Cyberspace Cooperation

The bilateral relationship between the United States and Russia is at its most dangerous point since the Cuban missile crisis. In some ways it is worse. As a Russian colleague recently observed, the management of Cold War tension was mathematical; today it is emotional. Further cemented by the chemical attack in Syria and by new sanctions, the hard lines both sides have drawn bode poorly for progress in reducing tensions. The immediate task is to keep communication channels open to avoid missteps or miscalculations that could lead to inadvertent or unnecessary escalation of conflict between the two nuclear powers.

Cyber is both an element of and hostage to the larger set of issues affecting U.S.-Russia relations. White House officials have made it clear that they won’t talk to the Russians about cyber until there is some reduction in Russian-based (or directed) hostile activity. However, Russian officials say they are neither aware of nor responsible for any alleged cyberattacks, emphasizing that these would in any case be the work of independent parties.

Read the full commentary.

Photo: "html php java source code" (Public Domain) by markus spiske

At the Moscow Economic Forum, McConnell, who heads EWI’s Global Cooperation in Cyberspace Program, discussed how traditional military conflict is now moving into the online sphere where conflicting parties may distort facts and launch information wars by involving civilians. “On one hand, anyone can now act like a journalist online using new technology without having to promote fact. On the other hand, many people do not have a critical way to sort out information they see online and start living in their own bubble of bias,” said McConnell.

At a discussion organized by the Valdai Club, McConnell was joined by Andrey Krutskikh, the Special Representative of the President of the Russian Federation for International Cooperation on Information Security, to discuss information warfare, security and norms of behavior in cyberspace. As part of his discussion, McConnell noted: “In balancing security and safety with user anonymity on the Internet, I believe there will be increasing recognition that in some Internet spaces, anonymity is useful only to malicious actors.”

At the Russian Internet Governance Forum, participants focused on the technological aspects of “fake news” on the Internet. Here, McConnell argued that media organizations, including international social media platforms, should take more responsibility for fact-checking before disseminating information. 

Below is the video from the Valdai discussion.

Photo: "information" (CC BY-NC 2.0) by stomen

It seems every day brings news of another high-profile cyberattack or intrusion affecting our personal data, national security or the very integrity and availability of the institutions and infrastructure on which we depend. These cyber threats come from a range of bad actors including ordinary criminals, transnational organised criminal groups and nation-states.

Indeed, in mid-February, Australia, the United States, the United Kingdom and several other countries attributed the devastating NotPetya ransomware worm—that caused billions of dollars of damage across Europe, Asia and the Americas—to the Russian military as part of the Kremlin’s efforts to destabilise the Ukraine.

At the same time, special counsel Robert Mueller in Washington unveiled a remarkably detailed criminal indictment charging a range of Russian individuals and organisations with a concerted effort to undermine the 2016 U.S. elections.

Read the full commentary.

Photo: "warm data" (CC BY-SA 2.0) by beachmobjellies

Dr. Lora Saalman, who manages EWI's work in Asia-Pacific engagement, has edited a new report titled "Integrating Cybersecurity and Critical Infrastructure: National, Regional and International Approaches."

The publication, released by the Stockholm International Peace Research Institute (SIPRI), features six experts from industry, government, academia and the legal sector delve deeper into several key target areas of cybersecurity and critical infrastructure—namely system integrity, the role of the private sector and legal frameworks. Their essays provide a baseline for understanding how these issues are unfolding at the national level in Japan, at the regional level in Europe and at the international level under the United Nations.

For more information, click here.

Image: "CyBER" (CC BY-NC-ND 2.0) by copenhavermatt

McConnell shared his insight with the Global Times, based in Beijing.

Global Times (GT): Regarding the internet, cybersecurity has always been important. However, today the challenges of cybersecurity seem to have grown increasingly severe. Why is this?

Bruce McConnell (BM): Across the globe, billions of people rely on the internet for business and daily activities. If the internet is not reliable or not secure, governments, businesses, and even everyday social interactions, would all be disrupted. The internet has become a necessity for modern life. Without cybersecurity there is no national security.

Criminals use the internet to steal money and information from banks, businesses, and individuals. Terrorist organizations use it as a tool to recruit new members, and state actors see the internet as a new kind of battlefield. Threats to the internet will damage the provision of basic services to everyday internet users, which may lead to instability and conflict.

GT: Today, more than 30 countries have cyber teams. As an expert in cybersecurity, how do you see the relative strengths and competitive abilities of the key state actors in cyberspace?

BM: Military and intelligence cyber teams can cause massive disruptions to the internet and the basic services it provides. Banking, finance, power and government services are all threatened by the use of cyber weapons. They are all vulnerable. International peace and security are also threatened by the uncertainties of the origin and intent of such weapons. Cyber weapons run the risk of increasing miscalculations or exacerbating existing tensions in international affairs. Just like with any other weapons, humanity must work together to address the serious threats of cyber weapons.

GT: There have been many contrasting narratives about Russia’s intervention in the U.S. election. Recently, the United States declared that the TV station ‘Russia Today’ would have to register as a ‘foreign agent.’ What are your thoughts on the conflict between the United States and Russia?

BM: Since the internet revolution, the fight for people’s attention online has taken place on a global scale. Governments everywhere are seeking to influence both their own citizens and their enemies; companies use the internet to market products and services to their customers; and terrorist organizations use the internet for malicious propaganda. I believe that this kind of competition for people’s attention is the greatest threat to individuals’ autonomy, democracy, and public life. If the two nations cooperate and lead together, it will influence the entire world.

