Cyber War Will Not Take Place

Thomas Rid's provocation — stated in the title and sustained across 256 pages of rigorous argument — is that "cyber war" as commonly understood does not exist and has never taken place. His argument turns on Clausewitz's definition of war as a violent, instrumental, and political act: no cyber operation to date has met all three criteria simultaneously. What states actually do in cyberspace, Rid argues, falls into three categories: sabotage, espionage, and subversion. Each is historically continuous with pre-digital practice; none constitutes war in any meaningful sense.

This matters enormously for practitioners, because the inflation of "cyber war" as a concept serves the interests of those who want to militarise responses to what are fundamentally intelligence and subversion challenges. Cyber War Will Not Take Place is a corrective — insisting on analytical precision about what cyber operations actually are, what they can achieve, and what they cannot. The book has aged well: Rid's taxonomy of sabotage, espionage, and subversion has become standard in the field, and his insistence on the primacy of the subversion category — which encompasses what we now call influence operations — was prescient. Essential reading for anyone trying to think clearly about the threat landscape.