{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T14:09:03Z","timestamp":1779890943536,"version":"3.53.1"},"reference-count":97,"publisher":"Oxford University Press (OUP)","issue":"1","license":[{"start":{"date-parts":[[2020,9,14]],"date-time":"2020-09-14T00:00:00Z","timestamp":1600041600000},"content-version":"vor","delay-in-days":257,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,1,1]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>Attribution is central to the debate on how to respond to cyber intrusions. The policy challenge is increasingly moving from identifying who is behind a cyber intrusion to finding the adequate policy response, including whether to publicly attribute. The article examines the use of public attribution as a political strategy for attaining specific political effects beyond the dyadic attacker\u2013victim relationship, including shaping the operational and normative environment of cyber operations, with the potential to exert an independent deterrent effect. My analysis unfolds in three parts. The first part introduces two core concepts\u2014sense-making and meaning-making\u2014to capture different parts of the attribution process. I then introduce a theoretical understanding of public attribution drawing on the literature on revealing covert activity and argue that public attribution can serve the function of defining a particular interaction order, i.e. shape the rules of the \u2018game\u2019. In part two and three I discuss two empirical examples of both concepts. I bring to the fore three observations: First, some states have shifted their policy responses from dealing with individual cyber intrusions to responding in a broader political framework of relations with a specific adversary leading to campaign-like responses. Second, the political decision whether to attribute publicly is not only a signal to the adversary, but also aims at shaping the future political and normative operational environment. Third, such norm shaping has the potential to exert an independent\u2014though limited\u2014deterrent effect, particularly on potential adversaries. The analysis demonstrates the importance of the meaning-making process to understanding the politics of attribution and the rewards of theoretically integrating it into the politics of secrecy and exposure of covert activities of states.<\/jats:p>","DOI":"10.1093\/cybsec\/tyaa012","type":"journal-article","created":{"date-parts":[[2020,9,14]],"date-time":"2020-09-14T16:24:13Z","timestamp":1600100653000},"source":"Crossref","is-referenced-by-count":57,"title":["Public attribution of cyber intrusions"],"prefix":"10.1093","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0290-667X","authenticated-orcid":false,"given":"Florian J","family":"Egloff","sequence":"first","affiliation":[{"name":"Center for Security Studies (CSS), ETH Z\u00fcrich, Haldeneggsteig 4, IFW, 8092 Z\u00fcrich, Switzerland"},{"name":"Centre for Technology & Global Affairs, Department of Politics and International Relations, University of Oxford, Manor Road, Oxford OX1 3UQ, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"286","published-online":{"date-parts":[[2020,9,14]]},"reference":[{"key":"2020091412240642800_tyaa012-B1","doi-asserted-by":"crossref","first-page":"484","DOI":"10.1145\/42411.42412","volume":"31","author":"Stoll","year":"1988","journal-title":"Commun ACM"},{"key":"2020091412240642800_tyaa012-B2","first-page":"25","volume-title":"Proceedings of a Workshop on Deterring Cyberattacks: Informing Strategies and Developing Options for US Policy","author":"Clark","year":"2010"},{"key":"2020091412240642800_tyaa012-B3","first-page":"41","volume-title":"Proceedings of a Workshop on Deterring Cyberattacks: Informing Strategies and Developing Options for US Policy","author":"Boebert","year":"2010"},{"key":"2020091412240642800_tyaa012-B4","first-page":"55","volume-title":"Proceedings of a Workshop on Deterring Cyberattacks: Informing Strategies and Developing Options for US