Skip to main content
🔴 LIVE — Day 1516 of the full-scale invasion  |  Latest: Frontline Dynamics — March 2026 Analysis

Information Warfare Doctrine: Gerasimov, Reflexive Control, and Ukraine's Counter-Strategy

Information warfare doctrine addresses the deliberate use of information—its creation, distribution, denial, and manipulation—as an instrument of military and political power. Russia's evolution of comprehensive information warfare doctrine, integrating cyber operations, psychological operations, disinformation, and electronic warfare into a unified operational concept, represents one of the most sophisticated developments in contemporary conflict theory. Ukraine's experience as the primary target of this doctrine, and its success in developing effective counter-strategies, has generated military and academic insights that are reshaping how democratic states conceptualize information warfare.

The Gerasimov Doctrine: Myth and Reality

What is popularly called the "Gerasimov Doctrine" traces to a 2013 article by Russian Chief of General Staff Valery Gerasimov in the Russian military journal Military-Industrial Courier. Western analysts, particularly Mark Galeotti, initially interpreted the article as articulating a new Russian doctrine for hybrid warfare combining military and non-military means—information operations, economic pressure, internal subversion—to achieve strategic objectives without conventional military conflict. The interpretation suggested Russia had developed a sophisticated doctrine for "warfare below the threshold" that could achieve decisive strategic effects without triggering traditional military responses.

Subsequent analysis—including Galeotti's own revision—questioned whether the article was primarily descriptive (observing trends in how Western nations conducted regime-change operations) rather than prescriptive doctrine. Russia's actual conduct, including the 2022 full-scale invasion of Ukraine with large conventional military forces, suggested the doctrine's scope had been overstated by Western analysts. Nevertheless, the genuine Russian military intellectual tradition of information warfare—rooted in Soviet maskirovka (deception) and reflexive control—remains an important analytical framework for understanding Russian operations.

Reflexive Control Theory

Reflexive control is a Russian military concept developed from the 1960s through Soviet academic work by Vladimir Lefebvre and popularized by military theorist S.A. Komov. The theory addresses how an adversary can be induced to make decisions favorable to the controller—not by denying the adversary information, but by shaping the adversary's perception of the situation so that they voluntarily take actions that serve the controller's objectives. The goal is not to control the adversary directly but to cause them to control themselves in ways beneficial to the controller.

Reflexive control operations create preconditions for desired adversary decisions through information manipulation: false interpretations of one's own capabilities (feigning weakness to invite attack, or feigning strength to deter), false attribution of intentions (causing the adversary to misinterpret one's moves as non-threatening), false representations of environmental conditions (weather, terrain, political situation), and psychological pressure that exploits known decision-maker biases or institutional constraints. In the cyber domain, reflexive control manifests as deception operations that cause defenders to misallocate resources, respond to decoy threats while real operations proceed, or make strategic decisions based on manipulated threat assessments.

Russian Information Warfare Domains and Tools

DomainPrimary InstrumentsRussian ActorsUkraine Target ExamplesEffectiveness Assessment
Online disinformationCoordinated inauthentic behavior, troll farmsIRA, GRU Unit 54777Zelensky legitimacy narrativesLimited within Ukraine; broader internationally
Cyber operationsAPT28/Sandworm destructive attacksGRU, FSB, SVRPower grid, government systemsDisruption achieved, not decisive
Electronic warfareGNSS jamming, comms interceptRussian EW unitsUAV navigation, battlefield commsSignificant tactical impact
Narrative warfareRT, Sputnik, social mediaKremlin, state mediaInternational support erosion attemptsPartially effective in specific markets
Psychological operationsSurrender leaflets, fake alertsRussian military PsyOpsCivilian panic, soldier demoralizationLow effectiveness against Ukrainian population

Cognitive Warfare Concept

Cognitive warfare—an emerging concept in NATO academic and policy circles, distinct from but related to Russian information warfare theory—specifically targets the cognitive processes by which decision-makers and populations process information and form beliefs. Cognitive warfare aims to influence, degrade, or exploit cognitive processes in target populations to achieve strategic objectives, using tools including deep fake fabrication, AI-generated disinformation at scale, social media exploitation of human cognitive biases, and targeted psychological pressure on key decision-makers.

