Market definitions of cyber war

Conference item

Definitions of war found in cyber insurance policies provide a novel window into the concept of cyber war. Changes in policy wording reflect shifting expectations surrounding technology and military strategy as mediated by market forces. In a recent legal case, an insurer refused to pay a property insurance claim by arguing the cause of the claim, a cyber attack, constituted a hostile or warlike action. We build a corpus of $56$ cyber insurance policies. Longitudinal analysis reveals distinct market trends. Some specialist cyber insurance providers ertr introducing policies without war clauses until as late as 2012. Recent years have seen these exclusions weakened as cyber insurance policies affirmatively cover "cyber terrorism'". This article explores the economic, strategic, and regulatory forces driving war clauses in cyber insurance policies.
We then discuss how these definitions contest state-formulated narratives around war by arguing that the insurance industry can influence discourses on offensive cyber operations. Insurance policies constitute private contracts that do not confer rights or responsibilities on third-parties, in this case states. Legal cases do, however, provide a symbolic platform to present evidence about offensive cyber operations and subject it to legal reasoning. Nevertheless, states maintain significant structural power in influencing what evidence can be presented in court and in controlling its production by intelligence agencies.

Authors: Woods, D; Weinkle, J

• Publication status: Accepted
• Peer review status: Reviewed (other)
• Host title: 2019 Conference on Cyber Norms: Dealing with Uncertainty
• Acceptance date: 2019-09-28
• Event title: 2019 Conference on Cyber Norms: Dealing with Uncertainty
• Event location: The Hague, Netherlands
• Event website: https://www.thehaguecybernorms.nl/
• Event start date: 2019-11-05
• Event end date: 2019-11-06
• Language: English
• Keywords: FFR