Five Kinds of Cyber Deterrence

Abstract

There were five kinds of cyber deterrence presented at the workshop on Landscaping strategic cyber deterrence, hosted at the Oxford Internet Institute. They were the well-studied areas of deterrence by ‘punishment’ and ‘denial’, and the novel concepts of deterrence by ‘association’, ‘norms and taboos’, and finally, ‘entanglement’. In the following workshop commentary, I present these five kinds of deterrence and explain them in light of recent developments in the academy and industry. I argue for analytical congruence between all three novel concepts, since they aim to alter the behaviour of actors by adding a social cost in response to breaking norms and conventions. Throughout, I argue that we are beginning to understand how cyber deterrence works, both in theory and practice, and when all concepts are taken together, they become more than the sum of their parts. Finally, I point out an omission of the workshop, where computational modelling and simulation could be added to the landscape of strategic cyber deterrence.