Russia's cognitive warfare operations against Ukraine have included fabricated video content purporting to show Ukrainian President Zelensky calling for surrender (quickly debunked but demonstrating the technical capability and intent), information operations designed to fracture Ukraine-Western alliance cohesion by creating narratives of Western unreliability, and targeted psychological operations against Ukrainian military unit commanders. NATO's Allied Command Transformation has studied Ukraine's defensive responses to cognitive warfare as foundational case studies for developing NATO cognitive defensive capabilities.

Ukraine's Counter-Narrative and Information Counter-Strategy

Ukraine's counter-information-warfare strategy has been remarkably successful by most assessments—particularly in maintaining domestic Ukrainian public morale, retaining and expanding Western public and governmental support, and undermining Russian disinformation effectiveness both domestically and internationally. Key elements of Ukraine's counter-strategy include: rapid, transparent official communication through multiple channels including direct social media by President Zelensky and senior officials (bypassing traditional media gatekeepers); proactive debunking of Russian disinformation before it can establish narrative dominance (leveraging Ukraine's Center for Counter Disinformation and international fact-checking partnerships); strategic use of authentic, emotionally resonant content that creates empathy and solidarity in international audiences; and direct exposure of Russian information warfare tactics—publishing intercepted communications, documenting fabricated content, and naming specific Russian disinformation operations.

Ukraine's Center for Counter Disinformation (CCD), established under the National Security and Defense Council, monitors Russian disinformation in real-time, produces daily debunk reports, and coordinates with EU DisinfoLab, the Atlantic Council's DFRLab, and NATO StratCom Centre of Excellence. Ukraine has also engaged international platform companies (Meta, X/Twitter, YouTube, TikTok) with documented Russian coordinated inauthentic behavior, resulting in more rapid takedowns of Russian information warfare content than occurred in 2016.

FAQ

Was the Gerasimov article actually a doctrine document?
No. Gerasimov's 2013 article "The Value of Science in Prediction," published in the Russian journal Military-Industrial Courier, was a reflective opinion piece by a senior officer—not a formal military doctrine document, which in Russian military tradition would be published through official doctrine channels as a formal classified or unclassified doctrinal publication. Western analysts, including Mark Galeotti who is most associated with popularizing the "Gerasimov Doctrine" framing, later acknowledged that overreading the article as doctrine was an analytical error. The genuine Russian military doctrine for information confrontation (informatsionnoe protivoborstvo) is expressed in official Russian military doctrine documents and strategic concepts rather than in this single article.
How does reflexive control differ from traditional deception?
Traditional military deception (camouflage, disinformation about unit positions) aims to prevent adversaries from knowing the truth. Reflexive control is more sophisticated—it aims to cause adversaries to construct a specific false understanding that induces them to take specific desired actions, exploiting their decision-making processes and biases rather than simply hiding information. Reflexive control practitioners analyze the target decision-maker's mental models, institutional constraints, and cognitive vulnerabilities, then craft information inputs designed to cause that decision-maker to independently arrive at conclusions favorable to the controller. The adversary believes they are making autonomous decisions based on their own analysis.
Has Russian information warfare actually been effective in the Ukraine conflict?
Russian information warfare effectiveness has been mixed. Against Ukrainian domestic audiences, Russian information operations have been largely ineffective—Ukrainian trust in Russian media and susceptibility to Russian disinformation was already low before 2022 and declined further after the invasion, driven by direct experience of Russian military operations that contradicted Russian narratives. In global South audiences, Russian narratives about Western imperialism, NATO expansion, and Ukrainian neo-Nazis have achieved more traction. In Western Europe, Russian information operations contributed to some fracturing of war fatigue narratives. The overall failure to undermine Western support substantially, combined with complete failure to demoralize Ukrainian forces, suggests that Russian information warfare has underperformed its pre-war practitioners' likely expectations.
What is Ukraine's Center for Counter Disinformation?
The Center for Counter Disinformation (CCD) was established by Presidential Decree in March 2021, operating under Ukraine's National Security and Defense Council. The CCD monitors information from Russian sources across media and social platforms, identifies disinformation narratives and coordinated inauthentic behavior, produces daily public debunk reports, coordinates with international partners for shared threat analysis, and advises government on strategic communication. The CCD's work is complemented by civil society organizations including StopFake (established in 2014) and VoxCheck, which have developed extensive fact-checking and disinformation analysis capacities that have provided both domestic audience service and internationally recognized analysis.
How has cognitive warfare targeting changed over the course of the conflict?
Russian cognitive warfare operations have evolved over the conflict period. Early operations focused on shock and demoralization—using a rapid seizure narrative (the "48-hour war" expectation) intended to cause Ukrainian resistance to collapse. When this failed, operations shifted toward international audience fragmentation—attempting to erode Western support through war fatigue narratives, economic cost emphasis, and nuclear threat amplification. By 2023-2024, Russian operations increasingly focused on specific political environments (US elections, European parliamentary elections, Hungarian and Slovak political debates) where Russian-favorable political positions provided natural alliance opportunities for amplification. Ukraine's counter-strategy has adapted corresponding to these shifts, with different messaging emphasis for different target audiences and periods.

