Except it wasn't.

When that National Security Council staffer - Thomas Reed - published his memoirs, journalists and experts set about testing his claims. They found the allegations were unverifiable. There were no media accounts that could confirm the explosion, even though accidents and explosions in the former Soviet Union were frequently reported in Western media at the time. Declassified internal Soviet accounts of computer sabotage during the height of the Cold War also failed to report any such activities. Even the former head of the KGB refuted Reed's report, suggesting he might have mistaken an explosion that happened earlier that year in the same region of Siberia. (In that incident, the thawing tundra had caused pipes to shift and fracture in the ground.) Even if such a lack of coverage could be chalked up to Soviet-era subterfuge and dissembling, technology experts claimed that such a ''logic bomb'' would have been almost impossible to hide in the basic software of 1982. All told, the preponderance of evidence combines to suggest that the so-called ''first cyber-war attack'' was a non-event.

This story of the Siberian pipeline ''attack that wasn't'' is among the examples Thomas Rid uses in Cyber War Will Not Take Place to demonstrate that cyber war, at least as it has come to be publicly discussed, has not, and will not, happen. Rid, a reader in war studies at King's College London, has emerged in the past few years as a sceptic in the increasingly hyperbolic public debate about cyber warfare and cyber security. And there has been plenty of hyperbole: a number of top US officials - including former Whitehouse ''cyber tsar'' Richard Clarke, former CIA director Leon Panetta, and the director of national intelligence for the Bush administration, Mike McConnell - have spoken of impending cyber-war disasters. Panetta has warned of a ''cyber Pearl Harbour'' and McConnell has prophesied a ''cyber equivalent of the World Trade Centre attack''. Calls for a ''cyber Geneva convention'' have abounded, and mass-media outlets have labelled computer viruses such as Stuxnet the ''Hiroshima of cyber war''.

Amid this commentary, Rid questions the prevailing doomsday analogies and comes to the firm conclusion that ''cyber war has never happened in the past, it does not occur in the present, and it is highly unlikely that it will disturb our future''. He locates his assessment of the threat within an analysis of the nature of violence and warfare. Conflict, Rid says, must fulfil certain criteria in order to be classified as war. Drawing on Carl von Clausewitz's oft-quoted characterisation of war as ''an act of force to compel the enemy to do your will'', he argues that any war must involve violence of a political nature in order to compel another party to comply with a set of demands. Hostile acts in cyberspace, he argues, frequently fall short of von Clausewitz's three-part test: there is neither violence, nor political nexus, nor clear ends being sought. And so, he writes, ''the 'war' in 'cyber war' ultimately has more in common with the 'war' on obesity than World War II - it has more metaphorical than descriptive value''.

Labelling cyber attacks as cyber warfare is appealing - it's politically galvanising and emotive, and gives rhetorical force to what otherwise might be dismissed as troublemaking, a nuisance or ''mere'' criminality. Cyber warfare is a growth industry - most major military powers have dedicated cyber-security agencies reportedly developing offensive and defensive cyber-capabilities, preparing to fight in what's been termed the ''fifth domain of warfare'', alongside land, sea, air and space. NATO has its own Cooperative Cyber Defence Centre of Excellence in Estonia, which is tasked with developing cyber-defence capabilities for NATO governments and was integral to creating the recently released Tallinn Manual on the International Law Applicable to Cyber Warfare. The US has CYBERCOM - the US Cyber Command - covering cyber operations in the army, navy, air force and marines; the creation of CYBERCOM is reported to have spurred the creation of similar military agencies in Britain, China and South Korea. Indeed, even Australia has its own inter-agency Cyber Security Operations Centre, which includes personnel from the armed forces, ASIO and the federal police, and has recently announced the creation of a new cyber security centre.

As Rid argues throughout Cyber War Will Not Take Place, the rhetoric of warfare potentially distracts policymakers from the real and genuine threats in cyberspace - subversion, espionage and sabotage - which are closer to criminality than to warfare on the ''warfare spectrum''. Why this ''marriage'' of cyberspace and warfare is problematic is that the law of armed conflict does not, for the most part, concern itself with acts of espionage and sabotage. Provided such acts are carried out in compliance with the existing laws of armed conflict, espionage and sabotage are not considered violations of the laws of war. This is made explicit in the Tallinn manual's rule 66, which says ''cyber espionage and other forms of information-gathering directed at an adversary during an armed conflict do not violate the law of armed conflict''. In other words, continuing to view hostile acts in cyberspace through the prism of warfare opens up the potential for either ignoring the vast swathes of cyber hostilities that don't reach the requisite threshold for warfare or classifying all acts of cyber hostilities as warfare - neither of which is an ideal solution.

Cyber War Will Not Take Place was published before the Tallinn manual; as such, some of Rid's comments are already out of date. In discussing the policy debate surrounding cyber warfare, for instance, Rid says ''the debate and those trying to turn it into policy are getting ahead of themselves. Some fundamental questions on the use of force in cyberspace are still unanswered; worse, they are still unexplored.'' As of July 2013, this is no longer true; the Tallinn manual provides a detailed analysis of the law on the use of force and the law of armed conflict, and examines whether hostile cyber activities are regulated by that law and whether it needs to adapt to better regulate this kind of hostility. Oddly, the Tallinn manual - the result of three years of research and consultations with 20 experts drawn from government, the armed forces, academia and industry, already in train when Rid was writing his own work - is not mentioned in Rid's book.

This is not to say that the book has limited value. Rid provides a measured and well-researched analysis of cyber hostilities to date, and identifies where the real threat comes from: espionage, sabotage and subterfuge. Indeed, recent experience tends to support his contentions. The victims of the massive data theft from the Australian government, linked to Chinese hackers in May this year, were not only, or even primarily, military; rather, they were agencies such as ASIO, the Department of Foreign Affairs and Trade, the Department of the Prime Minister and Cabinet, the Reserve Bank and the Bureau of Statistics.

Rid stands as a useful voice among the Cassandras and Chicken Littles who warn of the impending cyber apocalypse. He bridges the divide between law and technology, and serves as the standard bearer for those hoping to lead the cyber-war debate out of what he calls the ''realm of myth and fairytale'' into rational, empirical discussion.

Emily Crawford teaches law at the University of Sydney. This article first appeared in Inside Story.

Cyber War Will Not Take Place, by Thomas Rid, C. Hurst & Co Publishers, April 2013. RRP: $29.95