Need assistance with movie analysis

profileMundana__01
HeinzeandNielsen-LimitedForceandtheReturnofReprisals.pdf

ROUNDTABLE: THE ETHICS OF LIMITED STRIKES

Limited Force and the Return of Reprisals in the Law of Armed Conflict Eric A. Heinze and Rhiannon Neilsen

I t is widely acknowledged that armed reprisals—the limited use of military

force by a state in response to a prior illegal action perpetrated against

that state—were formally banned by the UN Charter in . Despite

this, states have routinely engaged in the practice and continue to do so today,

often with little opposition from the international community. On April ,

, for example, the United States, the United Kingdom, and France launched

more than one hundred missiles at Syrian chemical weapons facilities in response

to the use of chemical weapons by Bashar al-Assad’s regime against civilians in the

city of Douma. While these airstrikes are more appropriately characterized as

“third-party reprisals,” since those undertaking the reprisals were not the actual

victims of the wrongful actions in question, it is noteworthy that only a very

small minority of the over seventy states that expressed a view claimed that

these strikes violated international law (including, unsurprisingly, Syria, Iran,

and Russia). Likewise, on February , , India undertook airstrikes against

a terrorist training camp located in Pakistan in reprisal for a suicide attack that

killed approximately forty Indian soldiers in Indian-administered Kashmir almost

a week earlier. Beyond increased tensions and calls for restraint, this, too, gar-

nered little international condemnation.

The advent and proliferation of cyber capabilities has arguably created further

incentive for reprisals, as state and nonstate actors acquire the ability to undertake

cyber operations that, legally speaking, may rise to the level of a use of force or

even an “armed attack,” which would give rise to the right of self-defense under

Ethics & International Affairs, , no.  (), pp. –. © The Author(s), . Published by Cambridge University Press on behalf of the Carnegie Council for Ethics in International Affairs doi:./S

175

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

Article  of the UN Charter. Indeed, on May , , the Israeli Defense Forces

destroyed a building in which they alleged Hamas was poised to launch cyberat-

tacks on Israel—therein constituting the first time that a state has conducted a

kinetic military operation directly in response to an imminent malicious cyber

operation. This illustrates what might be called “cross domain reprisals,” whereby

an actor resorts to the use of kinetic force in a reprisal against a hostile cyber oper-

ation, or vice versa. Such a cross-domain reprisal was again demonstrated by the

United States in response to Iran downing a U.S. surveillance drone and alleged

attacks on oil tankers near the Strait of Hormuz on June , . In this case, the

United States opted to conduct cyber operations aimed at disabling Iranian intelli-

gence facilities and missile launch systems, precisely because such operations were

intended to fall below what would constitute an armed attack. Lastly, and most

recently, on January , , the United States killed top Iranian general Qasem

Soleimani, as well as nine other Tehran-backed militia officials, at Baghdad

International Airport via a drone strike. While the legality of the strike is still

being debated, the immediate international response from states and the United

Nations has largely been one of alarm, with fears that the “assassination of

Soleimani could ignite serious escalation in the region and possibly lead to war.”

The purpose of this essay is to examine the international law of reprisals in light of

these and other instances of states resorting to military measures short of war more

generally, paying particular attention to recent developments in the rules governing

hostile cyber operations. The first section examines reprisals in international lawand

suggests that the ban on reprisals was perhaps never as absolute as some believe. The

next section examines the developments in the rules of hostile cyber operations and

recent trends in state practice, and suggests that these may be further weakening the

ban on reprisals. We conclude with a discussion of the dangers that eroding this ban

may present, especially in an era of increasing weaponization of cyber capabilities.

The Ban on Reprisals

The contemporary doctrine of armed reprisals has its origins in the ancient practice

of “private reprisals.” During the Middle Ages, private individuals were empowered

by “letters of marque and reprisal” to undertake acts of self-help against foreign

states or their citizens as a means to recover damages incurred by some wrongful

act perpetrated by those parties. By the end of the seventeenth century, with

the increasing role of the state and the rise of state responsibility, private reprisals

176 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

were generally tolerated less, while public reprisals emerged as an important means

of self-help, short of war, for states to address and deter wrongful acts conducted

against them. Further, throughout the eighteenth and nineteenth centuries, since

the right of states to use force was generally understood to be fairly unlimited, it

was thought that the right to armed reprisals was also unlimited. This led some

commentators to conclude that there was little basis to distinguish between war

and reprisals, as their legality was not in question—at least not until the emergence

of rules that placed limitations on the resort to force.

