International Studies Journal (ISJ)

International Studies Journal (ISJ)

Terrorist Cyber Attacks in the Context of Self-defence

Document Type : Original Independent Original Article

Authors
1 PhD in Public International Law, Lecturer at the university
2 Assistant Professor, Department of Economics and Islamic Banking, Faculty of Economics, Kharazmi University, Tehran, Iran
10.22034/isj.2025.464608.2191
Abstract
In the last two years, the terrorist organization, the Mojahedin Khalq, due to its considerable territorial distance, by exploiting vulnerabilities in the cyber environment, cyber attacks on government infrastructure have emerged. It is obvious that defence against non-state actors is legal, at least in some cases. However, the emergence of new types of terrorism, such as cyber terrorism, which may suddenly endanger international peace and security, has caused international law to lag behind in establishing new rules appropriate to cyberspace. The question raised in this research is: What is the appropriate interpretation of the United Nations Charter in assessing the possibility of Iran resorting to self-defence against cyber attacks by the Mojahedin Khalq Organization, in line with exercising jurisdiction and securing vital national interests? In response to this issue, a descriptive-analytical research method using library tools has been used. Therefore, after examination, the present study concludes that the cyber attacks of the Mojahedin Khalq Organization have not yet reached the point necessary to resort to self-defence.

Highlights

Introduction

The number and impact of nongovernmental activists have increased, especially since the 1990s. Notably, modern terrorists possess multifarious weapons and use the language of force to justify their actions. In other words, similar to the armed actions of states, the armed actions of nongovernmental groups can be regarded as terrorist attacks. Resorting to the right of self-defense, the states victimized by such attacks have often conducted large-scale military operations against terrorist groups stationed in other countries in response to their attacks. Therefore, an armed attack traditionally refers to only attacks conducted by states; however, the recognition of the fact that the actions of nongovernmental activists can be regarded as armed attacks is definitely a revolutionary breakthrough in international law. According to Article 51 and Paragraph 7 of Article 2 in the Charter of the United Nations, it is essential to analyze the cyberattacks conducted by the People’s Mojahedin Organization of Iran in terms of the concept of armed attacks regarded as a fundamental element in national jurisdiction and the right of self-defense. Based on the research hypothesis in this study, the cyberattacks of this organization have not yet seemingly reached the threshold to jeopardize vital national interests. However, if the intensity of attacks meets the concept of armed attacks, the Islamic Republic of Iran will definitely have the right of self-defense based on the principle of national jurisdiction in defending vital national interests.

 

Methodology

This study adopts a descriptive-analytical research method.

 

Findings and Results

Although public opinion about terrorism is still influenced by the classical impression, terrorism has obviously expanded so much that it has evolved into a new form every day along with social developments. The access of terrorists to weapons of mass destruction and their use of modern facilities highlight that the international community must undergo the necessary adjustments. In other words, developments and advances in information and communication technologies have enabled terrorist groups to move from one place to another easily and quickly. As a result of these changes, terrorist attacks have expanded geographically over the past few decades, and the growing prevalence of these attacks has infused the public with fear and horror. In recent years, terrorism has left its traditional form, with its modern forms rapidly proliferating through the wave of neo-terrorism. Known as one of its latest cases, cyberterrorism has emerged from the intersection of terrorist actions and cyberspace. Obviously, cyberspace and pertinent technologies account for one of the most notable sources of power in the third millennium. In other words, the capacities that cyberspace has brought to human society have enabled some nongovernmental players to take advantage of such potential for their political purposes. These capacities have also added to the difficulty of fighting and preventing terrorism. For a considerable period, the international community tried to adhere to a detailed interpretation of the prohibition on resorting to force along with a relatively restrictive reading of the right of self-defense. Nevertheless, this fragile balance was transformed in the 1990s, especially after the September 11 attacks in 2001. Currently, the international trend indicates the legitimacy of resorting to the right of self-defense against terrorist attacks conducted by nongovernmental groups from the land of an incompetent country or one whose state has been acting passively against the actions of nongovernmental groups. Although there is no doubt about the absence of an efficient legal system for cyberspace, what seems important is the attempt to borrow legal principles and regulations from other existing systems for international law and measure their similarities to cyberspace. Furthermore, a cyberattack is evaluated in its aftermaths and effects, i.e. the intensity of damage and destruction as well as the presence of causal relationships between cyberattacks and resultant damage. Within this framework, such an attack can be considered an armed attack leading to the right of self-defense. There is no convincing evidence whether the cyberattacks conducted by the People’s Mojahedin Organization of Iran have violated the principle of the prohibition on resorting to force, given the impact of those attacks. That is because the cyberattacks of this group have been scattering attacks on the websites of some governmental and nongovernmental organizations. Therefore, the cyberattacks of the People’s Mojahedin Organization of Iran are not currently so threatening that they can be included within the framework of armed attacks jeopardizing vital national interests. Moreover, according to the remarks by the official authorities of Iran, those attacks have caused no physical damage; therefore, they are not considered a violation of the prohibition on resorting to force in international law. However, official silence, lack of follow-up for this problem in international forums, and I.R. Iran’s passive reaction to these attacks have virtually precluded the review of existing options. Undoubtedly, cyberattacks entail not only political security problems but also legal challenges. Thus, the involvement of the International Law Commission as the legal pillar of the UN General Assembly can facilitate the codification of an effective framework of international law for cyberspace and the promotion of both international and regional collaborations to deal with cyberattacks.