Policy","author":"Morgan","year":"2010"},{"key":"2020091412240642800_tyaa012-B5","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1080\/01402390.2012.663252","volume":"35","author":"Liff","year":"2012","journal-title":"J Strat Stud"},{"key":"2020091412240642800_tyaa012-B6","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1162\/ISEC_a_00138","volume":"38","author":"Kello","year":"2013","journal-title":"Int Security"},{"key":"2020091412240642800_tyaa012-B7","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1080\/01402390.2014.977382","volume":"38","author":"Rid","year":"2015","journal-title":"J Strat Stud"},{"key":"2020091412240642800_tyaa012-B8","first-page":"53","volume":"1","author":"Lindsay","year":"2015","journal-title":"J Cybersecurity"},{"key":"2020091412240642800_tyaa012-B9","first-page":"322","volume":"17","author":"Lupovici","year":"2016","journal-title":"Int Stud Perspect"},{"key":"2020091412240642800_tyaa012-B10","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1080\/01402390.2015.1115975","volume":"40","author":"Tor","year":"2017","journal-title":"J Strat Stud"},{"key":"2020091412240642800_tyaa012-B11","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1162\/ISEC_a_00266","volume":"41","author":"Nye","year":"2017","journal-title":"Int Security"},{"key":"2020091412240642800_tyaa012-B12","volume-title":"Auf Der Spur Der Hacker Wie Man Die T\u00e4ter Hinter Der Computer-Spionage Enttarnt","author":"Steffens","year":"2018"},{"key":"2020091412240642800_tyaa012-B13","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1017\/S0260210598001028","volume":"24","author":"Wendt","year":"1998","journal-title":"Rev Int Stud"},{"key":"2020091412240642800_tyaa012-B14","volume-title":"Theories of History","author":"Dray","year":"1959"},{"key":"2020091412240642800_tyaa012-B15","author":"Guitton","year":"2014"},{"key":"2020091412240642800_tyaa012-B16","first-page":"75","volume":"70","author":"Lin","year":"2016","journal-title":"J Int Affairs"},{"key":"2020091412240642800_tyaa012-B17","year":"2018"},{"key":"2020091412240642800_tyaa012-B18"},{"key":"2020091412240642800_tyaa012-B19","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511490880","volume-title":"The Politics of Crisis Management: Public Leadership under Pressure","author":"Boin","year":"2005"},{"key":"2020091412240642800_tyaa012-B20","author":"Egloff","year":"2018"},{"key":"2020091412240642800_tyaa012-B21","doi-asserted-by":"crossref","first-page":"103","DOI":"10.1017\/S0020818315000284","volume":"70","author":"Carson","year":"2016","journal-title":"Int Organ"},{"key":"2020091412240642800_tyaa012-B22","volume-title":"Secret Wars: Covert Conflict in International Politics","author":"Carson","year":"2018"},{"key":"2020091412240642800_tyaa012-B23","first-page":"122","volume":"13","author":"Borghard","year":"2019"},{"key":"2020091412240642800_tyaa012-B24","doi-asserted-by":"crossref","DOI":"10.1093\/oso\/9780190618094.001.0001","volume-title":"Cyber Strategy: The Evolving Character of Power and Coercion","author":"Valeriano","year":"2018"},{"key":"2020091412240642800_tyaa012-B25","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1016\/j.orbis.2017.05.003","volume":"61","author":"Fischerkeller","year":"2017","journal-title":"Orbis"},{"key":"2020091412240642800_tyaa012-B26","volume-title":"GCHQ: The Uncensored Story of Britain's Most Secret Intelligence Agency","author":"Aldrich","year":"2011"},{"key":"2020091412240642800_tyaa012-B27","volume-title":"The Shadow Factory: The Ultra-Secret NSA from 9\/11 to the Eavesdropping on America","author":"Bamford","year":"2009","edition":"1st edn"},{"key":"2020091412240642800_tyaa012-B28","doi-asserted-by":"crossref","first-page":"781","DOI":"10.1080\/02684527.2012.708530","volume":"27","author":"Warner","year":"2012","journal-title":"Intell Nat Security"},{"key":"2020091412240642800_tyaa012-B29","volume-title":"The Oxford Handbook of