Information warfare

Information warfare is the strategic use of information and communication technology (ICT) to gain a competitive advantage. It is distinct from cyberwarfare, which focuses on attacking computers and software systems. Information warfare targets the information that a person or group trusts. The goal is to manipulate that information without the target knowing. This leads the target to make decisions that favor the attacker rather than themselves. Because these actions are often subtle, it is difficult to define when such a conflict begins or ends.

This type of warfare involves several specific mechanisms. One method is the collection of tactical information to understand an opponent. Another is information assurance, which ensures that one's own data remains valid and accurate. Attackers may also spread propaganda or disinformation to manipulate the public or demoralize an enemy. They might also try to deny an opponent the chance to collect useful information. These methods are closely linked to psychological warfare, as they aim to influence how people think and feel.

There are many ways to carry out these operations in the modern world. Communication channels like television, radio, and the internet can be jammed to disrupt messages. They can also be hijacked to spread disinformation campaigns. Digital networks can be disabled or "spoofed," which means an attacker pretends to be a trusted source. In modern times, this often happens within online social communities. Even financial systems are at risk, as stock exchange transactions can be sabotaged through electronic intervention or by leaking sensitive data.

The history of this concept shows how much technology has changed warfare. The term has existed since at least 1970. That year, a reporter named Dale Minor published a book about news manipulation during the Vietnam War. In 1976, an engineer named Thomas P. Rona used the term in a monograph for the Boeing Company. Since the 1980s, the United States Air Force has maintained Information Warfare Squadrons. Their mission now includes fighting in air, space, and cyberspace. Using software to disable targets can be safer than using explosives. It also allows networks to be quickly re-enabled once a territory is occupied.

Real-world examples highlight the scale and impact of these tactics. During the Gulf War, these techniques were used against Iraqi communication networks. In January 1999, a coordinated attack called Moonlight Maze hit U.S. Air Intelligence computers. This attack was linked to a Russian mainframe, but it was hard to prove due to non-attribution. Non-attribution is the principle that an online identity might not prove a person's real-world identity. In 2022, Ukrainian forces used these ideas to eavesdrop on Russian communications. Russia also used the internet to spread a narrative to build support before its invasion of Ukraine.

Information warfare also appears in political and social settings. Russia has been described as interfering in the 2016 and 2024 United States elections. Reports suggest Russia also used disinformation campaigns during the 2024 U.S. elections. In 2024, reports stated that China and Russia promoted certain influencers to manipulate British public opinion. In the United States, a propaganda campaign regarding the Sinovac COVID-19 vaccine occurred between 2020 and mid-2021. This campaign targeted people in the Philippines using social media. The U.S. military contractor General Dynamics IT received $493 million for its role in this project.

This field raises serious legal and ethical concerns. Traditional "just war theory" often fails to account for these new methods. First, the risk for an attacker is much lower in information warfare than in physical war. This makes it easier for governments or criminal groups to launch attacks. Second, because ICT is everywhere, civilian technologies are often at risk. This makes it difficult to protect civilian infrastructure and raises questions about the right to privacy. Finally, it is hard to hold anyone accountable. Because cyberattacks are often impossible to trace, it is difficult to determine who is responsible for an event.