The Attribution Problem in Cyber Conflict: Implications For Deterrence, International Law and Nigerian Response

Nura Umar Manya Manya; Isah Maina

doi:10.58355/justices.v5i3.226

Authors

Nura Umar Manya Manya Head of Research and Further Study Nigerian Correctionnel Service Zone’ N’ Gusau Malan Yahaya Gusau Federal Secrétariat Zamfara State, Nigeria
Isah Maina School of Postgraduate Studies, Institute of Governance and Development Studies Nasarawa State University, Keffi, Nigeria

DOI:

https://doi.org/10.58355/justices.v5i3.226

Keywords:

Cyber Conflict, Cyber Attribution, Cyber Deterrence, International Law, Nigeria, State Responsibility, Digital Forensics, Cyber Warfare, Cybersecurity

Abstract

The attribution of malicious cyber operations remains a major challenge to effective deterrence, international legal accountability and national cybersecurity. This study examines the attribution problem in cyber conflict and assesses its implications for deterrence, international law and Nigeria's cybersecurity response. The study adopted a qualitative documentary research design based on systematic analysis of scholarly literature, international legal instruments, policy documents, official cybersecurity reports and selected cyber incidents, including Stuxnet, NotPetya and SolarWinds. Documents were analysed thematically around technical attribution, legal attribution, political attribution, deterrence and Nigeria's institutional capacity. The findings indicate that cyber attribution is rarely a purely technical exercise because attackers can employ compromised infrastructure, proxy networks, false flags and other concealment techniques. Attribution uncertainty weakens deterrence by punishment, complicates the application of state responsibility and creates difficulties in determining appropriate responses under international law. The study further finds that Nigeria has developed important cybersecurity institutions and legal frameworks, but gaps remain in digital forensics, intelligence integration, inter-agency coordination, specialist expertise and international cooperation. The study concludes that Nigeria should adopt a national cyber-attribution framework integrating technical forensics, intelligence assessment and legal analysis while strengthening regional and international cooperation.

Downloads

Download data is not yet available.

References

African Union. (2014). African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention). African Union.

African Union. (2024). Common African Position on the Application of International Law to the Use of Information and Communication Technologies in Cyberspace. African Union.

Baram, G., & Lin, H. (2025). Navigating uncertainty in cyber conflict: Incorporating false flags in the attribution process of offensive cyber operations. Information, Communication & Society. https://doi.org/10.1080/1369118X.2025.2604662

Boutin, B. (2019). Shared responsibility for cyber operations. AJIL Unbound, 113, 197–201. https://doi.org/10.1017/aju.2019.31

Chircop, L. (2018). A due diligence standard of attribution in cyberspace. International & Comparative Law Quarterly.

Crawford, J. (2002). The International Law Commission's articles on state responsibility: Introduction, text and commentaries. Cambridge University Press.

Efrony, D. (2026). Rethinking the legal status quo in cyberspace to legally attribute state responsibility, and enhance accountability and deterrence. International Law Studies, 108.

Finlay, L., & Payne, C. (2019). The attribution problem and cyber armed attacks. AJIL Unbound, 113, 202–206. https://doi.org/10.1017/aju.2019.35

Harknett, R. J., & Nye, J. S., Jr. (2017). Is deterrence possible in cyberspace? International Security, 42(2), 196–199. https://doi.org/10.1162/ISEC_c_00290

International Court of Justice. (1986). Military and paramilitary activities in and against Nicaragua (Nicaragua v. United States of America). ICJ Reports.

International Law Commission. (2001). Articles on responsibility of states for internationally wrongful acts, with commentaries. United Nations.

Kadlecová, L. (2018). State responsibility in the cyber age: The course towards indirect evidence. Czech Journal of International Relations, 53(4), 35–46. https://doi.org/10.32422/mv.1585

Lindsay, J. R. (2015). Tipping the scales: The attribution problem and the feasibility of deterrence against cyberattack. Journal of Cybersecurity, 1(1), 53–67. https://doi.org/10.1093/cybsec/tyv003

Libicki, M. C. (2009). Cyberdeterrence and cyberwar. RAND Corporation.

