Grey Zone Warfare

Grey zone warfare (also called grey zone conflict or ambiguous warfare) refers to a spectrum of state-sponsored coercive activities that deliberately occupy the ambiguous space between routine peacetime competition and overt armed conflict. These activities are calibrated to achieve strategic objectives — territorial gain, political destabilisation, economic leverage, or psychological intimidation — while remaining below the threshold that would trigger a conventional military response or invoke formal alliance obligations (such as NATO's Article 5 collective defence clause). The defining characteristic of grey zone operations is deliberate ambiguity: the aggressor denies state attribution, uses non-state proxies or deniable instruments, and maintains plausible deniability to prevent the adversary from justifying a conventional military counter-response. Classic grey zone tools include: cyber operations (targeting critical infrastructure, electoral systems, financial networks); information warfare and disinformation campaigns; economic coercion (trade embargoes, debt traps, energy cut-offs); proxy warfare (supporting insurgent or terrorist groups); lawfare (using international law as a weapon — e.g., South China Sea arbitration proceedings to legitimise territorial claims); 'salami slicing' (incremental territorial encroachment too small to justify military response); and use of paramilitary or coast guard forces rather than uniformed military. The term gained currency in Western strategic literature after Russia's annexation of Crimea in 2014 (using 'little green men' — unmarked Russian special forces), China's island-building in the South China Sea, and Iran's use of proxy Houthi forces in Yemen. For India, grey zone threats originate primarily from Pakistan (state-sponsored terrorism, cross-border infiltration, information operations targeting Kashmir) and China (salami slicing in Ladakh/Arunachal Pradesh, economic coercion through CPEC, cyber attacks on Indian infrastructure).

• 1 Operates below the threshold of conventional war — designed to avoid triggering formal military response or alliance obligations.
• 2 Key tools: cyber attacks, disinformation, proxy warfare, economic coercion, lawfare, paramilitary forces, salami slicing.
• 3 China's salami slicing in Ladakh: incremental incursions (Depsang, Demchok, Galwan) — each individually insufficient to justify war, collectively altering facts on ground.
• 4 Pakistan's grey zone toolkit: cross-border terrorism (26/11 Mumbai), ISI-supported insurgency in Kashmir, disinformation campaigns on social media targeting Indian domestic politics.
• 5 Russian grey zone operations: 'little green men' in Crimea (2014); Wagner Group in Africa, Syria, Libya; NotPetya cyber attack on Ukraine (2017) — costliest cyber attack in history ($10 billion damage).
• 6 India's response mechanisms: National Cyber Security Policy, Integrated Theatre Commands (under development), Defence Cyber Agency (DCA), Defence Space Agency.
• 7 DOCA (Department of Cyber and Information Security): India's institutional response — coordinates across RAW, IB, NTRO, and military intelligence.

The Galwan Valley clash of June 2020, while resulting in military casualties, was preceded by months of classic grey zone activity by China — gradual road and infrastructure construction in disputed areas, deployment of civilian herders and construction workers as advance parties, and denial of any incursion through diplomatic channels. China's use of PLA logistics corps rather than combat troops in the initial phases, and the use of bladed weapons to avoid gunfire escalation, is a textbook grey zone operation — escalating the territorial claim while maintaining deniability and keeping the conflict below the threshold of a declared military confrontation.