Sunday

24th Jun 2018

Opinion

EU cyber diplomacy requires more commitment

  • Europe needs to join together in "cyber solidarity" to deter cyberattacks. (Photo: European Commission)

The awareness of the damaging impact of cyber-attacks is growing globally, due to a quickly expanding list of actual examples – from cyberattacks on the Ukrainian electricity grid and the digital manipulation of the presidential elections in the US, to the global ransomware attacks in the past few months.

The recently published European Commission reflection paper – on the future of European defence – summaries the current challenge very well: Europe must have a stronger deterrent against cyberattacks.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... our join as a group

How to prevent fast-evolving and ever more damaging cyberattacks is, as yet, an unanswered question.

Of course, prevention starts with basic "cyber-hygiene", such as by updating software and installing appropriate security tools in ICT networks, but that is not enough. Hackers will always find ways to exploit computer codes, circumventing security measures.

It is important to take into account that cyber security is not only a matter of technical measures, but also of high politics – closely linked to the international political and strategic context.

The current “political cyber playbook” is still a slim volume, but it expands daily as parts of the world move towards greater strategic use of cyber weapons to persuade their adversaries to change their behaviour.

Recent history shows that cyber criminals are a big global problem, but that states are responsible for developing the most powerful cyber weapons (or exploiting bugs in computer codes).

Recent failures

Only state actors (or state-supported ones) have enough financial and human capacity to invest in developing the most powerful cyber weapons. Unfortunately, however, efforts to contain aggressive behaviour of states in cyberspace, by developing international norm-setting through the United Nations, have recently failed.

Without any common rules of behaviour, states can also rely on the deterrence of cyber-attacks. This can be done by promising military retaliation, like the United Kingdom threatened with air strikes against cyber-attackers, or by more peaceful diplomatic instruments.

Resilience is also emphasised when strengthening cyber deterrence.

The EU launched an interesting initiative in this context on 19 June. It announced that it would start developing what is called a "Cyber Diplomatic Toolbox" – a framework for joint EU diplomatic responses to malicious cyber activities.

Although it is not specified what exactly the instruments in this diplomatic toolbox will be, the decision refers to "measures within the Common Foreign and Security Policy" (CFSP) and the wording "restrictive measures" being used.

Next to the common diplomatic tools, such as making statements of condemnation, summoning ambassadors, or declaring diplomats persona-non-grata, this means that there can be serious a consideration of political and economic sanctions against any adversary attacking EU member states in cyberspace.

These kinds of diplomatic retaliation tools may function as a deterrent, making malicious cyber operations less anonymous and risk-free, while also bringing with them little danger of immediate escalation.

Five questions

The initiative is a valuable development and it should be supported in EU member states. But it also raises five questions which have to considered.

First, a big problem is that EU countries differ in their level of cyber-readiness. This makes it difficult to carry out the principle of operational solidarity – that the member states would really be willing to support each other and, in particular, be able to execute a joint EU diplomatic response.

Stronger political commitment on improving the level of cyber-readiness is needed in several EU member states. Otherwise, “the cyber solidarity” is weakened and the joint response is harder to carry out – and the deterrent effect does not work.

Second, diplomatic means to respond are important, but it should not be forgotten that there are many other options to respond too.

It is said that a state can respond using at least four instruments: diplomatic, informational, military, and economic. Policymakers need to consider the full range of responses at their disposal: from a quiet, diplomatic rebuke, to a full military strike.

Sometimes the diplomatic response is not enough, especially if the impacts of cyberattacks are severe. An EU comprehensive framework, with different ways to respond (more than just diplomatic tools), is needed.

Third, even if the EU member states agree with the content of the “Cyber Diplomatic Toolbox”, there have to be political processes and decisiveness to implement it concretely when a member state is hit by a cyber-attack. Joint political will to respond needs to be discussed thoroughly in advance and it is good to exercise it too.

Fourth, countering hybrid threats is a European priority, and the role of cyber operations in hybrid warfare is increasing.

However, there usually are no “cyber-only” operations and hybrid warfare is characterised by the tailored use of all instruments of power (including cyber) against the vulnerabilities of the opponent’s systems. Therefore, only creating diplomatic response tools against cyber-attacks is not enough.

Most probably, there will be other influencing instruments used simultaneously, and they must be taken into consideration when deciding on the response as well. Cyber hostilities should not be separated from the hybrid warfare context.

Fifth, in order to succeed in using the Cyber Diplomatic Toolbox, the EU must strengthen its capabilities to be able to attribute the attacker better, improve the European cybersecurity industry and increase the multidisciplinary cybersecurity research in Europe.

If the EU does not possess strong cyber capabilities and understanding, then the diplomatic toolbox is likely to be relatively useless.

The cyber threats that Europe faces can only be tackled by working together.

The initiative of the Cyber Diplomatic Toolbox may open a new and important page in European cyber deterrence, but only if it is supported by a strong political commitment, and if the broader context is understood.

Jarno Limnéll is a professor of cybersecurity at the Aalto University, Finland. Sico van der Meer is a Research Fellow at the Netherlands Institute of International Relations ‘Clingendael’.

Investigation

French election faces high cyber threat

French president Francois Hollande has called for "all necessary means" to be used to fend off cyber attacks ahead of the presidential election in April and May. But political parties are still vulnerable.