While the League of Nations era (–) succeeded in placing certain lim-

itations on states’ ability to resort to force, it was during this period that the first

coherent doctrine of reprisals emerged. The so-called Naulilaa Arbitration

between Portugal and Germany, which originated from a  incident involving

a German reprisal against Portuguese military positions in present-day Angola, is

understood to have established the customary criteria for lawful armed reprisals of

the time. These were: () There must have been a prior violation of international

law by the target state against the claimant state; () there must have been an

attempt by the claimant state to obtain reparation or redress for the alleged

wrong by peaceful means (and such an attempt must have failed or been inappro-

priate for the circumstances); and () the force used in the reprisal must have been

proportionate to the original harm done by the target state.

Although it appears reprisals were not entirely forbidden during the League of

Nations period, the UN Charter definitively banned the practice in international

law in . Under Charter rules, states are prohibited from using force (Article 

[]) unless it is either part of a UN-authorized enforcement operation or at the

invitation of the state in question, or if they are acting in self-defense against

an “armed attack” under the authority of Article  of the Charter. However,

not all uses of force rise to the level of an armed attack; “only the most grave

uses of force” are grounds for invoking the right to self-defense, whereas lower-

level military actions that do not meet the “scale and severity” threshold of an

armed attack are not legal grounds for resorting to self-defensive force. So,

even if a state is the victim of the unlawful use of force, if that use of force

does not rise to the level of what is considered an armed attack, the victim

state may not respond in kind with proportionate force. Such an act would be con-

sidered an unlawful reprisal, or a “forcible countermeasure.” This interpretation of

the Charter is supported by numerous UN documents, resolutions by UN bodies,

expert opinions, and opinions of international tribunals.

limited force and the return of reprisals in the law of armed conflict 177

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

However, as early as the s and s, a pattern began to emerge in the con-

ditions under which the UN Security Council was willing to condemn certain

instances of reprisals. In essence, those reprisals receiving criticism by the

Council were denounced on the basis of their disproportionality, targeting of civil-

ian assets, or the observation that they primarily served a punitive vs. deterrent

function. Scholars such as Derek Bowett observed that some reprisals were

more readily condemned by the Council during this period than others, suggest-

ing that it was not the reprisals themselves that were drawing condemnation, but

the fact that some did not meet the criteria for what members of the Council

believed was acceptable. While certainly driven by prevailing political realities

of the time, Bowett nevertheless saw international law evolving in such a way

that “reprisals remain illegal de jure, [but] become accepted de facto,” at least if

they met certain criteria.

Bowett and other skeptics of the ban on reprisals advanced their claims in the

context of a UN collective security system that had been unable to consistently and

effectively enforce a system of collective judgment and enforcement, causing states

to rely on self-help more than the framers of this system had intended. As is well

known, the UN Charter originally envisaged the right of states to use force in self-

defense under Article  as a temporary measure available only to the victim state

until the collective security mechanisms of the UN could be activated, and a mul-

tilateral force could be dispatched. Relatedly, collective enforcement under

Chapter VII of the Charter was supposed to be implemented according to

Article , which commits all UN member states to make their armed forces

and military facilities available to the UN Security Council “on its call” to main-

tain international peace and security. Needless to say, this is not how the lawful

practice of self-defense occurs today. Rather, self-defense remains the purview of

states, while collective enforcement under Chapter VII relies on states voluntarily

acting on behalf of the UN. Since the Council is not able to consistently and effec-

tively enforce these elements of the collective security system, states have unsur-

prisingly resorted to self-help, including reprisals.

The International Court of Justice (ICJ) has also suggested certain qualifications

in the ban on reprisals. In the Military and Paramilitary Activities in and Against

Nicaragua case (Nicaragua v. United States of America) ()—which is often

cited as evidence in support of the ban on reprisals—the United States argued

that its use of force against Nicaragua was an act of collective self-defense primar-

ily on behalf of El Salvador, which had been attacked by insurgents who were

178 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

supposedly armed and equipped by Nicaragua. However, the court concluded that

uses of force that do not amount to an armed attack (in this instance, Nicaragua’s

alleged assistance to Salvadorian insurgents) do not sanction collective measures

involving the use of force, but only permit nonforcible countermeasures on the

part of the victim state. In this case, therefore, the use of force by the United

States against Nicaragua on behalf of other states was illegal. The court explicitly

ruled that “States do not have a right of ‘collective’ armed response to acts which

do not constitute an ‘armed attack.’” Yet, it is not clear whether the court was

saying that the United States acted illegally because forcible reprisals are illegal,

or because the United States was not itself the victim of an unlawful act by

Nicaragua, and therefore had no right to act on behalf of the victim state.

Describing this ambiguity, Tom Ruys claims that “it is rather flabbergasting that

the Court flags a crucial potential gap in the rules on the use of force, which

would seem to be prima facie” at a disjuncture with the existing international

laws on use of force and self-defense.

