1. This paper aims to provide a theoretical discussion for the establishment of a cyber deterrence strategy. There is a debate about whether the concept of deterrence developed in the physical domain, with a focus on nuclear strategy, can be directly ...
1. This paper aims to provide a theoretical discussion for the establishment of a cyber deterrence strategy. There is a debate about whether the concept of deterrence developed in the physical domain, with a focus on nuclear strategy, can be directly applied to cyberspace or a unique concept specific to cyberspace is needed. Beyond this debate, there is a need to specify the requirements and considerations for deterring cyber threats. To achieve this, this study explores various discussions on the strategic characteristics of cyberspace, methods of conducting offense and defense, the concept and evolution of cyber deterrence, its targets, content, and methods. It presents three questions: "From whom, what, and how to deter?" and uses each of these questions to establish the requirements and considerations for cyber deterrence, which include "attribution" to the purpose and actor of the threat, "proportionality" with red lines and signaling, and the "effectiveness" of resistance, retribution, and resilience.