Cyber-deterrence and Cyber-CBMs: Way Forward for Managing India-Pakistan Cyber Rivalry

Abstract

The ongoing conflict between Russia and Ukraine provides us with evidence of the importance of cyberweapons in modern warfare. Cyberweapons are thickening the fog of war, creating new avenues for inter-state competition. As India and Pakistan have been engaged in a rivalry for the past 75 years, cyberweapons can play an important role in the future of this enmity. This research signifies the ramifications of cyberweapons on strategic stability between two nuclear-armed states. Cyberweapons are exacerbating risks to nuclear weapons that can lead to both advertent and inadvertent nuclear escalation. The question addressed in this paper is Why do Pakistan and India need to manage their rivalry in the domain of cyberwarfare? The methodology used for this research is qualitative with both primary and secondary data sources. This research has utilized a case study research design by taking India-Pakistan relations as the case. There are two potential pathways for India and Pakistan to manage their rivalry in the cyber domain. These are cyber-deterrence and cyber-CBMs. However, shortcomings are attached to both pathways, and only by taking them together can they complement each other and work as risk-reduction measures. Both these pathways are explained, and a way forward is provided that can be undertaken by India and Pakistan to reduce the risks posed in the cyber domain.

Keywords

Cyber-deterrence cyberspace cyber-CBMs India Pakistan

Get full access to this article

View all access options for this article.

References

APP (2024, June 22) Pakistan urges int’l cybersecurity deal. The Express Tribune, 22 June. https://tribune.com.pk/story/2472999/pakistan-urges-intl-cybersecurity-deal (accessed 5 December 2022).

ASERT Team (2019) NETSCOUT Threat Intelligence Report. NETSCOUT, 8 May. Available at: https://www.netscout.com/blog/asert/netscout-threat-intelligence-report (accessed 5 December 2022).

Babar

Mirza

Qaisrani

(2021) Evaluating the nature of cyber warfare between Pakistan and India. Webology 18(6): 6973–6985.

BBC News (2019) Article 370: What happened with Kashmir and why it matters. BBC News, 5 August Available at: https://www.bbc.com/news/world-asia-india-49234708 (accessed 20 January 2023).

Baezner

(2018) Regional rivalry between India-Pakistan: Tit-for-tat in cyberspace. In CSS Cyberdefense Hotspot Analyses (Issue 10) [Report]. ETH Zurich.

Basu

(2022) India’s International Cyber Operations: Tracing National Doctrine and Capabilities. Available at: https://unidir.org/publication/indias-international-cyber-operations-tracing-national-doctrine-and-capabilities/ (accessed 20 January 2023).

CCDCOE (n.d.). OSCE expands its list of confidence-building measures for cyberspace: Common ground on critical infrastructure protection. Available at: https://ccdcoe.org/incyder-articles/osce-expands-its-list-of-confidence-building-measures-for-cyberspace-common-ground-on-critical-infrastructure-protection/ (accessed 28 November 2022).

Clarke

Knake

(2010) Cyber War: The Next Threat to National Security and What to Do About It. New York: HarperCollins.

Department of Defense Office of General Counsel (2015) Law of War Manual. Washington, DC: Pentagon.

10.

Derian

(1994) Cyber-deterrence. Wired. Available at: https://www.wired.com/1994/09/cyber-deter/ (accessed 20 January 2023).

11.

Desk

(2023) Pakistan’s first national “Computer Emergency Response Team” established. HUM News, 12 October. Available at: https://humenglish.com/technology/pakistans-first-national-cybersecurity-team-established/ (accessed 3 January 2024).

12.

Freilich

Cohen

Siboni

(2023) Israel and the Cyber Threat: How the Startup Nation Became a Global Cyber Power. Oxford: Oxford University Press.

13.

Futter

Browne

(2018) Hacking the Bomb: Cyber Threats and Nuclear Weapons. Washington, DC: Georgetown University Press.

14.

GatewayHouse (2021) Pakistan is India’s new cybersecurity headache. Gateway House, 11 November. Available at: https://www.gatewayhouse.in/pakistan-indias-cybersecurity-headache/ (accessed 13 October 2022).

15.

Geers

(2010) The challenge of cyber attack deterrence. Computer Law & Security Review 26(3): 298–303.

16.

Gilani

(2022, March 21) A timeline of India-Pakistan Military Confidence Building Measures. Anadolu Ajansi, 21 March. Available at: https://www.aa.com.tr/en/asia-pacific/a-timeline-of-india-pakistan-military-confidence-building-measures/2540743 (accessed 29 November 2022).

17.

Gill

(2020) Beyond offensive realism: India’s rise, U.S. accommodation. Asian Studies 56(2): 150–157.

18.

Goodman

(2010) Cyber deterrence: Tougher in theory than in practice? Strategic Studies Quarterly 4(3): 102–135.

19.

Healey

Mallery

Jordan

, et al (2014) Confidence-Building Measures in Cyberspace. Washington, DC: Atlantic Council, pp. 1–28.

20.