The more recent Oil Platforms case (Islamic Republic of Iran v. United States of

America) (), however, leaves open the question of whether armed reprisals

may ever be lawful. In this case, the court refused to address whether the

United States acted lawfully when it attacked three Iranian oil platforms in

response to an Iranian naval mine severely damaging a U.S. Navy ship, thus miss-

ing an opportunity to settle the legal status of reprisals in international law. In a

separate opinion, Justice Bruno Simma left the door open for reprisals, interpret-

ing the ruling in Nicaragua as limiting the collective use of force, such that self-

defense may be undertaken individually or collectively, whereas reprisals may

only be undertaken by the victim state alone. He thus concluded that in response

to lower-level hostile actions, such as the naval mines deployed by Iran, states

would be entitled to undertake “proportionate countermeasures.” Simma argued

that the court in Nicaragua could not have understood this to mean “mere pacific

reprisals,” but should have rather interpreted it as “defensive military action ‘short

of’ full-scale self-defense”—that is, armed reprisals.

In short, states’ interpretation of and commitment to the illegitimacy and ille-

gality of reprisals is not as concrete as once thought. Nevertheless, the increasingly

permissive international climate pertaining to reprisals has also been facilitated by

the rules, attitudes, and activities undertaken in what is now considered to be the

fifth domain of war. Cyberspace, as a new avenue through which states and non-

state actors alike can conduct hostile operations, is influencing the return of

limited force and the return of reprisals in the law of armed conflict 179

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

reprisals in a profound way, in terms of both the rules applicable to cyberspace

and the state conduct pertaining to cyber operations in recent years. At the

core of this apparent erosion are the Tallinn Manuals.

Developments in the Rules and Attitudes regarding

Hostile Cyber Operations

Responding to an increase in malicious cyber activities, the NATO Cooperative

Cyber Defence Centre of Excellence invited a group of international legal experts

(hereafter referred to as the “experts”) to shed light on how cyber operations ought

to comply with international law. The final outputs—known as the Tallinn

Manual () and Tallinn Manual . ()—are the most internationally

renowned sources on international law applicable to cyber warfare and cyber

operations, respectively. The Tallinn Manuals are not in themselves legally bind-

ing, but rather constitute “an expression of the opinion of the two International

Groups of Experts as to the state of the law.” Of course, there are also a huge

number of other excellent works that examine cyber operations in light of the

laws and ethics of armed conflict. However, the Tallinn Manuals boast the

insights of legal experts from countries around the world (including, to name a

few, Belarus, China, Israel, Thailand, and the United States), in areas ranging

from human rights law to space law, and with observers from nongovernmental

organizations such as the International Committee of the Red Cross. Given

the sheer breadth of expert insight and legal peer review in considering the law

applicable to cyberspace, the findings of the two Tallinn Manuals are thus deserv-

ing of attention.

A pillar of both of the Tallinn Manuals is that, for the purposes of determining

whether an act qualifies as a “use of force” or an “armed attack,” they do not make

a distinction between a malicious cyber operation or a kinetic operation, so long as

the “scale and effects” are comparable. This is in accord with the ICJ’s under-

standing of international customary law pertaining to “any use of force, regardless

of the weapons employed.” What matters in the cyber context, according to the

Tallinn Manual ., “is not the instrument used that determines whether the use

of force threshold has been crossed, but rather . . . the consequences of the oper-

ation and its surrounding circumstances.” Therefore, if a state falls victim to a

cyber operation that qualifies as an armed attack, that state can lawfully resort

to (collective or individual, cyber or kinetic) self-defense measures pursuant to

180 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

Article . What the Tallinn Manual . fails to make clear in any certain terms,

however, is what a state may lawfully do if it is affected by a cyberattack that falls

short of qualifying as an armed attack.

Addressing countermeasures specifically, all of the experts contributing to the

Tallinn Manual . maintain that, as per international customary law, countermea-

sures (cyber or otherwise) must not rise to the level of an armed attack. However,

the experts then become divided over whether a countermeasure that crosses the use

of force threshold, but does not reach the level of an armed attack, would be consid-

ered lawful. Most of the experts purportedly reaffirmed the conventional view that

the “injuredstate” is not permitted to respond to thewrongful actperpetrated against

it with a use of force. The victim state would be entitled to impose countermeasures

against the offending state in such a way that suspends its legal obligations to that

state, but only to the end of inducing the offending state to re-comply with its

legal obligations. Under no circumstances, according to the conventional view,

is the injured state permitted to resort to even a proportionate use of force. As

such, most of the experts writing for the Tallinn Manual . maintain that there is

an obligation on the part of the injured state to refrain from using “forcible

countermeasures,” cyber or otherwise. The Tallinn Manual . explicitly notes that

this view thereby replicates Article () of the Articles on State Responsibility

and maintains the jurisprudence of the International Court of Justice.