Keywords
Subjects

1.      Al-Fahdawi, T. (2024). Cyber Warfare as a Use of Force against Third-Party Countries: The Perspective of International Law. Groningen Journal of International Law, 10(2):91-102. doi: 10.21827/GroJIL.10.2.91-102
2.      Alkharman, J., Drawsheh, S., Al-Khataybeh, M., Younes, Z., Darawsheh, N., & Alrashdan, H. (2024). Cyber Attacks and its Implication to National Security: The Need for International Law Enforcement. Pakistan Journal of Criminology, 16(3), 851-864. doi: https://doi.org/10.62271/pjc.16.3.851.864
3.      Amirli, H., & Saghafi, K. (2019). Presenting a conceptual model for evaluating cyber terrorism threats. National Security Quarterly, Volume 9(33), 389-424. (In Persian)
4.      Asekhauno, A., & Okojie, T. (2024). International Cyber Terrorism: A Global Apocalyptic ‘Time-Bomb.’ African Education Indices, Volume 13, No. 1.
5.      Aslani, J. (2015). Iran, Stuxnet and upcoming legal challenges in the face of cyber attacks. A collection of articles on Iran and contemporary international legal challenges, Tehran: Shahr Danesh Publications, first edition. (In Persian)
6.      Bashiri, A. (2015). Cyber ​​attack and self-defence in international law. Master's thesis, Qom: Qom University. (In Persian)
7.      Cassese, A. (2001). Terrorism is Also Disrupting Some Crucial Legal Categories of International Law. EJIL, 12(5), 993-1001.
8.      Cornish, P., Livingstone, D., Clemente, D., & Yorke, C. (2010). On Cyber Warfare. A chatham House Report. 1-49.
9.      Embassy of the Islamic Republic of Iran in Rome. (2023). Clash of Albanian police in the headquarters of the hypocrites' in the implementation of the court order in the search of the camp for corruption, organized crimes and cyber attacks. Embassy website, at: https://italy.mfa.gov.ir/portal/newsview/722684 (In Persian)
10.    Farshasaid, P., Jalali, M., & Gudarzi, M. (2021). The necessity of developing an international convention on cyber attacks. Legal Studies Quarterly, 13(1), 205-230. doi: 10.22099/jls.2021.33031.3370 (In Persian)
11.    Fazaeli, M. (2023). the relationship between terrorism and armed conflicts; Looking at the situation in Afghanistan. Legal Research Quarterly, 26(102), 113-140. doi: 10.48308/jlr.2022.224025.2008. (In Persian)
12.    GA/Res/3314. (1974).
13.    Ghasemi, G., & Namdar, S. (2018). Examining the concept of Self-defence in the light of cyber attacks, emphasizing the Stuxnet attack on Iran's nuclear facilities. Journal of Legal Studies, 10(1), 199-235. doi: 10.22099/jls.2018.23191.2178 (In Persian)
14.    Henderson C. (2024). The Use of Force and International Law. Cambridge: Cambridge University Press, 2nd edition.
15.    Hoshiro, H. (2024). Bringing the National Interest to the Forefront of Foreign Aid Policy: The Case of Japan. Asian Survey, 64(3), 480–513. doi:10.1525/as.2024.2064348
16.    ICJ Reports. (1986). Military and Paramilitary Activities in and Against Nicaragua (Nicaragua V United states). at: https://www.icj-cij.org/node/100900.
17.    ICJ Reports. (1996). on the Legality of the Threat or use of Nuclear weapons. at: Reportshttps://www.refworld.org/cases,ICJ,4b2913d62.html.
18.    ICTY. (1999). Prosecutor V. Tadic.
19.    Iftikhar, S. (2024). Cyberterrorism as a global threat: a review on repercussions and countermeasures. PeerJ Computer Science. doi: 10.7717/peerj-cs.1772