James

(2022) Defensive realism. In: James

(ed.), Realism and International Relations: A Graphic Turn Toward Scientific Progress. Oxford: Oxford University Press, p. 448.

21.

Jervis

(1978) Cooperation under the security dilemma. World Politics 30(2): 167–214.

22.

Kania

(2016) Cyber deterrence in times of cyber anarchy—Evaluating the divergences in U.S. and Chinese strategic thinking. In: 2016 International Conference on Cyber Conflict (CyCon U.S.), Washington, DC, pp. 1–17.

23.

Khan

(2022) Indian missile crisis: One step from nuclear war? Asia-Pacific Leadership Network, 28 June. Available at: https://www.apln.network/analysis/commentaries/indian-missile-crisis-one-step-from-nuclear-war (accessed 13 November 2023).

24.

Khan

(2023) Cyber deterrence and confidence building between Pakistan and India. South Asian Voices, February 2. Available at: https://southasianvoices.org/cyber-deterrence-and-confidence-building-between-pakistan-and-india/ (accessed 25 November 2023).

25.

Khan

(2024) Cyberwarfare and new pathways of nuclear escalation: implications for South Asia. Journal of Security & Strategic Analyses 10(2): 135–149. https://doi.org/10.57160/jssa/0010.02.0322

26.

Khan

(2021) Building a bilateral framework for cybersecurity in South Asia. South Asian Voices, 12 November. Available at: https://southasianvoices.org/building-a-bilateral-framework-for-cybersecurity-in-south-asia/ (accessed 30 December 2023).

27.

Kirchgaessner

(2019) Israeli spyware allegedly used to target Pakistani officials’ phones. The Guardian, 19 December. Available at: https://www.theguardian.com/world/2019/dec/19/israeli-spyware-allegedly-used-to-target-pakistani-officials-phones (accessed 25 May 2023).

28.

Landau

(1997) Confidence-building measures in mediation. Mediation Quarterly 15(2): 97–103.

29.

Liebetrau

(2022) Cyber conflict short of war: a European strategic vacuum. European Security 31(4): 497–516.

30.

Lobell

(2010) Structural realism/offensive and defensive realism. In Oxford Research Encyclopedia of International Studies. Available at: https://oxfordre.com/internationalstudies/display/10.1093/acrefore/9780190846626.001.0001/acrefore-9780190846626-e-304.

31.

Mearsheimer

(1990) Back to the future: instability in Europe after the cold war. International Security 15(1): 5–56.

32.

Ministry of Information Technology & Telecommunication (2021) National Cyber Security Policy 2021. Available at: https://moitt.gov.pk/SiteImage/Misc/files/National%20Cyber%20Security%20Policy%202021%20Final.pdf (accessed 13 May 2023).

33.

Mueller

Jensen

Valeriano

, et al (2023) Cyber Operations during the Russo-Ukrainian War. Available at: https://www.csis.org/analysis/cyber-operations-during-russo-ukrainian-war (accessed 15 January 2024).

34.

NCSI : Ranking (n.d.). Available at: https://ncsi.ega.ee/ncsi-index/?order=rank&archive=1 (accessed 5 July 2024).

35.

Nye

Jr (2017) Deterrence and dissuasion in cyberspace. International Security 41(3): 44–71.

36.

Organization for Security and Co-operation in Europe (2013) Permanent Council Decision No. 1106. Available at: https://www.osce.org/pc/109168 (accessed 13 March 2023).

37.

Pakistan Mission to the United Nations (2023, March) Pakistan’s Position on the Application of International Law in Cyberspace. United Nations Office for Disarmament Affairs (UNODA). Available at: https://docs-library.unoda.org/Open-Ended_Working_Group_on_Information_and_Communication_Technologies_-_(2021)/UNODA.pdf (accessed 13 March 2024).

38.

Pakistan Today (2022) Leaked conversations of PM, minister put up for sale on darknet. Pakistan Today, 25 September. Available at: https://www.pakistantoday.com.pk/2022/09/25/leaked-conversations-of-pm-ministers-put-up-for-sale-on-darknet/ (accessed 17 May 2023).

39.

Perlroth

(2021) This Is How They Tell Me the World Ends: The Cyberweapons Arms Race. 1st ed. New York: Bloomsbury Publishing.

40.

Purpura

(2013) 16—Protecting Critical Infrastructure. In Purpura

(ed.) Security and Loss Prevention. 6th ed. New York: Butterworth-Heinemann, pp. 475–528.

41.

Radanliev

(2024) Digital security by design. Security Journal 37(4): 1640–1679.

42.

Radanliev

De Roure

Maple

, et al (2022) Super-forecasting the ‘technological singularity’ risks from artificial intelligence. Evolving Systems 13(5): 747–757.

43.