A small number of the Tallinn Manual experts, on the other hand, adopt the view

that an injured state could resort to “forcible countermeasures,” cyber or otherwise,

in response to a wrongful use of force, so long as those forcible countermeasures sat-

isfy attendant international legal obligations. According to the Tallinn Manual

., the experts’ reasoning was hinged on the logic that an injured state would be

otherwise denied of a proportionate response by being restricted to measures that

necessarily fall below the use of force. Indeed, these experts (who, again, represent

only a minority) took their lead from Justice Simma’s separate opinion pertaining to

the Oil Platforms case, and explicitly cited this as influencing their view.

As a consequence of this disagreement and division, the Tallinn Manual .

provides “no such limitation”—that is, the obligation of injured states to refrain

from using forcible countermeasures—in its rules on countermeasures.

Whereas existing international law holds fast on the view that countermeasures

must not entail the use of force, recent developments in the view of international

law applicable to cyberspace leave this open for debate. In other words, because

the experts failed to agree, the Tallinn Manual . does not explicitly outline

limited force and the return of reprisals in the law of armed conflict 181

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

whether a forcible countermeasure, cyber or otherwise, in response to an initial

use of force, would be considered unlawful. By deciding to refrain from including

such a limitation, the Tallinn Manual . thus fails to clearly rearticulate and

recommit to a hard ban on countermeasures that rise to the level of a use of

force—in other words, the ban on reprisals.

This point of contention is particularly concerning because, by the experts’ own

reasoning, there is no distinction between cyber or kinetic operations, as long as

the scale and severity are commensurate to the extent to which the act can be

regarded as a “use of force” or an “armed attack.” As such, states might feel at lib-

erty to interpret the Tallinn Manual .’s leniency as permitting both cyber and

noncyber forcible countermeasures in response to both cyber and noncyber uses

of force. This problematically paves the way for states to respond to cyber uses

of force with traditional kinetic uses of force.

An example of this, noted earlier, is the decision by the Israel Defense Forces

(IDF) to airstrike a building where a Hamas cyber operation was allegedly under-

way. In May , the IDF’s official Twitter account tweeted, “CLEARED FOR

RELEASE: We thwarted an attempted Hamas cyber offensive against Israeli tar-

gets. Following our successful cyber defensive operation, we targeted a building

where the Hamas cyber operatives work. HamasCyberHQ.exe has been

removed.” This, admittedly, is a different species of reprisal, since it took

place in the context of ongoing hostilities between Israel and Hamas (in other

words, a “belligerent reprisal”), and it sought to thwart a suspected cyber opera-

tion, thus potentially qualifying as an anticipatory reprisal. Nevertheless, it high-

lights the problematic potential for states to resort to force in response to even a

suspected cyberattack. The softening on the view of forcible countermeasures

prompted by the Tallinn Manual . is therefore troubling. If states believe that

they are permitted to resort to forcible countermeasures (at least insofar that

their actions will fail to elicit widespread international condemnation), then this

is likely to continue to erode the ban on reprisals. Traditional forcible countermea-

sures are then likely to become easier to contemplate and countenance, ipso facto,

thereby risking retaliation and escalation.

Conclusion: Dangers of the Return of Reprisals

When subjected to a use of force, states have an array of pacific actions that they

may lawfully resort to under the category of countermeasures. Nothing in

182 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

international law has overturned the obligation of states to refrain from using

force unless authorized by the UN Security Council or in self-defense under the

auspices of Article . We are not suggesting anything to the contrary. Our

point is that recent interpretations of international law, as evidenced by Justice

Simma in the Oil Platforms case and the expert opinions in the Tallinn

Manuals, as well as recent state breaches of the law (which have been met with

feeble international condemnation), highlight that the ban on reprisals is in a frag-

ile and fractured state.

Each of the cases introduced at the outset of this paper have their own respec-

tive complexities. For instance, the airstrikes by the United States, the U.K., and

France in Syria technically qualify as a “third-party reprisal” and the case is further

complicated by humanitarian considerations. India’s reprisals were against the

militant group Jaish-e-Mohammed, a nonstate actor not bound by international

law but nonetheless based in Pakistan, and Israel’s missile strike against Hamas

occurred prior to the alleged hostile cyber operation. Yet if we consider Justice

Simma’s view that proportionate countermeasures could include “defensive mili-

tary action,” and the Tallinn Manual .’s failure to include a limitation on forc-

ible countermeasures, it is conceivable that each of these reprisals could be

interpreted as permissible. This is because the mere fact that they qualify as forc-

ible countermeasures does not, according to these views, call for concern, as long

as the forcible countermeasures adhere to other legal requirements, such as pro-

portionality. Indeed, it is debatable whether Israel’s choice to conduct airstrikes

was proportionate to a suspected imminent use of cyber force; it is likewise debat-

able whether Pakistan’s decision to shoot down two Indian warplanes was propor-

tionate with India’s own reprisal against a nonstate actor. Nevertheless, the fact

that these forcible countermeasures were taken in response to a threat or use of

force is not, ostensibly, that with which Justice Simma or the Tallinn Manual

. would take issue.

