CyCon 2025: Responding to Ransomware Within the Boundaries of International Law

This paper explores the interaction between state obligations under international law and the domestic measures taken by states to counter the ransomware threat. On the one hand, states are required to take a proactive approach by taking steps to protect against ransomware operations. On the other hand, their freedom to take action against ransomware actors and related harms is not unlimited - obligations under international law, such as those emanating from state sovereignty, constrain state action in important ways. Understanding the boundaries of action compliant with international law is essential: a balance must be struck between pursuing effective ransomware responses and ensuring compliance with international law. Maintaining trust in the international legal system is contingent upon clearly signalled and honoured state commitments to international law - its substance, institutions and processes.**This publication arises from research funded by the John Fell Oxford University Press Research Fund (grant no 14333).