Ravindra

(2024, June 20) UNSC High-Level Open Debate on “Maintenance of International Peace and Security: Addressing Evolving Threats in Cyberspace,” [Online post]. Available at: https://www.pminewyork.gov.in/statementsecurity?id=eyJpdiI6Ik45UXh0MVFYNm45RFkxd3FXdTZIVmc9PSIsInZhbHVlIjoiNk51NnZ2NTJQQmszSGJLejNVbHhCUT09IiwibWFjIjoiNWU1ZjdhN2FkMTM5ZjVjOTAxZGY1Y2M0NDFmMGZlNmExN2Q3NTBlYzBkYmQyZTRhYmI0NmZmODUyOGM0N2JjZSJ9 (accessed 15 October 2024).

44.

Repussard

(2023) Cyber-nuclear nexus: How uncertainty threatens deterrence. CSIS Nuclear Network (Next Gen Blog), 10 May. Available at: https://nuclearnetwork.csis.org/cyber-nuclear-nexus-how-uncertainty-threatens-deterrence/ (accessed 25 September 2023).

45.

Statista. (n.d.) Digital & Connectivity Indicators—Pakistan | Forecast. https://www.statista.com/outlook/co/digital-connectivity-indicators/pakistan (accessed 5 July 2024).

46.

Sanger

Broad

(2017) Trump inherits a secret cyberwar against North Korean missiles. The New York Times, 4 March. Available at: https://www.nytimes.com/2017/03/04/world/asia/north-korea-missile-program-sabotage.html (accessed 13 March 2024).

47.

Schelling

(1981) The Strategy of Conflict. Cambridge, Massachusetts, USA: Harvard University Press.

48.

Schlosser

(2016) World war three, by mistake. The New Yorker, 23 December. Available at: https://www.newyorker.com/news/news-desk/world-war-three-by-mistake (accessed 15 June 2023).

49.

Shukla

(n.d.). India-Pakistan gear up for cyber wars this i-day. BW Businessworld. Available at: http://businessworld.in/article/India-Pakistan-Gear-Up-For-Cyber-Wars-This-I-Day/14-08-2017-124037 (accessed 26 November 2022).

50.

Sial

(2020) Pulwama-Balakot Crisis and Operation Swift Retort. Islamabad: Center for International Strategic Studies. Available at: https://ciss.org.pk/PDFs/CISS-Special-Issue-Pulwama-Balakot-Crisis.pdf

51.

Snyder

(2002) Mearsheimer’s world-offensive realism and the struggle for security: A review essay. International Security 27(1): 149–173.

52.

Snyder

(2016) Deterrence and Defense. Princeton, NJ: Princeton University Press. Available at: https://press.princeton.edu/books/hardcover/9780691652092/deterrence-and-defense (accessed 13 May 2023).

53.

Soesanto

Smeets

(2021) Cyber deterrence: The past, present, and future. In Osinga

Sweijs

(eds.) NL ARMS Netherlands Annual Review of Military Studies 2020: Deterrence in the 21st Century—Insights from Theory and Practice. The Hague, Netherlands: T.M.C. Asser Press, pp. 385–400.

54.

Stankovic

(2023) GENEVA MANUAL – On responsible behaviour in cyberspace. Geneva Dialogue. Available at: https://genevadialogue.ch/geneva-manual/ (accessed 07 June 2024).

55.

Stoutland

Pitts-Kiefer

Moniz

, et al (2018) Understanding the cyber threat to nuclear weapons and related systems. In: Nuclear Weapons in the New Cyber Age. Washington, DC: Nuclear Threat Initiative, pp. 9–20. Available at: https://www.jstor.org/stable/resrep19983.6 (accessed 17 July 2023).

56.

Surya Valliappan Krishna (2022) Bordering on peace: Evaluating the impact of the India-Pakistan ceasefire. Carnegie India, 24 February. Available at: https://carnegieendowment.orgundefined?lang=en (accessed 03 June 2023).

57.

The Express Tribune (2021) India launched cyberattacks against China, Pakistan: Report. The Express Tribune, 24 November. Available at: https://tribune.com.pk/story/2330871/india-launched-cyberattacks-against-china-pakistan-report (accessed 19 September 2023).

58.

The White House (2013) FACT SHEET: U.S.-Russian cooperation on information and communications technology security. Whitehouse.Gov, 17 June. Available at: https://obamawhitehouse.archives.gov/the-press-office/2013/06/17/fact-sheet-us-russian-cooperation-information-and-communications-technol (accessed 5 October 2023).

59.

Waltz

(2010) Theory of International Politics. 1st edn. Long Grove, IL: Waveland Press.

60.

World Bank Group (n.d.) Individuals using the Internet (% of population)—Pakistan, India | Data. Available at: https://data.worldbank.org/indicator/IT.NET.USER.ZS?locations=PK-IN (accessed 23 November 2022).

61.

Zetter

(2017) Senate panel: 80 percent of cyber attacks preventable. Wired. Available at: https://www.wired.com/2009/11/cyber-attacks-preventable/ (accessed 21 July 2023).

62.

Ziolkowski

(2013) Peacetime Regime for State Activities in Cyberspace. NATO CCD COE Publications. Available at: https://ccdcoe.org/library/publications/peacetime-regime-for-state-activities-in-cyberspace/ (accessed 17 June 2023).