<![CDATA[The attribution of malicious cyber operations remains a major challenge to effective deterrence, international legal accountability and national cybersecurity. This study examines the attribution problem in cyber conflict and assesses its implications for deterrence, international law and Nigeria's cybersecurity response. The study adopted a qualitative documentary research design based on systematic analysis of scholarly literature, international legal instruments, policy documents, official cybersecurity reports and selected cyber incidents, including Stuxnet, NotPetya and SolarWinds. Documents were analysed thematically around technical attribution, legal attribution, political attribution, deterrence and Nigeria's institutional capacity. The findings indicate that cyber attribution is rarely a purely technical exercise because attackers can employ compromised infrastructure, proxy networks, false flags and other concealment techniques. Attribution uncertainty weakens deterrence by punishment, complicates the application of state responsibility and creates difficulties in determining appropriate responses under international law. The study further finds that Nigeria has developed important cybersecurity institutions and legal frameworks, but gaps remain in digital forensics, intelligence integration, inter-agency coordination, specialist expertise and international cooperation. The study concludes that Nigeria should adopt a national cyber-attribution framework integrating technical forensics, intelligence assessment and legal analysis while strengthening regional and international cooperation.]]>