Mačák, K. (2016). Decoding Article 8 of the International Law Commission's Articles on State Responsibility: Attribution of cyber operations by non-state actors. Journal of Conflict and Security Law, 21(3), 405–428. https://doi.org/10.1093/jcsl/krw014

Nye, J. S., Jr. (2017). Deterrence and dissuasion in cyberspace. International Security, 41(3), 44–71. https://doi.org/10.1162/ISEC_a_00266

Rid, T., & Buchanan, B. (2015). Attributing cyber attacks. Journal of Strategic Studies, 38(1–2), 4–37. https://doi.org/10.1080/01402390.2014.977382

Schmitt, M. N. (Ed.). (2017). Tallinn Manual 2.0 on the international law applicable to cyber operations (2nd ed.). Cambridge University Press. https://doi.org/10.1017/9781316822524

Tsagourias, N., & Farrell, M. (2020). Cyber attribution: Technical and legal approaches and challenges. European Journal of International Law, 31(3), 941–967. https://doi.org/10.1093/ejil/chaa057

United Nations General Assembly. (2001). Responsibility of states for internationally wrongful acts: Resolution 56/83. United Nations.

United Nations. (2021). Developments in the field of information and telecommunications in the context of international security. United Nations.

Federal Republic of Nigeria. (2021). National Cybersecurity Policy and Strategy 2021. Office of the National Security Adviser.

Federal Republic of Nigeria. (2024). Cybercrimes (Prohibition, Prevention, etc.) (Amendment) Act, 2024. Federal Government of Nigeria.

Manya Manya, N. U., & Maina, I. (2026). Assessment of cybersecurity challenges and their implications for national security in Nigeria. Interkoneksi: Journal of Computer Science and Digital Business, 4(1), 191–207. https://doi.org/10.61166/interkoneksi.v4i1.92

Manya Manya, N. U. (2026). The role of private security organizations on national security. SRAI Journal of Linguistics and Social Sciences, 6(2), 17–26. https://doi.org/10.5281/zenodo.21204646

Manya, N. U. (2025). Response and efforts at combating terrorism in Nigeria. Shodh Sari-An International Multidisciplinary Journal, 4(2), 15–23. https://doi.org/10.59231/SARI7805

Manya Manya, N. U. (2026). The Paradox of Force: A qualitative analysis of armed banditry and its implications for Nigeria's national security (2010–2025). Academos Journal, 2(1), 33–43. https://doi.org/10.65921/9g0pvf65

Manya-Manya, N. U. (2024). The role of agricultural economy cooperative societies in combating insecurity in Nigeria. Journal of Fintech, Business, and Development, 1(1), 7–16. https://doi.org/10.62762/JFBD.2024.000000

Manya Manya, N. U. (2025). The role of Islamic Sharia in safeguarding the rights and lives of non-Muslims in Zamfara State, Nigeria. MAQOLAT: Journal of Islamic Studies, 3(4), 525–537. https://doi.org/10.58355/maqolat.v3i4.215

Manya Manya, N. U. (2025). Assessing Nigeria's national livestock policy and its role in enhancing protein security: A qualitative policy and food-security assessment. Public Management and Service, 1(1), 32–39. https://doi.org/10.64229/6wjfta11

Manya-Manya, N. U. (2023). Prison reforms and national security in Nigeria (2010–2020): A study of Gusau Medium Security Correctional Facility. ResearchGate. https://doi.org/10.13140/RG.2.2.17860.81285

Manya-Manya, N. U. (2024). The use of system theory in national system with reference to the behaviour of any country in crisis: A study of Libya. IOSR Journal of Humanities and Social Science, 29(10), 6–10.