The consequences of the 2007 cyber-attacks in Estonia for the cyber defense of the North Atlantic Treaty Organization during the period 2007 to 2017

  • María Virginia Rueda Universidad Católica de Salta
Keywords: Ciberatacks- North Atlantic Treaty Organization- Ciberdefence Policy- Estonia- Summits

Abstract

This article analyzes how the cyberattacks that occurred in the Republic of Estonia in 2007 motivated NATO to create a cyber defense policy that could protect and defend both the Alliance and its member states.

The importance NATO placed on the creation, development, and implementation of a cyber defense policy was evident when the events unfolded, as it became clear that NATO did not have a policy in place to respond to these events. Although various summits had simply mentioned the danger of cyberattacks, there was no policy in practice.

Therefore, from then on, each of the decisions taken was specified in the texts issued by the Alliance Summits, as well as in other important documents also created during the period analyzed, that is, from 2007 to 2017.



Downloads

Download data is not yet available.

Author Biography

María Virginia Rueda, Universidad Católica de Salta

Licenciada en Relaciones Internacionales de la Universidad Católica de Salta (UCASAL). Miembro del Instituto de Relaciones Internacionales y Ciencias Políticas de la Universidad Católica de Salta.

References

Cooperative Cyber Defense Center of Excellence. (n.d.-a). About us. https://ccdcoe.org/about-us/

Cooperative Cyber Defense Center of Excellence. (n.d.-b). Exercises. https://ccdcoe.org/exercises/

Cooperative Cyber Defense Center of Excellence. (n.d.-c). North Atlantic Treaty Organisation. https://ccdcoe.org/organisations/nato/

Council on Foreign Relations. (n.d.). NATO’s Trident Juncture Exercises: What to know. https://www.cfr.org/in-brief/natos-trident-juncture-exercises-what-know

CybExer. (2020). CybExer red-teaming capabilities deployed at NATO CCDCOE Crossed Swords 2020 exercise. https://cybexer.com/news/crossed-swords-2020-exercise/

De Espona, R. J. (2018, mayo). Guerra híbrida y capacidades estratégicas de la OTAN: aportaciones de Lituania, Letonia y Estonia. Instituto Español de Estudios Estratégicos. https://www.ieee.es/Galerias/fichero/docs_opinion/2018/DIEEEO55-2018_GuerraHibrida_OTAN_Lit-Est-Let_RafaelJEspona.pdf

European Parliament. (n.d.). Defending against cyber-attacks. https://www.europarl.europa.eu/meetdocs/2009_2014/documents/sede/dv/sede150611natocyberattacks_/sede150611natocyberattacks_en.pdf

González de Cruz, C. (2008). Curso de metodología de la investigación científica para las ciencias sociales. Virtudes.

Healey, J., & Tothova, K. J. (2014, septiembre). NATO’s cyber capabilities: Yesterday, today and tomorrow. Atlantic Council. https://www.atlanticcouncil.org/wp-content/uploads/2014/08/NATOs_Cyber_Capabilities.pdf

Jordan, F., & Hallingstad, G. (n.d.). Towards multi-national capability development in cyber defence. Information and Security: An International Journal. https://procon.bg/system/files/27.09_Jordan.pdf

Joubert, V. (2012, mayo). Five years after Estonia’s cyber attacks: Lessons learned for NATO? Research Paper No. 76.

Lonely Planet. (n.d.). Historia de Estonia. https://www.lonelyplanet.es/europa/estonia/historia

MC0571 North Atlantic Treaty Organization. (2012). NATO cyber defence. Citado por Centro Superior de Estudios de la Defensa Nacional. Ministerio de Defensa, Madrid.

Moncayo, G. R., Vinuesa, R. E., & Gutierrez Posse, H. (1977). Derecho internacional público. ZAVALIA.

Montoya Pino, F. (n.d.). OTAN en Kosovo: La operación Fuerza Aliada vista desde los principios básicos del ius in bello. https://publicaciones.eafit.edu.co/index.php/ejil/article/view/386/382

Moreira, J. (2010). A implementação do conceito NATO Network-Enabled Capability (NNEC) em Portugal.