The example discussed in this paper that would be most appropriately viewed as

a lawful countermeasure is the U.S. decision to employ offensive cyberspace oper-

ations against Iranian military targets on June , . The United States was

reportedly “cocked and loaded” for a missile attack against military sites in

Iran, but such a reprisal was reportedly called off by U.S. president Donald

Trump because the predicted death toll of  Iranian personnel was “not propor-

tionate to shooting down an unmanned drone.” Instead, the United States chose

to launch cyberattacks against Iranian facilities precisely because—as the head of

limited force and the return of reprisals in the law of armed conflict 183

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

the U.S. Cyber Command insisted—these operations are “calibrated to stay well

below the threshold of war.” However, the emerging norms governing cyber

operations, as illustrated by the experts’ opinions in the Tallinn Manual ., sug-

gest that these actions may still be considered a use of force if the cyber actions

produce results similar in “scale and effect” to a kinetic use of force. This response

is in itself concerning because it would suggest that Iran could have interpreted

malicious cyber operations conducted by the United States as a use of force. If

Iran interpreted the actions in this way, then, according to at least some of the

Tallinn Manual . experts, Iran would be permitted to engage in proportionate

forcible countermeasures, cyber or otherwise. Again, it is contentious whether

the consequences of the U.S. cyber operation could be considered to be on par

with a kinetic missile strike. But by lowering the bar for resorting to forcible coun-

termeasures in response to an initial use of force, these developments necessarily

increase the risk of retaliation and the likelihood of escalation. Such developments

are therefore dangerous because they hint at, as Shane Darcy puts it, “a reinstate-

ment of the doctrine of armed reprisals, [which] would undermine the established

rules of international law on the use of military force and facilitate unilateral resort

to force that would actually threaten international peace and security.”

As both Brunstetter’s and Pearlman’s contributions to this roundtable suggest,

there are sound moral and strategic reasons for resorting to limited strikes vs. wag-

ing actual war, insofar as we assume that a state’s intention in using a limited

strike is to try to avoid escalation. However, even if we agree that limited

force is less likely to result in escalation than actual war, applying the principle

of the “probability of escalation” in the practice of limited use of force “is plagued

by ambiguity” and raises a number of concerns. First, even if the intention of a

state is to limit escalation by opting for limited strikes, whether the situation esca-

lates is ultimately not up to that state, but rather the target state. This places a lot

of faith in an entity that is already assumed to be untrustworthy and unpredictable

to accurately interpret the limited nature of the strike as an indication of a desire

not to escalate, and to act accordingly. As Robert Jervis reflects in the context of

the limited U.S. strike that killed Soleimani: “The success of coercion depends on

the adversary’s choices. . . . Iran may choose acquiescence as the path most in its

interest, but this is indeed a choice.”

Second, we should be cautious in assuming that the absence of (immediate)

escalation is because the states involved accurately interpret the limited strike as

a mechanism intended to avoid escalation. Such an outcome could just as easily

184 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

be a result of the power asymmetries that characterize most of the examples of

limited force examined in this roundtable, wherein the weaker party knows that

it would suffer far more if the situation escalated. In this sense, if reprisals are

back on the table as a policy option, they are seemingly a tool primarily at the dis-

posal of the powerful against the weak. It is likely that they would be more prone

to escalate in less asymmetrical disputes.

Third, and owing to this, weaker states may thus calculate that they are more

able to compete by resorting to cyber operations. But again, the deployment of

cyberattacks is replete “with multiple opportunities for misunderstandings and

miscalculations,” which could produce unforeseen effects, and result in mounting

malicious exchanges within cyberspace. Moreover, as noted above, cyber opera-

tions could reasonably be interpreted as entailing a use of force, even if states

launch them to explicitly avoid escalation. In such cases, states may then find

themselves the targets of kinetic force in reprisal or retaliation.

Not only does contemplating limited strikes as a tool for conflict settlement chip

away at the restrictions on the resort to force, it erodes the obligation that states have

to resolve their disputes peacefully and normalizes this sort of violence in interna-

tional politics. The emphasis in international politics should remain on exploring ave-

nues for peaceful recourse to tensions and acting earlier in response to humanitarian

emergencies—not lowering the bar for the resort to violence, albeit short of war.

