International legal principle of due diligence in cyberspace

Namen magistrskega diplomskega dela je obravnava načela dolžne skrbnosti v kibernetskem prostoru. Pri tem je pozornost usmerjena na dve obveznosti: na obveznost preprečevanja in na obveznost preiskovanja kibernetskih napadov ter preganjanja izvajalcev napada. Magistrska naloga se prične z opredelitvijo koncepta dolžne skrbnosti kot se je izoblikoval v mednarodnem pravu. Ker je predpogoj za uveljavljanje dolžne skrbnosti države obstoj njene suverenosti, je obravnavano tudi vprašanje suverenosti države v kibernetskem prostoru. V nadaljevanju se naloga ukvarja z vprašanji vsebine dolžne skrbnosti v kibernetskem prostoru glede obveznosti preprečevanja. Pri tem je podrobno obravnavana ureditev dolžne skrbnosti preprečevanja čezmejne škode v okoljskem pravu kot usmeritev za aplikacijo dolžne skrbnosti v kibernetskem prostoru. Nato je pozornost namenjena elementom dolžne skrbnosti in njihovi vsebini v kibernetskem prostoru. Pri tem so obravnavane dileme praga nastale škode, dejanskega in domnevanega vedenja države za napad ter dileme povezane s možnimi ukrepi, ki jih država v kontekstu preprečevanja napadov sploh lahko izvrši. V povezavi z zadnjim pa tudi ali obstajajo konkretni ukrepi, ki jih država mora izvršiti kot obveznost mednarodnega prava. Podrobno so predstavljeni relevantna mednarodna sodna praksa, mnenja pravnih strokovnjakov in dokumenti, ki nastajajo znotraj različnih mednarodnih organizacij. V zadnjem delu je pozornost namenjena še obveznosti preiskovanja kibernetskih napadov in preganjanju storilcev. V zaključku sledi ugotovitev, da ima država dolžno skrbnost pri preprečevanju napadov, za katere dejansko ve in ima zanje na voljo ustrezne in razumne ukrepe glede na konkretne okoliščine primera. Država mora z dolžno skrbnostjo tudi preiskati kibernetske napade, ki izhajajo iz njenega ozemlja. Z razvojem tehnologije in mednarodnega prava pa se bodo lahko razvile širše in bolj določne obveznosti držav.The purpose of this master’s thesis is to discuss the principle of due diligence in cyberspace. The attention is given to two obligationsthe obligation to prevent and the obligation to investigate cyber-attacks along with the obligation to prosecute the perpetrators of the attacks. Master\u27s thesis begins by defining the concept of due diligence as it was formed in international law. Since the implementation of due diligence is dependent on existence of state\u27s sovereignty, the question of sovereignty in cyberspace is analyzed. Second part deals with issues relating to the content of due diligence to prevent cyber-attacks in cyberspace. First, the content of due diligence in international environmental law relating to prevention of transboundary harm is analyzed as a guideline for the application of due diligence in cyberspace. Then the attention is given to the elements of due diligence and their content in cyberspace. In this regard the dilemmas of threshold of emerging damage from the attack, actual and constructive knowledge of the state and the dilemmas of the possible measures that the state can take in response to a cyber-attack emanating from its territory are discussed. In relation to this issue, the existence of concrete measures that constitute an international obligation is looked into. In this second part the relevant international jurisprudence, opinions of law experts and documents which emerged in the practice of various international organizations are presented and discussed. In the third part the obligation to investigate cyber-attacks and to prosecute the perpetrators is addressed. The main finding of this thesis is that the state has the obligation to exercise due diligence in order to prevent cyber-attacks and take on all appropriate and reasonable measures to do so, under the condition that the state has actual knowledge of the cyber-attack. The state also bears the obligation to exercise due diligence in order to investigate cyber-attacks emanating from its territory. With the advancement of technology and development of international law there is a possibility that more specific obligations of states will emerge