Cybersecurity","author":"Lindsay"},{"key":"2020091412240642800_tyaa012-B30","author":"Rovner","year":"2019"},{"key":"2020091412240642800_tyaa012-B31","author":"Guerrero-Saade","year":"2015"},{"key":"2020091412240642800_tyaa012-B32","author":"Libicki","year":"2017"},{"key":"2020091412240642800_tyaa012-B33","doi-asserted-by":"crossref","first-page":"73","DOI":"10.1080\/00396338.2018.1542804","volume":"60","author":"Boeke","year":"2018","journal-title":"Survival"},{"key":"2020091412240642800_tyaa012-B34","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1080\/13523260.2019.1677389","volume":"41","author":"Georgieva","year":"2020","journal-title":"Contemp Security Policy"},{"key":"2020091412240642800_tyaa012-B35","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1017\/S0020818308080090","volume":"62","author":"Pouliot","year":"2008","journal-title":"Int Organ"},{"key":"2020091412240642800_tyaa012-B36","first-page":"1","volume":"14","author":"Finnemore","year":"2019","journal-title":"Temple University Legal Studies Research Paper"},{"key":"2020091412240642800_tyaa012-B37","author":"Broeders","year":"2019"},{"key":"2020091412240642800_tyaa012-B38","volume-title":"Cyber Espionage and International Law","author":"Buchan","year":"2019"},{"key":"2020091412240642800_tyaa012-B39","doi-asserted-by":"crossref","first-page":"627","DOI":"10.1017\/S0020818318000176","volume":"72","author":"Carnegie","year":"2018","journal-title":"Int Organ"},{"key":"2020091412240642800_tyaa012-B40","author":"Fischerkeller","year":"2018"},{"key":"2020091412240642800_tyaa012-B41","doi-asserted-by":"crossref","first-page":"269","DOI":"10.1111\/ajps.12426","volume":"63","author":"Carnegie","year":"2019","journal-title":"Am J Polit Sci"},{"key":"2020091412240642800_tyaa012-B42","doi-asserted-by":"crossref","first-page":"402","DOI":"10.1093\/jogss\/ogy022","volume":"3","author":"Poznansky","year":"2018","journal-title":"J Global Security Stud"},{"key":"2020091412240642800_tyaa012-B43","doi-asserted-by":"crossref","first-page":"477","DOI":"10.1093\/ia\/iiy067","volume":"94","author":"Cormac","year":"2018","journal-title":"Int Affairs"},{"key":"2020091412240642800_tyaa012-B44","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1017\/S0892679418000618","volume":"32","author":"Deibert","year":"2018","journal-title":"Ethics & Int Affairs"},{"key":"2020091412240642800_tyaa012-B45","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1017\/aju.2019.33","volume":"113","author":"Eichensehr","year":"2019","journal-title":"AJIL Unbound"},{"key":"2020091412240642800_tyaa012-B46","first-page":"1","volume":"244","author":"Egloff","year":"2019","journal-title":"CSS Anal Security Policy"},{"key":"2020091412240642800_tyaa012-B47","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1080\/13523260.2019.1677324","volume":"41","author":"Egloff","year":"2020","journal-title":"Contemp Security Policy"},{"key":"2020091412240642800_tyaa012-B48","author":"Grindal"},{"key":"2020091412240642800_tyaa012-B49","author":"Satter","year":"2017"},{"key":"2020091412240642800_tyaa012-B50","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1109\/MC.2017.74","volume":"50","author":"Berghel","year":"2017","journal-title":"Computer"},{"key":"2020091412240642800_tyaa012-B51","author":"Guerrero-Saade","year":"2017"},{"key":"2020091412240642800_tyaa012-B52","volume-title":"Inside the Cell: The Dark Side of Forensic DNA","author":"Murphy","year":"2015"},{"key":"2020091412240642800_tyaa012-B53"},{"key":"2020091412240642800_tyaa012-B54","year":"2018"},{"key":"2020091412240642800_tyaa012-B55","year":"2018"},{"key":"2020091412240642800_tyaa012-B56","year":"2016"},{"key":"2020091412240642800_tyaa012-B57","year":"2017"},{"key":"2020091412240642800_tyaa012-B58"},{"key":"2020091412240642800_tyaa012-B59"},{"key":"2020091412240642800_tyaa012-B60","year":"2016"},{"key":"2020091412240642800_tyaa012-B61","year":"2015"},{"key":"2020091412240642800_tyaa012-B62","first-page":"19700","author":"Merkel","year":"2020"},{"key":"2020091412240642800_tyaa012-B63","year":"2016"},{"key":"2020091412240642800_tyaa012-B64","author":"Rid","year":"2017"},{"key":"2020091412240642800_tyaa012-B65","year":"2016"},{"key":"2020091412240642800_tyaa012-B66","doi-asserted-by":"crossref","first-page":"954","DOI":"10.1080\/02684527.2018.1479345","volume":"33","author":"Gioe","year":"2018","journal-title":"Intell