This contribution seeks to identify and assess the frameworks used to describe and deter malicious cyber activity (MCA), and to highlight legal and operational challenges in tackling problems that arise where these frameworks overlap or intersect. To that end, we examine two different models, an “armed conflict model” and a “law enforcement model,” that have been used to address the threat posed by such activity. The terms cyber-war and cyber-crime, respectively, encapsulate each of these models — yet the line sep…