Such developments are further troubling considering recent developments in

the use of force against nonstate actors, wherein governments and commentators

increasingly recognize that nonstate actors no longer need to be under the “effec-

tive control” of a state in order to undertake an armed attack for the purposes of

Article . As a result, states have increasingly asserted a broad right to use self-

defensive force against nonstate actors in the territory of another state, even with-

out the state’s permission if the state is “unable or unwilling” to neutralize the

threat. The United States famously asserted this right after the September ,

, terrorist attacks when it targeted al-Qaeda in the territory of Afghanistan

without the country’s permission. Since that time, numerous other states (includ-

ing Colombia, Ethiopia, India, Kenya, Russia, and Turkey) have adopted a similar

view to justify their own uses of force against hostile nonstate groups operating in

neighboring states. The various armed activities conducted against the Islamic

State in Syria in  hinged on the same interpretation of the law, which was

endorsed by the UN Security Council and declared by some to be a “Grotian

moment” that created a new rule of international law. Combined with the

limited force and the return of reprisals in the law of armed conflict 185

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

normalization of reprisals and the proliferation of cyber capabilities, such an inter-

pretation of international law stands to significantly increase the situations in

which states feel they have the right to target nonstate actors located in other states

with either cyber or kinetic force.

Our concern in this paper is that the weakening of the ban on reprisals, in tan-

dem with other developments pertaining to uses of cyber force and self-defense

against nonstate actors, is () leading to a permissive normative-legal environment

in which states are more likely than before to resort to uses of force over contin-

uing to pursue alternative pacific measures; and () leading to situations ripe for

escalation. Suggesting that states may resort to force in reaction to an initial unlaw-

ful use of force (cyber or otherwise) not only precariously dilutes the prohibition on

reprisals but also threatens to dissolve the distinction between Article () and

Article  altogether. Indeed, the precise purpose of the gap between Article ()

and Article  is to serve as a buffer against escalatory violence. An erosion of

this safeguard, facilitated by the return of reprisals, is thus a dangerous development

in light of the uncertainty involved in resorting to even limited uses of force and the

high costs of further destabilizing the international order.

NOTES

 See Hans Kelsen, Principles of International Law (Clark, N.J.: Lawbook Exchange, ), p. .  Michael P. Scharf, “Striking a Grotian Moment: How the Syria Airstrikes Changed International Law Relating to Humanitarian Intervention,” Chicago Journal of International Law , no.  (February ), p. ; and Mary Ellen O’Connell, “The Popular but Unlawful Armed Reprisal,” Ohio Northern University Law Review , no.  (), pp. –.

 This then spurred a number of tit-for-tat retaliations between India and Pakistan. See “Balakot: Indian Air Strikes Target Militants in Pakistan,” BBC News, February , , www.bbc.com/news/world- asia-.

 “UN Chief Urges India and Pakistan to Dial Down Tensions in Wake of Kashmir Attack,” UN News, February , , news.un.org/en/story///.

 Michael N. Schmitt, ed., Tallinn Manual . on the International Law Applicable to Cyber Operations, nd ed. (Cambridge, U.K.: Cambridge University Press, ), p. .

 Israel Defense Forces, “CLEARED FOR RELEASE: We thwarted an attempted Hamas cyber offensive against Israeli targets. Following our successful cyber defensive operation, we targeted a building . . . ,” Twitter, May , , twitter.com/IDF/status/.

 Michael D. Shear, Eric Schmitt, Michael Crowley, and Maggie Haberman, “Strikes on Iran Approved by Trump, Then Abruptly Pulled Back,” New York Times, June , ; and Julian E. Barnes and Thomas Gibbons-Neff, “U.S. Carried Out Cyberattacks on Iran,” New York Times, June , , www.nytimes. com////us/politics/us-iran-cyber-attacks.html.

 “Statement by the Department of Defense,” Defense.gov, January , , www.defense. gov/Newsroom/Releases/Release/Article//statement-by-the-department-of-defense/source/- GovDelivery/; Michael Crowley, Falih Hassan, and Eric Schmitt, “U.S. Strike in Iraq Kills Qassim Suleimani, Commander of Iranian Forces,” New York Times, January , , www.nytimes. com////world/middleeast/qassem-soleimani-iraq-iran-attack.html; and Stefan Talmon and Miriam Heipertz, “The U.S. Killing of Iranian General Qasem Soleimani: Of Wrong Trees and Red Herrings, and Why the Killing May Be Lawful after All” (Bonn Research Papers on Public International Law /, University of Bonn, Institute for Public International Law, February , ), p. .

186 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

 “World Reacts to US Killing of Iran’s Qassem Soleimani in Iraq,” Al Jazeera, January , . See also Kate Holton, “UK Says U.S. Is Entitled to Defend Itself Following Iraq Attack,” Reuters, January , , www.reuters.com/article/us-iraq-security-britain-wallace/uk-says-us-is-entitled-to-defend-itself-following- iraq-attack-idUSKBNZM.

