Abstract

This paper studies how increasingly complex cyber threats are being directed at our nation's critical infrastructure along with the changing military and legal doctrine that results. One aspect of this study focuses on the move away from "information-enabled warfare" and towards "strategic cyber warfare," where disrupting the operations of systemic functions will be a primary way to achieve grand strategic objectives. Using peer-reviewed literature as well as recent technical advisories the study finds a 40% increase in Internet-exposed devices with Industrial Control Systems (ICS) between 2024 and 2025 indicating a major change in how adversaries will target these systems; therefore, this paper also examines the meaning behind the principles of cyber deterrence, the implementation of the Tallinn Manual 2.0 in international law and national strategies of emerging digital powers such as India. The findings of this analysis point out that AI threat detection and zero trust architecture will be particularly effective in helping to mitigate risk. However, the encroachment of quantum computing leads to a pending crisis of cryptographic obsolescence. In the end, this paper concludes that despite improved defensive capabilities provided by technological advancements, the continued existence of the "attribution dilemma" and "offensive agenda" of cyberspace demonstrates an absolute need for an integrated approach involving technical hardening, international legal cooperation and meaningful public-private partnerships.

Keywords