Interview

Greece keen to keep EU cybersecurity agency

Greek official welcomed proposal to give the agency a bigger role, downplayed its kitchen sink problems, and said he was himself the victim of a computer virus.

Europe's tech race - trying to keep pace with US and China

There is not a single European company among the world's top 10 computer hardware companies. Within the EU, Germany and Sweden rank among world leaders, but Bulgaria and Slovakia among the worst-performing developed nations.

EU needs comprehensive 'sexuality education'

The subject is mandatory by law in some form in nearly all EU countries - but it is mostly reproduction- and biology-centred, covering topics such as unwanted pregnancy and sexually-transmitted infections.

Long-distance animal transport: unthinkable still happening

A complete overhaul of animal products' supply chains is needed, privileging local food chains including local slaughtering which is proven to benefit the environment, the resilience of our economy, food safety and animal welfare.

News in Brief

  1. Venice Commission: Hungary should repeal NGO law
  2. Trump threatens to slap 20 percent tariff on EU cars
  3. EU closes deficit procedure against France
  4. Romania's ruling party leader gets jail sentence
  5. EU states defer individual decisions on asylum reforms
  6. Commission opens case on Qatar gas flow
  7. EU adopts posted workers directive
  8. EU leaders to call for 'coordinated plan' on AI

Stakeholders' Highlights

  1. Mission of China to the EUJointly Building Belt and Road Initiative Leads to a Better Future for All
  2. Macedonian Human Rights MovementMHRMI Launches Lawsuits Against Individuals and Countries Involved in Changing Macedonia's Name
  3. IPHRCivil society asks PACE to appoint Rapporteur to probe issue of political prisoners in Azerbaijan
  4. ACCASocial Mobility – How Can We Increase Opportunities Through Training and Education?
  5. Nordic Council of MinistersEnergy Solutions for a Greener Tomorrow
  6. UNICEFWhat Kind of Europe Do Children Want? Unicef & Eurochild Launch Survey on the Europe Kids Want
  7. Nordic Council of MinistersNordic Countries Take a Stand for Climate-Smart Energy Solutions
  8. Mission of China to the EUChina: Work Together for a Better Globalisation
  9. Nordic Council of MinistersNordics Could Be First Carbon-Negative Region in World
  10. European Federation of Allergy and AirwaysLife Is Possible for Patients with Severe Asthma
  11. PKEE - Polish Energy AssociationCommon-Sense Approach Needed for EU Energy Reform
  12. Nordic Council of MinistersNordic Region to Lead in Developing and Rolling Out 5G Network

Latest News

  1. Migration row at centre of EU summit This Week
  2. Merkel's woes cast shadow on EU's future
  3. Europe's tech race - trying to keep pace with US and China
  4. Merkel and Juncker's mini-summit risks fiasco
  5. Greece and creditors proclaim 'end of crisis'
  6. How a US firm pushed for EU €2.1trn pension fund
  7. Commission defends Africa migrant plan ahead of summit
  8. Bavaria hijacks EU migration talks

Stakeholders' Highlights

  1. Mission of China to the EUChina-EU Economic and Trade Relations Enjoy a Bright Future
  2. ACCAEmpowering Businesses to Engage with Sustainable Finance and the SDGs
  3. Nordic Council of MinistersCooperation in Nordic Electricity Market Considered World Class Model
  4. FIFAGreen Stadiums at the 2018 Fifa World Cup
  5. Mission of China to the EUChina and EU Work Together to Promote Sustainable Development
  6. Counter BalanceEuropean Ombudsman Requests More Lending Transparency from European Investment Bank
  7. FIFARecycling at the FIFA World Cup in Russia
  8. Nordic Council of MinistersOECD Report: Gender Equality Boosts GDP Growth in Nordic Region
  9. Centre Maurits Coppieters“Peace and Reconciliation Is a Process That Takes Decades” Dr. Anthony Soares on #Brexit and Northern Ireland
  10. Mission of China to the EUMEPs Positive on China’s New Measures of Opening Up
  11. Macedonian Human Rights MovementOld White Men are Destroying Macedonia by Romanticizing Greece
  12. Counter BalanceControversial EIB-Backed Project Under Fire at European Parliament

Stakeholders' Highlights

  1. Nordic Council of MinistersIncome Inequality Increasing in Nordic Countries
  2. European Jewish CongressEU Leaders to Cease Contact with Mahmoud Abbas Until He Apologizes for Antisemitic Comments
  3. International Partnership for Human RightsAnnual Report celebrates organization’s tenth anniversary
  4. Nordic Council of MinistersNordic Cooperation Needed on Green Exports and Funding
  5. Mission of China to the EUPremier Li Confirms China Will Continue to Open Up
  6. European Jewish CongressCalls on Brussels University to Revoke Decision to Honour Ken Loach
  7. Nordic Council of Ministers12 Recommendations for Nordic Leadership on Climate and Environment
  8. Macedonian Human Rights MovementOxford Professor Calls for an End to the Anti-Macedonian Name Negotiations
  9. ACCAPeople Who Speak-Up Should Feel Safe to Do So
  10. Mission of China to the EUProgress on China-EU Cooperation
  11. Nordic Council of MinistersWorld's Energy Ministers to Meet in Oresund in May to Discuss Green Energy
  12. ILGA EuropeParabéns! Portugal Votes to Respect the Rights of Trans and Intersex People

Join EUobserver

Support quality EU news

Join us