North Atlantic Treaty Organization. (n.d.-a). ¿Qué es la OTAN? https://www.nato.int/nato-welcome/index_es.html

North Atlantic Treaty Organization. (2008). Bucharest summit declaration. https://www.nato.int/cps/en/natolive/official_texts_8443.htm

North Atlantic Treaty Organization. (n.d.-b). Centres of Excellence. https://www.nato.int/cps/en/natolive/topics_68372.htm

North Atlantic Treaty Organization. (2012). Chicago summit declaration. https://www.nato.int/cps/en/natolive/official_texts_87593.htm#deterrence

North Atlantic Treaty Organization. (2022). Cyber defence. https://www.nato.int/cps/en/natohq/topics_78170.htm

North Atlantic Treaty Organization. (2009). Declaration on Alliance Security. https://www.nato.int/cps/en/natohq/news_52838.htm

North Atlantic Treaty Organization. (2022). Kosovo Air Campaign (March–June 1999). https://www.nato.int/cps/en/natohq/topics_49602.htm

North Atlantic Treaty Organization. (2010, noviembre 20). Lisbon summit declaration. https://www.nato.int/cps/en/natolive/official_texts_68828.htm

North Atlantic Treaty Organization. (2016). NATO and the European Union enhance cyber defence cooperation. https://www.nato.int/cps/en/natohq/news_127836.htm

North Atlantic Treaty Organization. (2021, abril). Nato Cyber Defence. https://www.nato.int/nato_static_fl2014/assets/pdf/2021/4/pdf/2104-factsheet-cyber-defence-en.pdf

North Atlantic Treaty Organization. (n.d.-c). NATO Defence Ministers adopt new cyber defence policy. https://www.nato.int/cps/en/natohq/news_75195.htm

North Atlantic Treaty Organization. (2015). NATO Network Enabled Capability (archived). https://www.nato.int/cps/en/natolive/topics_54644.htm

North Atlantic Treaty Organization. (n.d.-d). NATO Rapid Reaction Team to fight cyber attack. https://www.nato.int/cps/en/natolive/news_85161.htm

North Atlantic Treaty Organization. (2014). NATO’s cyber capabilities: Yesterday, today and tomorrow. https://www.atlanticcouncil.org/wp-content/uploads/2014/08/NATOs_Cyber_Capabilities.pdf

North Atlantic Treaty Organization. (2002). Prague summit declaration. https://www.nato.int/cps/en/natohq/official_texts_19552.htm

North Atlantic Treaty Organization. (2009). Strasbourg/Kehl summit declaration. https://www.nato.int/cps/en/natolive/news_52837.htm

North Atlantic Treaty Organization. (n.d.-e). Strategic Concepts. https://www.nato.int/cps/en/natohq/topics_56626.htm

North Atlantic Treaty Organization. (2012). Summit declaration on defence capabilities: Toward NATO Forces 2020. https://www.nato.int/cps/en/natohq/official_texts_87594.htm?mode=pressrelease

North Atlantic Treaty Organization. (2014). Wales summit declaration. https://www.nato.int/cps/en/natohq/official_texts_112964.htm#cyber

North Atlantic Treaty Organization. (2016). Warsaw summit communiqué. https://www.nato.int/cps/en/natohq/official_texts_133169.htm

North Atlantic Treaty Organization. (2010, noviembre). Strategic concept for the defence and security of the members of the North Atlantic Treaty Organization.

Pessino, M. (n.d.). Las políticas en ciberseguridad de la Organización del Tratado del Atlántico Norte (OTAN) período 2008–2013.

Real Instituto El Cano. (2014, febrero). La OTAN y la ciberdefensa. https://www.realinstitutoelcano.org/blog/la-otan-y-la-ciberdefensa/

Schmitt, M. N. (Ed.). (2013). The international law applicable to cyber warfare. Cambridge University Press.

Verdes-Montenegro Escanez, F. J. (2015). Securitización: Agendas de investigación abiertas para el estudio de la seguridad. Relaciones Internacionales, (29), 111–131. https://revistas.uam.es/relacionesinternacionales/article/view/5273

Published
2025-11-25
How to Cite
Rueda, M. V. (2025). The consequences of the 2007 cyber-attacks in Estonia for the cyber defense of the North Atlantic Treaty Organization during the period 2007 to 2017. Themis, 2(2), 75-94. Retrieved from https://revistas.ucasal.edu.ar/index.php/TH/article/view/782
Section
Trabajos Finales