Why do states invest so heavily in cyber operations? The short answer is that the advantages of cyber warfare are hard to match with any other tool. Cyber attacks are cheap, fast and hard to trace. However, they also carry serious risks, from uncontrolled spread to accidental escalation.
This article weighs both sides, using well-documented incidents such as Stuxnet, the Ukrainian power grid attacks and NotPetya. It also explains what these trade-offs mean for ordinary businesses.
A short history
Cyber warfare grew out of Cold War signals intelligence. Both superpowers tried to intercept and exploit each other’s communications. Later, as militaries and economies moved online, attackers started to target the systems themselves.
Today, states use cyber operations for espionage, sabotage and influence campaigns. In addition, they often work through proxies, such as criminal groups or “hacktivists”, which blurs the line between crime and war. For the motives behind these attacks, see our guide to the reasons for cyber war and warfare.
Advantages of cyber warfare
From an attacker’s point of view, cyber operations offer several clear benefits.
1. Low cost compared with conventional forces
A capable team, exploits and infrastructure cost far less than missiles, ships or aircraft. As a result, smaller states can compete with much larger ones.
2. Deniability
Attribution is slow and difficult. Attackers route traffic through compromised servers in other countries and reuse public tools. Therefore, a state can deny involvement, and the victim may hesitate to respond.
3. Global reach and speed
An attack can reach any connected system in the world within seconds. Moreover, it does not need troops on the ground or permission to cross borders.
4. Precision and reversibility
In theory, operators can target a specific system and limit the effect. For example, they might disrupt a network for a few hours rather than destroy a building. This makes cyber tools attractive as a signal or a warning.
5. Intelligence value
Espionage is the most common use of cyber capabilities. For instance, stolen plans, emails and research can save years of effort and billions in development costs.
6. Effects without bloodshed
Stuxnet, discovered in 2010, damaged centrifuges at Iran’s Natanz enrichment plant. According to public reporting, it delayed the programme without an air strike. Supporters of cyber operations often cite it as proof that digital tools can replace some kinetic attacks.
Disadvantages of cyber warfare
The same features that attract attackers also create serious problems.
1. Loss of control and collateral damage
Malicious code does not respect borders. In 2017, NotPetya targeted Ukraine but spread worldwide within hours. It hit shipping, pharmaceutical and logistics firms, and later estimates put the total damage at about $10 billion.
2. Risk of escalation
The victim may misread the attacker’s intent. A disruptive cyber attack on critical infrastructure could trigger a military response. Consequently, a “contained” operation can turn into a wider conflict.
3. Weapons can be reused against you
Once an exploit is used, defenders can study it and copy it. For example, Stuxnet’s techniques were analysed in public, and later attackers learned from them. A leaked tool can also return to hit its creator’s own allies.
4. Short shelf life
Exploits stop working once vendors patch the flaw. Therefore, cyber weapons are expensive to maintain, and their effects are uncertain.
5. Weak international rules
The UN has agreed voluntary norms for state behaviour in cyberspace, and experts wrote the Tallinn Manual to explain how international law applies. However, there is still no binding treaty. As a result, accountability is limited, and civilians bear much of the risk.
6. Civilian harm
Attacks on power grids, hospitals or water systems hurt ordinary people. For instance, attacks on Ukraine’s grid in December 2015 cut power to about 225,000 customers for several hours.
Advantages and disadvantages at a glance
| Advantages | Disadvantages |
|---|---|
| Low cost compared with conventional forces | Malware can spread beyond the target |
| Hard to attribute | Risk of escalation to armed conflict |
| Global reach in seconds | Tools can be copied and reused by others |
| Can be targeted and temporary | Exploits expire once patched |
| High intelligence value | No binding international treaty |
| Can avoid direct casualties | Civilian infrastructure often suffers |
What this means for businesses
Most companies are not military targets. Even so, they often become collateral damage, as NotPetya showed. In addition, state groups regularly target suppliers to reach bigger victims. Therefore, businesses should:
- Patch internet-facing systems quickly, especially VPNs and firewalls.
- Segment networks so one infected machine cannot reach everything.
- Keep offline backups and test restores.
- Monitor for unusual logins and data transfers.
- Review the security of key suppliers and IT providers.
FAQ
Is cyber warfare legal?
International law, including the UN Charter, applies to cyberspace. However, how it applies to specific operations is still debated. Attacks on civilians are prohibited under the law of armed conflict.
Which was the first cyber weapon?
Stuxnet is widely called the first known cyber weapon designed to cause physical damage.
Sources
Worried about targeted attacks on your business? Our VAPT services find weaknesses before attackers do, and our OSINT investigations show what is exposed about your organisation online. Contact us for a quote.
