United States, International Law in Cyberspace (18 September 2012)

States should undertake a legal review of weapons, including those that employ a cyber capability. Such a review should entail an analysis, for example, of whether a particular capability would be inherently indiscriminate, i.e., that it could not be used consistent with the principles of distinction and proportionality. The U.S. Government undertakes at least two stages of legal review of the use of weapons in the context of armed conflict: first, an evaluation of new weapons to determine whether their use would be per se prohibited by the law of war; and second, specific operations employing weapons are always reviewed to ensure that each particular operation is also compliant with the law of war.

Harold Hongju Koh (Legal Advisor, US Department of State), “International Law in Cyberspace” (USCYBERCOM Inter-Agency Legal Conference, Ft Meade, MD, 18 September 2012)