From cyber denial to cyber punishment: What keeps Japanese warriors from active defense operations?

ABSTRACT I investigate reasons why Japan does not use “active-defense” cyber strategy for the purpose of cyberspace deterrence. I show that the reason has much to do with the passive nature of cyber strategy best characterized as “denial defense,” a strategic posture designed to deny attacks by defensive methods. I offer three reasons for this strategic choice. The first is the way the law works in Japan. The legal system, including the constitution, is the cornerstone of passive defense. All the reforms made in recent years to buttress Japan’s cyber policy have been within the existing legal framework. The second reason is the enormous technical constraints that Japan face on the use of cyber force. The final reason has much to do with the difficulty of sending credible threats to target audiences, reassuring the public , and controlling cyberspace escalation.