Legal protection of critical infrastructures in cyberspace

2026-5-8
Pur, Ahmet Semih
The increasing integration of cyberspace with critical infrastructures, which are essential to the well-being and healthy functioning of society and the State, has rendered them highly vulnerable to cyber threats. This thesis examines the legal protection of critical infrastructures in cyberspace from an international law perspective. It primarily focuses on how existing rules of international law can be interpreted and applied to address cyber operations targeting critical infrastructures. In doing so, this thesis also analyzes their applicability and contested aspects of their practical application. This thesis first examines State jurisdiction in cyberspace within the framework of relevant international legal rules. It then explores ongoing discussions among States regarding the applicability of international law in cyberspace and development of non-binding cyber norms through international processes. Later, this thesis analyzes the applicability of relevant rules of international law during both peacetime and armed conflict, with a focus on key rules such as sovereignty, non-intervention, due diligence, the prohibition of the use of force and the rules of international humanitarian law. Based on this legal analysis, this study demonstrates how these international legal rules may contribute to protect critical infrastructures in cyberspace. This thesis argues that, despite ongoing interpretative differences and practical challenges, international law continues to apply in cyberspace and provides an important legal framework for protecting critical infrastructures against cyber operations.
Citation Formats
A. S. Pur, “Legal protection of critical infrastructures in cyberspace,” M.S. - Master of Science, Middle East Technical University, 2026.