 Alan N. Salpeter and Jonathan C. Waller, “Armed Reprisals during Intermediacy—A New Framework for Analysis in International Law,” Villanova Law Review , no.  (), p. .

 Antonio Cassese, International Law (Oxford: Oxford University Press, ), p. .  See James Larry Taulbee and John Anderson, “Reprisal Redux,” Case Western Reserve Journal of

International Law , no.  (), pp. –.  For example, the Special Committee of Jurists, established by the League of Nations to examine the 

Corfu incident, concluded that reprisals “may or may not be” consistent with the Covenant of the League of Nations. The Permanent Court of International Justice also characterized reprisals as an “alleged right” in , while the Institute of International Law passed a resolution indicating that armed reprisals were restricted similarly to all recourse to war—restricted but not entirely banned. See Shane Darcy, “Retaliation and Reprisal,” in Marc Weller, ed., Oxford Handbook on the Use of Force (Oxford: Oxford University Press, ), pp. –.

 O’Connell, “Popular but Unlawful Armed Reprisal,” p. ; and Darcy, “Retaliation and Reprisal,” p. .  See, especially, Military and Paramilitary Activities in and Against Nicaragua (Nicaragua v. United

States of America),  I.C.J. , paras. , .  See United Nations General Assembly, preamble to Article ()(a); “Declaration on Principles of

International Law concerning Friendly Relations and Co-Operation among States in Accordance with the Charter of the United Nartions,” A/RES/ (XXV), October , ; J. L. Brierly, The Law of Nations: An Introduction to the International Law of Peace (New York: Oxford University Press, ), p. ; and International Court of Justice, advisory opinion, “Legality of the Threat or Use of Nuclear Weapons” (July , ), para. .

 Derek Bowett, “Reprisals involving Recourse to Armed Force,” American Journal of International Law , no.  (January ), p. . See also Robert W. Tucker, “Reprisals and Self-Defense: The Customary Law,” American Journal of International Law , no.  (July ), pp. –.

 Bowett, “Reprisals involving Recourse to Armed Force,” p. .  Taulbee and Anderson, “Reprisal Redux,” pp. –; and Tucker, “Reprisals and Self-Defense,” p. .  Article , Charter of the United Nations, October , .  Nicar. v. U.S., para. .  Ibid., para. .  Tom Ruys, ‘Armed Attack’ and Article  of the UN Charter Evolutions in Customary Law and Practice

(Cambridge, U.K.: Cambridge University Press, ), p. .  Oil Platforms (Islamic Republic of Iran v. United States of America),  I.C.J. , separate opinion of

Judge Simma, para. : “But we may also encounter a lower level of hostile military action, not reaching the threshold of an ‘armed attack’ within the meaning of Article  of the UN Charter. Against such hostile acts, a State may, of course, defend itself, but only within the more limited range and quality of responses (the main difference being that possibility of collective self-defense does not arise, cf. Nicaragua) and bound to necessity, proportionality, and immediacy in time in a particular way.”

 Oil Platforms, para. .  The requirement for greater clarity regarding how international law applies to cyber operations became

particularly pertinent after the Russian-supported cyberattacks against the Estonian government on April , . See Toomas Hendrik Ilves, forward in Schmitt, Tallinn Manual ., pp. xxiii–xxiv.

 Michael N. Schmitt, ed., Tallinn Manual on the International Law Applicable to Cyber Warfare (Cambridge, U.K.: Cambridge University Press, ); and Schmitt, Tallinn Manual ..

 Schmitt, Tallinn Manual ., n., pp. –.  See, for instance, Michael L. Gross and Tamar Meisels, Soft War: The Ethics of Unarmed Conflict

(Cambridge, U.K.: Cambridge University Press, ); George Lucas, Ethics and Cyber Warfare: The Quest for Responsible Security in the Age of Digital Warfare (Oxford University Press, ); and Martha Finnemore, “Ethical Dilemmas in Cyberspace,” Ethics & International Affairs , no.  (Winter ), pp. –.

 For a list of experts and contributors to the first Tallinn Manual, see Schmitt, Tallinn Manual on the International Law Applicable to Cyber Warfare, pp. xix–xxii; for experts and contributors to the second Tallinn Manual, see Schmitt, Tallinn Manual ., pp. xii–xviii. See also Eric Talbot Jensen, “The Tallinn Manual .: Highlights and Insights,” Georgetown Journal of International Law , p. .

 Schmitt, Tallinn Manual ., p. .  International Court of Justice, “Legality of the Threat or Use of Nuclear Weapons,” para. . See also

Schmitt, Tallinn Manual ., p. .

limited force and the return of reprisals in the law of armed conflict 187

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

 Schmitt, Tallinn Manual ., p. .  Ibid., p. .  In the Tallinn Manuals, “injured state” refers to the state affected by the initial unlawful use of force.