Sources

  1. Gerasimov, Valery — "The Value of Science in Prediction," Military-Industrial Courier, February 2013 (translated by Robert Coalson)
  2. Thomas, Timothy L. — "Russia's Military Strategy: Impacting 21st Century Reform and Geopolitics," FMSO, 2015
  3. NATO StratCom Centre of Excellence — "Cognitive Warfare: Militarization of Cognitive Domain," stratcomcoe.org 2021
  4. Rid, Thomas — "Active Measures: The Secret History of Disinformation and Political Warfare," Farrar, Straus and Giroux, 2020
  5. Ukraine Center for Counter Disinformation — "Annual Disinformation Threat Report 2023," spravdi.gov.ua

Frequently Asked Questions

What are the main Russian cyber attacks on Ukraine?

Russia has conducted sustained cyber operations against Ukraine since at least 2014, with a major escalation in February 2022. Key campaigns include the NotPetya attack (2017), attacks on energy infrastructure, the Viasat hack at war's start, and continuous operations against government, military, and civilian targets throughout the full-scale invasion.

How has Ukraine defended against Russian cyber attacks?

Ukraine's cyber defense has benefited from pre-invasion preparation, Microsoft and Western tech company assistance, CERT-UA operations, and the support of allied intelligence services. Ukraine developed significant cyber resilience by distributing government data to cloud infrastructure before the invasion.

What is the role of cyber warfare in the Ukraine conflict?

Cyber warfare in the Ukraine conflict operates alongside conventional military operations. Russia uses cyber attacks to disrupt infrastructure, spread disinformation, and support physical strikes, while Ukraine has developed offensive cyber capabilities to target Russian systems, including oil and gas infrastructure and military networks.

Who are the main cyber actors targeting Ukraine?

Russian state-affiliated cyber groups targeting Ukraine include Sandworm (GRU), APT28 (GRU), APT29 (SVR), Turla (FSB), and various GRU units. Ukrainian cyber forces, international volunteer hacker groups (IT Army of Ukraine), and allied intelligence cyber units operate on the Ukrainian side.

What can other countries learn from Ukraine's cyber defense?

Ukraine's cyber defense offers critical lessons: distributed cloud infrastructure reduces vulnerability to physical and cyber attacks, international information sharing accelerates threat response, pre-conflict preparation matters enormously, and the integration of civilian tech expertise with military cyber operations creates strategic advantages.