International Law and State-Sponsored Cyber Operations: Attribution, Responsibility, and Implications for Nigeria

This research analyses the international law framework governing state-sponsored cyber operations, focusing on rules of attribution and state responsibility and drawing implications for Nigeria's legal position both as a potential target of and as a state with developing cyber capabilities. Cyber operations by state actors constitute one of the most legally contested areas in contemporary international law, with disagreements persisting about the application of the law of state responsibility, sovereignty, and the prohibition of the use of force to hostile cyber acts. Using an analytical legal methodology, the study examines the Tallinn Manual 2.0's guidance on international law applicable to cyber operations, UN Group of Governmental Experts (GGE) reports on responsible state behaviour in cyberspace, and selected state practice on attribution. It applies this framework to Nigeria's position, analysing Nigeria's cyber threat environment, the legal implications of attributing cyber attacks to state actors for diplomatic and security responses, and the applicability of countermeasures under international law. The paper fills a gap in the literature on African states' engagement with international cyber law, which has focused heavily on Western and Asian state practice. It makes an original contribution by developing a tailored attribution decision framework for African states with limited cyber intelligence capacity. Findings indicate that Nigeria currently lacks a coherent international cyber law policy and recommends the development of a national cyberspace strategy incorporating legal positions on state responsibility. Keywords: cyber operations, state responsibility, attribution, Tallinn Manual, Nigeria.