Cyberwarfare norms and the attribution imperative: shaping responsible state behaviour in cyberspace

Cyber norms seek to guide behaviour below the threshold of outright inter-state warfare, shaping the actions of both states and non-state actors involved in cyberwarfare. Recent discussions at the United Nations have encountered challenges arising from differing perspectives on agreed-upon rules for responsible state conduct in cyberspace. To address this divergence, we argue that repeated instances of public attribution can help establish practical ‘norms on the ground’ in cyberspace, particularly in the context of stagnant norm development. We exemplify this with the ongoing war in Ukraine to illustrate international cyber norms in action. In conclusion, we explore the potential implications of public attribution in cyberwarfare and offer a forward-looking perspective on the future of cyber norms.