MANUALOFINTERNATIONALLAW

APPLICABLETOCYBERWARFARE
THETALLINNMANUAL

ThomasC.Wingfield
ProfessorofInternationalLaw
GeorgeC.MarshallEuropeanCenterforSecurityStudies
GarmischPartenkirchen,Germany
January28,2011

TheTallinnManual
Pedigree
Experts
Process
Format
TheToughestQuestions

Pedigree
ThreeBoxes
Technology:thePossible
Law:thePermissible
Policy:thePreferable

FiveDomains
Land
Sea
Air
Space
Cyber

Experts

CAPT.G.Bernatchez,CanadianNavy
AirCommodoreW.Boothby,RAF,UK
LtColP.Cumming,Australian
DefenceForce
Mr.B.Demeyere,LeuvenUniversity,
Belgium
Dr.RobinGeiss,ICRC
ProfessorT.Gill,Amsterdam
University,Netherlands
Mr.U.Hausler,GermanMoD,
NationalDefenseUniversity,USA
ProfessorW.V.Heinnegg,Viadrina
EuropaUniversity,Germany
ProfessorE.Jensen,Fordham
University,USA

ProfessorD.Jinks,Universityof
Texas,USA
ProfessorJ.Kleffner,Swedish
DefenceCollege
ProfessorM.Schmitt,Durham
University,UK
Dr.JamesSweeney,Durham
University,UK
Ms.EnekenTikk,CCDCOE,Estonia
BrigadierK.Watkin,CanadianForces
(ret.),USNavalWarCollege
ProfessorS.Watts,Creighton
University,USA
ProfessorT.Wingfield,Marshall
Center,Germany

Process

Sponsor
FrameIssues(TableofContents)
IndividualWork
SmallGroupReview
PlenaryPresentation/Discussion
EditorialCommitteeReview
Circulation
Publication

Format
RULE2
Withoutprejudicetoapplicableinternationalobligations,aStatemayexerciseits
jurisdictionoverpersonsengagedincyberactivitiesandcyberinfrastructure
locatedonitsterritory,orextraterritoriallyinaccordancewithinternationallaw.
1.Thetermjurisdictionencompassesthreedimensions:(a)jurisdictiontolegislate/
prescribe;(b)jurisdictiontoenforce;and(c)jurisdictiontoadjudicate.
2.TheprincipalbasisforaStatetoexerciseitsjurisdictionisphysicalorlegalpresence
ofaperson(inpersonam)orobject(inrem)onitsterritory(aformofterritorial
jurisdiction).Therefore,aStatemayadoptlawsandregulations governingcyber
activitiesinitiatedfromitsterritoryandenforcethosenormsagainstindividuals
violatingthemwithinitsterritory.Thisissoeveniftheoffendingcyberactivities
havenoeffectwithintheStateexercisingjurisdiction.Similarly,aStateisentitled
toregulatetheactivitiesofInternetServiceProvidersregisteredinitsjurisdiction
butphysicallyoperatingabroad.

Format
4.Itwouldseemthatthisdoctrinehasparticularrelevancetocyberoperations.For

example,inApril May2007,Estoniawastargetedincyberoperationsinitiated
fromabroad.ItisunquestionablethatEstoniawouldataminimumhavebeen
entitledtoinvoketerritorialjurisdiction(theeffectsdoctrine)overthose
individualswhoconductedtheoperations.Inparticular,suchexerciseof
jurisdictionwouldbejustifiedonthebasisofthefactthattheseoperations
resultedinsubstantialeffectsonEstonianterritory,suchassignificant
interferencewiththebankingsystemandgovernmentalfunctions. Similarly,
civilians(whodonotenjoycombatantimmunity)involvedincyberoperations
againstGeorgiaduringthatStatesinternationalarmedconflictwiththeRussian
Federationin2008wouldbesubjecttoGeorgianjurisdictiononthebasisof
significantinterferencewithwebsitesanddisruptionofcybercommunications.

TheToughestQuestions

FocusonMilitaryOperations
UseofForceSpectrum
Targetability
Proportionality

FocusonMilitaryOperations
CoherentBodyofLaw
JusadBellumvs.JusinBello
BordersofLawEnforcementandIntelligence
Collection

UseofForceSpectrum
Schmitt

NPI

Pictet

SchmittAnalysis:
CasebyCaseEvaluation

Severity
Immediacy
Directness
Invasiveness
Measurability
PresumptiveLegitimacy
Responsibility

UseofForceSpectrum
Schmitt

NPI

Pictet

NPI
Necessity
Proportionality
Imminency

UseofForceSpectrum
Schmitt

NPI

Pictet

PictetAnalysis:
ThresholdforWarfare
Scope
Duration
Intensity

Targetability
MilitaryObjectives:NLPU
Combatantsvs.Noncombatants
Combatant
MilitaryForces
OrganizedArmedGroup
Civilians

Proportionality
Showstopper
Classicaldefinition
Threeproblems
Intelontarget
CEP ofweapon
Blastradius ofweapon

Conclusion
Workcontinues
Discussionwelcome
Contact:
thomas.c.wingfield@marshallcenter.org