Deterrence in the Grey Zone

Traditional deterrence theory, developed primarily around nuclear and conventional military threats, struggles to account for the ambiguous, incremental, and often deniable nature of grey-zone competition between state and state-aligned actors. This article develops a revised framework for understanding escalation thresholds in cyber-physical conflict, arguing that the binary logic of classical deterrence—premised on clear signaling and identifiable red lines—breaks down when actions occur below the threshold of armed conflict and attribution remains contested. Drawing on case studies of infrastructure disruption incidents between 2019 and 2024, the article identifies three mechanisms through which grey-zone actors calibrate risk: plausible deniability, incremental probing, and proxy delegation. It argues that effective deterrence in this domain requires shifting from threshold-based signaling toward resilience-based deterrence, in which the credible capacity to absorb and recover from disruption becomes a more stable deterrent than retaliatory threat alone. The article concludes by outlining implications for alliance coordination and international norm-building in cyberspace.