Natl Security"},{"key":"2020091412240642800_tyaa012-B67","year":"2017"},{"key":"2020091412240642800_tyaa012-B68"},{"key":"2020091412240642800_tyaa012-B69"},{"key":"2020091412240642800_tyaa012-B70","year":"2017"},{"key":"2020091412240642800_tyaa012-B71","first-page":"37","volume":"15","author":"Cavelty","year":"2019","journal-title":"St Antony's Int Rev"},{"key":"2020091412240642800_tyaa012-B72","year":"2018"},{"key":"2020091412240642800_tyaa012-B73"},{"key":"2020091412240642800_tyaa012-B74","year":"2018"},{"key":"2020091412240642800_tyaa012-B75","volume-title":"The Perfect Weapon: War, Sabotage, and Fear in the Cyber Age","author":"Sanger","year":"2018"},{"key":"2020091412240642800_tyaa012-B76","year":"2016"},{"key":"2020091412240642800_tyaa012-B77","doi-asserted-by":"crossref","DOI":"10.1093\/acprof:oso\/9780190665012.001.0001","volume-title":"The Cybersecurity Dilemma: Hacking, Trust and Fear between Nations","author":"Buchanan","year":"2017"},{"key":"2020091412240642800_tyaa012-B78","year":"2017"},{"key":"2020091412240642800_tyaa012-B79","author":"Mehta","year":"2017"},{"key":"2020091412240642800_tyaa012-B80","author":"Wright","year":"2018"},{"key":"2020091412240642800_tyaa012-B81","year":"2018"},{"key":"2020091412240642800_tyaa012-B82","first-page":"169","volume":"35","author":"Egan","year":"2017","journal-title":"Berkeley J Int Law"},{"key":"2020091412240642800_tyaa012-B83","year":"2018"},{"key":"2020091412240642800_tyaa012-B84"},{"key":"2020091412240642800_tyaa012-B85","doi-asserted-by":"crossref","first-page":"425","DOI":"10.1017\/S0002930000016894","volume":"110","author":"Finnemore","year":"2016","journal-title":"Am J Int Law"},{"key":"2020091412240642800_tyaa012-B86","doi-asserted-by":"crossref","first-page":"887","DOI":"10.1162\/002081898550789","volume":"52","author":"Finnemore","year":"1998","journal-title":"Int Organ"},{"key":"2020091412240642800_tyaa012-B87","volume":"67","author":"Eichensehr","journal-title":"UCLA Law Rev"},{"key":"2020091412240642800_tyaa012-B88","author":"Roguski","year":"2020"},{"key":"2020091412240642800_tyaa012-B89","author":"Smeets","year":"2017"},{"key":"2020091412240642800_tyaa012-B90","volume-title":"Facts and Fears: Hard Truths from a Life in Intelligence","author":"Clapper","year":"2018"},{"key":"2020091412240642800_tyaa012-B91","author":"Giles","year":"2019"},{"key":"2020091412240642800_tyaa012-B92","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1177\/0022002797041001004","volume":"41","author":"Fearon","year":"1997","journal-title":"J Conflict Res"},{"key":"2020091412240642800_tyaa012-B93","author":"Baram","year":"2019"},{"key":"2020091412240642800_tyaa012-B94","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/MSEC.2019.2938134","volume":"18","author":"Grotto","year":"2020","journal-title":"IEEE Security & Privacy"},{"key":"2020091412240642800_tyaa012-B95","year":"2016"},{"key":"2020091412240642800_tyaa012-B96","author":"Raiu","year":"2018"},{"key":"2020091412240642800_tyaa012-B97","author":"Bartholomew","year":"2016"}],"container-title":["Journal of Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/cybersecurity\/article-pdf\/6\/1\/tyaa012\/33746009\/tyaa012.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/academic.oup.com\/cybersecurity\/article-pdf\/6\/1\/tyaa012\/33746009\/tyaa012.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,9,14]],"date-time":"2020-09-14T16:24:29Z","timestamp":1600100669000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/cybersecurity\/article\/doi\/10.1093\/cybsec\/tyaa012\/5905454"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,1,1]]},"references-count":97,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,1,1]]}},"URL":"https:\/\/doi.org\/10.1093\/cybsec\/tyaa012","relation":{},"ISSN":["2057-2085","2057-2093"],"issn-type":[{"value":"2057-2085","type":"print"},{"value":"2057-2093","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2020]]},"published":{"date-parts":[[2020,1,1]]},"article-number":"tyaa012"}}