international norms. To do this, we conducted 14 country case studies to understand country preferences in negotiations to develop international cybersecurity norms. Across our cases, we find that country preferences are determined by perspectives on international collaboration, national sovereignty, cybercapability development, and political constraints. We also surveyed existing international agreements and conversations, which signify a common willingness to cooperate in shaping international cybersecurity norms