See, for instance, Schmitt, Tallinn Manual, p. , and Schmitt, Tallinn Manual ., p. .  See Yoram Dinstein, War, Aggression and Self-Defence, th ed. (Cambridge, U.K.: Cambridge University

Press, ), p. .  O’Connell, “Popular but Unlawful Armed Reprisal,” p. .  See International Law Commission, Art. ()(a), “Draft Articles on Responsibility of States for

Internationally Wrongful Acts,” A/RES//, November , and Nicar. v. U.S., para. .  Schmitt, Tallinn Manual ., p. .  These countermeasures include, for instance, proportionality, discrimination, and human rights law.

See Schmitt, Tallinn Manual ., pp. –.  Ibid., p. .  Ibid., p. .  Israel Defense Forces, “CLEARED FOR RELEASE.”  In addition to countermeasures, states are also permitted to engage in acts of retorsion—that is,

unfriendly or discourteous acts that are nonetheless lawful. See Darcy, “Retaliation and Reprisal,” p. .  Donald Trump, quoted in “US-Iran: Trump Says Military Was ‘Cocked and Loaded’ to Retaliate,” BBC

News, June , , www.bbc.com/news/world-us-canada-.  Julian E. Barnes, “U.S. Cyberattack Hurt Iran’s Ability to Target Oil Tankers, Officials Say,” New York

Times, August , , www.nytimes.com////us/politics/us-iran-cyber-attack.html. See also Barnes and Gibbons-Neff, “US Carried Out Cyberattacks on Iran”; and Schmitt, Tallinn Manual ., pp. –.

 Darcy, “Retaliation and Reprisal,” p. .  Daniel R. Brunstetter, “Wading Knee-Deep Into the Rubicon: Escalation and the Morality of Limited

Strikes,” Ethics & International Affairs , no.  (July, ), pp. –. Wendy Pearlman, “Syrian Views on Obama’s Red Line: The Ethical Case for Strikes against Assad,” Ethics & International Affairs , no.  (July, ), pp. –.

 On the principle of “probability of escalation,” see Daniel R. Brunstetter and Megan Braun, “From Jus ad Bellum to Jus ad Vim: Recalibrating Our Understanding of the Moral Use of Force,” Ethics & International Affairs , no.  (February ), pp. –.

 Robert Jervis, “On the Current Confrontation with Iran,” War on the Rocks, January , , warontherocks. com///on-the-current-confrontation-with-iran/.

 Ibid. See also Neil C. Rowe, “The Ethics of Cyberweapons in Warfare,” International Journal of Technoethics , no.  (January/March ), pp. –.

 Eric A. Heinze, “The Evolution of International Law in Light of the ‘Global War on Terror,’” Review of International Studies , no.  (July ), pp. –.

 See Ashley Deeks, “‘Unwilling or Unable’: Toward a Normative Framework for Extra-Territorial Self-Defense,” Virginia Journal of International Law , no.  (), pp. –.

 Michael P. Scharf, “How the War against ISIS Changed International Law,” Case Western Reserve Journal of International Law , no.  (), pp. –.

 Ibid., p. .

Abstract: Armed reprisals are the limited use of military force in response to unlawful actions per- petrated against states. Historically, reprisals provided a military remedy for states that had been wronged (often violently) by another state without having to resort to all-out war in order to coun- ter or deter such wrongful actions. While reprisals are broadly believed to have been outlawed by the UN Charter, states continue to routinely undertake such self-help measures. As part of the roundtable, “The Ethics of Limited Strikes,” this essay examines the doctrine of armed reprisals in light of recent instances of states using force “short of war” in this manner. We argue that the ban on reprisals has been largely ignored by states, and that recent attempts to apply the laws of armed conflict to the cyber domain (such as the Tallinn Manual) are further weakening this prohibition. We conclude that this is a potentially dangerous development that lowers the bar for resorting to military force, risking escalation and thereby further destabilizing the interna- tional system.

Keywords: reprisals, cyber operations, Tallinn Manual, self-defense, law of armed conflict

188 Eric A. Heinze and Rhiannon Neilsen

https://www.cambridge.org/core/terms. https://doi.org/10.1017/S0892679420000246 Downloaded from https://www.cambridge.org/core. IP address: 76.108.240.112, on 14 Jul 2020 at 15:47:16, subject to the Cambridge Core terms of use, available at

  • Limited Force and the Return of Reprisals in the Law of Armed Conflict
    • The Ban on Reprisals
    • Developments in the Rules and Attitudes regarding Hostile Cyber Operations
    • Conclusion: Dangers of the Return of Reprisals