Is the Cyber Attack Can Be Considered a Form of Armed Conflict?

Magistriniame darbe nagrinėjamas kibernetinės atakos ir ginkluoto konflikto santykis, siekiant nustatyti ar kibernetinė ataka gali būti laikoma ginkluoto konflikto forma. Darbe nagrinėjamos kibernetinės atakos ir ginkluoto konflikto sampratos, išskiriami juos identifikuojantys požymiai. Pirmoje dalyje analizuojama kibernetinės atakos sąvoka bei apibrėžiami požymiai leidžiantys ją atskirti nuo kitų kibernetinių incidentų. Vėliau nagrinėjamas kibernetinės atakos atsiradimas ir raida. Buvo aptarti kibernetinės atakos keliami pavojai. Nustatyta, kad kibernetinės atakos keliama žala gali prilygti sprogimui, avarijai ar kitam panašiam įvykiui. Augantis kibernetinių atakų pavojingumas kelia grėsmę ir nacionaliniam saugumui. Ši aplinkybė, kelia ir valstybių susirūpinimą. Keliamas klausimas ar kibernetinės atakos panaudojimas gali būti laikomas ginkluotu konfliktu. Siekiant atsakyti į šį klausimą, antroje dalyje nagrinėjama ginkluoto konflikto samprata. Antroje dalyje analizuojama ginkluoto konflikto sąvoka, išskiriami ginkluotą konfliktą identifikuojantys kriterijai: ginkluotų pajėgų panaudojimas, intensyvumo vertinimas ir specialaus subjekto nustatymas. Remiantis šiais kriterijais buvo nagrinėjamas ir kibernetinės atakos vaidmuo ginkluotame konflikte. Trečioje dalyje buvo vertinamas kibernetinės atakos ir ginkluoto konflikto santykis bei sprendžiama ar kibernetinė ataka gali būti laikoma ginkluoto konflikto forma. Pastebėta, kad ginkluotame konflikte kibernetinė ataka suprantama dviem aspektais: kibernetinę ataką naudojant šalia kitų priemonių ginkluoto konflikto metu arba vykdant kovos veiksmus vien kibernetinėmis atakomis. Abiem atvejais kibernetinės atakos panaudojimas gali būti laikomas ginkluotu konfliktu. Taigi, kibernetinė ataka gali būti laikoma ginkluoto konflikto forma jei ji atitinka visus tris ginkluoto konflikto kriterijus (ginkluotų pajėgų, intensyvumo ir specialaus subjekto).The objective of this master thesis is to analyze relation between cyber-attacks and armed conflict to determine whether a cyber-attack can be considered a form of armed conflict. To get the answer for thesis, in first two parts analyzes of cyber-attacks and armed conflict concepts and developments are made. Moreover, main identifying characteristics of them are separated and explained by international law and science sources. First chapter analyzes concept of cyber-attacks and defining features allowing it to be distinguished from cyber incidents. To get the clear view of these definitions and differences Lithuanian, Austria United States and NATO law sources are analyzed issue. To get better understanding of cyber-attack capabilities its origin and evolution are examined. This chapter also explores and describes cyber-attacks hazards and destruction capabilities. Simply speaking, cyber-attacks can cause the damage equal of explosion or other similar event and cause huge damage and threats. Growing dangers of cyber-attacks threats not only individuals, businesses but is a huge threat to national security. This fact poses and national concern. It is not excluded that cyber-attack can be used against other nations and be used in non-international conflicts. So the question whether the use of a cyber-attack can be considered an armed conflict form, as understand by international law is getting more and more important. To get the answer to this question, second chapter of this master thesis deals with the concept of an armed conflict, as it’s understand in international humanitarian law. Second part of this work analyzes the concept of armed conflict as determined in international law and science papers. The main definition of armed conflict is taken from Geneva Convention and its commentaries. Finally, according to the definition and other science sources main criteria of armed conflict is determined. To define any conflict as armed conflict we need to confirm than these three criteria are true: the use of armed forces, intensity and special entity setting. These criteria are main aspects used to identify any incident as armed conflict or not. In this paper they are used to answer main question. Cyber-attacks and armed conflict are confronted in third chapter to decide whether cyber-attack can be considered a form of armed conflict. To do so, all three criteria of armed conflict are analyzed in the way of applying them to cyber-attack and deciding if they meet the criteria. Moreover, it is observed that the cyber-attack in armed conflict can be used in two different ways: cyber-attack used as one of many military tools, or used separately, as only one tool of attack. After analyze of cyber-attack by the armed conflict criteria, conclusion, that in both cases, the use of cyber-attack can be considered as an armed conflict are made. Cyber-attack can be considered as a form of armed conflict if it meets all three criteria of armed conflict (armed forces, the intensity and the special subject). Relevance of the topic: In the public space and media we get more and more information about the occurrence of cyber-attacks, which violated, disrupted or damaged national and private information systems or databases. However, cyber-attacks are not only growing in numbers, but also can make more damage. Nowadays, cyber-attack can not only damage computers, network systems or other devices, but also cause the damage to crucial systems of national security, industry and other. Cyber-attack damage can be compared to real explosion or accident. Good example of such threat can be a Stuxnet cyber-attack, found in 2010. Stuxnet malware has attacked devices of Iran's factory, which executed nuclear program. Fortunately, malware has been detected just in time. If not, the attack would have done damage like in Chernobyl accident. This and other similar cyber-attacks urged states to take cyber-attacks seriously. Many states had organized cyber-security strategies, created the cyber security centers and the used other measures, designed to fight cyber-attacks and strengthen cyber security. The growing number of cyber-attacks and threats demands clear answer if use of cyber-attack can be considered as armed conflict form, or not. International laws till this day don’t have clear answer to this question. Topics Issues: In international law there isn’t any clear and detailed manual or other instrument to define then cyber-attack can be considered as armed conflict form. Most issues are raised by the fact that the cyber-attack, unlike other armed tools, can take different forms and not always cause damage, comparable to damage of traditional weapons. In this context, question if cyber-attack can be used in armed conflict as equal to other combat tools arises. If yes, what are requirements of cyber-attack usage? When the use of cyber-attacks can be considered as an armed conflict? Answers to these and other questions are researched and delivered after analyze of legal and scientific literature. The aim: To evaluate the relation between cyber-attacks and armed conflict and to find out whether the cyber-attack can be considered a form of armed conflict. Research tasks: 1. Define the concept of cyber-attacks and its attributes. 2. Discuss the dangers and threats of cyber-attacks. 3. Define the concept of armed conflict in international law. 4. Set the identifying criteria of armed conflict. 5. Find out the relation between cyber-attacks and armed conflicts based on its criteria. Hypothesis: Is the cyber-attack can be considered a form of armed conflict? Research methods: To answer the hypothesis were used comparative, systematic, logical and historical methods.Teisės fakultetasVytauto Didžiojo universiteta