• mr. tech
  • Connectivity

    This New Squad of Internet Experts Will Try to Bring Order to Global Cyber Conflict

    The United Nations has failed to get countries to agree how international law applies to cyberspace, so a new group is stepping up.

    As interference in foreign elections and attacks on civilian infrastructure push the limits of what states can get away with in cyberspace, a newly formed team of lawyers, academics, executives, and government officials is scrambling to develop some simple rules of the road in an effort to prevent the rising tide of cyberattacks from leading to outright war.

    The Global Commission for Stability in Cyberspace, as it’s called, is looking to succeed where the United Nations has stumbled. Tasked with defining how existing international law should apply in cyberspace, a U.N. body debated the issue but reached a stalemate earlier this year, prompting calls for action outside the international body.

    The need for establishing such guidelines is urgent. Governments across the globe are racing to build and use digital tools for everything from distributing propaganda to carrying out attacks that look a lot like conventional acts of war. As events like election meddling in the U.S. and Europe and recent attacks on Ukraine’s power grid show, international cyber conflict is increasingly spilling over into the physical world. But “cyberspace is not a jungle,” the new commission’s chair, Marina Kaljurand, told an audience at the Black Hat computer security conference in Las Vegas last month. “International law applies; the question today is how international law applies.”

    The commission can only make policy recommendations, but Kaljurand, who was formerly Estonia’s foreign minister, said the fact that the group includes representatives from the private sector and academia in addition to government is an advantage compared with the all-governmental U.N., since the Internet features such a complex array of stakeholders. The commission’s largest funders are the governments of the Netherlands and Singapore, and Microsoft, which has been a leading corporate voice in the discussion of what should constitute responsible behavior for state actors in cyberspace (see “Do We Need a Digital Geneva Convention?”).

    Since cybersecurity has become so crucial to global security, said Kaljurand, it is imperative that the international community find agreement on what constitutes unacceptable behavior. “The more ambiguous zones there are, the more possibilities there are for misunderstanding each other and for provocations.”

    It’s not that governments haven’t been trying to find common ground. In fact, the U.N.’s attempt, called the Group of Governmental Experts, did initially make progress toward developing some non-binding rules, including that nations should not attack each other’s critical civilian infrastructure during peacetime. This year, however, the GGE failed to reach a consensus and did not deliver a report to the U.N. General Assembly. In a statement after the meeting, Michele Markoff, the GGE’s representative from the U.S. and the deputy coordinator for cyber issues at the State Department, expressed disappointment that some participants seemed to want to “walk back progress.”

    Subscribe to Weekend Reads
    Our guide to stories in the archives that put technology in perspective.
    Manage your newsletter preferences

    It was a major blow to the process, but the discussion must continue, and the new commission will be the forum, said Kaljurand, who has also represented Estonia at GGE meetings. As long as there are gray zones in the application of international law, she said, we will continue to see states try to get away with as much bad behavior as they can, even as such acts carry the risk of mushrooming into global conflict.

    Become an MIT Technology Review Insider for in-depth analysis and unparalleled perspective.

    Subscribe today

    Uh oh–you've read all of your free articles for this month.

    Insider Premium
    $179.95/yr US PRICE

    More from Connectivity

    What it means to be constantly connected with each other and vast sources of information.

    Want more award-winning journalism? Subscribe to Insider Basic.
    • Insider Basic {! insider.prices.basic !}*

      {! insider.display.menuOptionsLabel !}

      Six issues of our award winning magazine and daily delivery of The Download, our newsletter of what’s important in technology and innovation.

      See details+

      What's Included

      Bimonthly magazine delivery and unlimited 24/7 access to MIT Technology Review’s website

      The Download: our daily newsletter of what's important in technology and innovation

    /
    You've read all of your free articles this month. This is your last free article this month. You've read of free articles this month. or  for unlimited online access.