20.    Katagiri, N. (2021). Why international law and norms do little in preventing non-state cyber attacks. Journal of Cybersecurity, Volume 7, Issue 1. doi: https://doi.org/10.1093/cybsec/tyab009
21.    Leu, D., Udroiu, C., Raicu, G., Gârban, H., & Șcheau, M. (2023). Analysis of some case studies on cyberattacks and proposed methods for preventing them. Romanian Journal of Information Technology and Automatic Control, 33(2), 119-134. doi: 10.33436/v33i2y202309
22.    Li, Y., & Liu, Q. (2021). A comprehensive review study of cyber-attacks and cyber security: Emerging trends and recent developments. Energy Reports, 7, 8176-8186. doi: https://doi.org/10.1016/j.egyr.2021.08.126
23.    Martínez Esponda, P. (2023). Norm-instability as a Strategy in International Lawmaking: The Case of Self-defence against Non-state Actors. The Many Paths of Change in International Law. 69-88. doi: doi.org/10.1093/oso/9780198877844.003.0003
24.    Mottaqi, A., Shahvardi, P. (2022). The position of new media in advancing national interests in a theoretical perspective. Quarterly Journal of National Interest Studies, 8(29), 125-148. (In Persian)
25.    Nematpour, A., Taghizadeh Ansari, M., & Bebri Gonbadi, S. (2021). Dealing with terrorist attacks on the critical infrastructure of a country in the rules of international law. International Studies Quarterly, 18(3), 165-185. doi: 10.22034/isj.2022.301984.1573. (In Persian)
26.    Nematpour, A., Taghizadeh Ansari, M., & Bebri Gonbadi, S. (2023). The responsibility of governments in dealing with terrorist attacks on the critical infrastructure of a country. International Studies Quarterly, 19(4), 171-187. doi: 10.22034/isj.2023.365506.1912. (In Persian)
27.    Pangrazzi, S. (2021). Self-defence Against Cyber Attacks? Digital and Kinetic Defence in Light of Article 51 UN-CHARTER. Policy Brief. ICT for Peace Foundation, Geneva.
28.    Preto, R. (2024). A never-ending tug-of-war: The inherent right of self-defense against non-state actors. e-Publica, 11(2), 32-58. doi: 10.47345/v11n2art2
29.    Razmkhah, N. (2023). Criticism of the draft law of the European Union in harmonizing the laws governing artificial intelligence, from the perspective of dealing with cyber terrorism. Public Law Studies Quarterly, 1-27. doi: 10.22059/jplsq.2022.343006.3086. (In Persian)
30.    Saeidi, T. (2018). Evolutions of international law in the field of self-defence against non-state groups. master's thesis, Safadasht: Islamic Azad University, Safadasht branch. (In Persian)
31.    Sharifi Taraz-Kuhi, H., & Piri, H. (2012). Vital National Interests in the Light of International Judicial Decisions. Quarterly Journal of Public Law Research, 14(38), 37-9. (In Persian)
32.    Sharma, M. (2024). Risks of Cyber Security Threats, Cyber Terrorism and Cyber Warfare. Nanotechnology Perceptions, 20(S13), 824-837. doi:10.62441/nano-ntp.v20iS13.51
33.    Shaygan, F., & Safavi Kohsare, S. (2018). Cyber ​​operations as use of force. Public Law Studies Quarterly, 48(2), 441-419. doi: https://doi.org/10.22059/jplsq.2017.237650.1546 (In Persian)
34.    Stahn, C. (2004). Nicaragua is Dead, long live Nicaragua, the Right of self-Defence Under Art. 51 UN charter and International Terrorism. doi:10.1007/978-3-642-18896-1_26
35.    Tsagourias, N. (2024). The Use of Force Against Terrorist Attacks: The Two Facets of Self-Defence. Saint Louis University Law Journal, 68(2), 326-348.