GT: Between the United States and Russia and between the United States and China, accusations and counter-accusations of hacking have gone on for many years. In light of this history, are you optimistic about the future of international cybersecurity cooperation?

BM: All major countries have experimented with and participated in other countries’ experiments with the use of cyber weapons. In most cases so far, the affects of these activities have been simple and limited. However, the possibility of miscalculation and conflict escalation is very real and must be managed through better cross-border communication.

Some bilateral communications are taking place, such as the U.S.-China Cyber Security Dialogue which began during the Obama administration and continues to this day. However, existing efforts are not enough and more work needs to be done, particularly in facilitating dialogue in the military realm.

GT: From your perspective, what is the special significance of U.S.-China cooperation on cybersecurity? 

BM: Combined, China and the U.S. have the largest population of internet users and the two nations are the world’s greatest technology providers. And the global influence of Chinese internet companies such as Alibaba, Tencent, Baidu, Huawei, and iFlyTek is also rising. In 2016, seven of the world’s top twenty internet companies were Chinese companies. I believe that if China and the U.S. cooperate and play a leading role together in cyberspace, it will influence the entire world. They should start by setting an example and agreeing on restricting the use of cyber weapons, and work together to reduce the current level of cyber stacks by criminals and other malicious actors. As China and the United States become online superpowers, the responsibility for peaceful leadership will continue to increase.

GT: China and the United States have signed a cybersecurity cooperation agreement and have conducted a number of high-level talks. As of this moment, what do you think of the achievements in cyberspace cooperation between the two countries?

BM: The various achievements of the bilateral engagement between China and the United States demonstrate the good intentions of both parties, but the relationship is still in the early stages. In order to achieve meaningful progress, there needs to be more focus on high-level dialogues which allow for engagement between leaders on both sides—including dialogues between members of the U.S. and Chinese militaries.

Multinational companies in both the United States and China will have the opportunity to play a key role in facilitating these dialogues. By sharing information with each other on their observations on and responses to issues in cyber space, they can set a good standard for global cooperation. Businesses’ participation in these exchanges will be a key factor in motivating the engagement of civil and military actors in international discussions on cybersecurity and informatization.

Since President Xi’s successful visit to the United States in 2015, both nations have agreed to a comprehensive package of effective programming and working groups for cooperative Internet governance and cracking down on illegal hacker activity. These actions have played an important role so far and yielded important outcomes. First, organized attacks between the two countries were almost eliminated, and mutual trust was enhanced on the issues of co-governance and illegal hacking. Second, the two countries established a hotline mechanism at the working level. When one side discovers evidence of a cyberattack, it has a direct mechanism for notifying the other side—including the relevant law enforcement agencies—via the hotline. To quantify the achievement: in the past two years, the number of cyber attacks on the United States which are propagated through Chinese servers has been reduced by 80%. Additionally, some third-party countries have also clarified the scope of their attacks against the United States via Chinese servers. Because of the establishment of robust bilateral communication mechanisms, we were better able to identify these proxy attacks at the outset. Thus we can say that high-level dialogues between China and the United States have promoted much-needed paths of communication and idea exchanges, as well as creating effective dispute resolution mechanisms in the cyber realm. These achievements represent positive examples of good Internet governance and demonstrate cooperation between the two nations.

GT: You attended the World Internet Conference in China multiple times in the past few years, and you have a deep personal relationship with China. What do you wish to see in in an ideal relationship between China and the United States?

BM: Today, these two great state powers are facing a new opponent. The challenges of addressing this new opponent will require us to establish a new kind of relationship based on mutual trust and cooperation. The new adversary is not confined to any one nation. It presents itself in the form of climate change, terrorism, cybercrime, and the proliferation of weapons of mass destruction. We must work together to face these adversaries in all directions: South and North, East and West.

The people of China and the United States have a long history of friendship and cooperation. They may have their differences here and there, but in the end, we all live together on a very small planet. These two great powers are morally responsible for establishing a new cooperative relationship to address the many problems facing humanity today. This is a very urgent matter.

Read the interview in Chinese.

Photo: "Cyber attacks" (CC BY-SA 2.0) by Christiaan Colen

Last month, United Nations Secretary-General António Guterrescalled for global action to minimize the risk posed by electronic warfare to civilians. Guterres lamented that “there is no regulatory scheme for that type of warfare,” noting that “it is not clear how the Geneva Convention or international humanitarian law applies to it.”

A decade ago, cyber security received little attention as an international issue. But, since 2013, it has been described as the biggest threat facing the United States. Although the exact numbers can be debated, the Council on Foreign Relations’ “Cyber Operations Tracker” contains almost 200 state-sponsored attacks by 18 countries since 2005, including 20 in 2016.

The term cybersecurity refers to a wide range of problems that were not a major concern among the small community of researchers and programmers who developed the Internet in the 1970s and 1980s. In 1996, only 36 million people, or about 1% of the world’s population, used the Internet. By the beginning of 2017, 3.7 billion people, or nearly half the world’s population, were online.

Read the full commentary.

Photo: "Sophia screen shot" (CC BY 2.0) by Idaho National Laboratory

Bruce McConnell talked to Voice of America about the institute's new report on encryption, acknowledging the clash between the needs of law enforcement, technologists and privacy advocates to access personal information.

"Strong encryption is an important tool to protect business information, personal data, privacy and other human rights. At the same time, criminals are increasingly using cyber tools to plan and implement crimes," said McConnell, who leads EWI's cyberspace program.

McConnell also spoke about ensuring balance in the report's recommendations. The report was launched at the 2018 Munich Security Conference on February 16.

Click here to listen to the full interview, published on February 25. McConnell's remarks begin around the 12:50 mark.

To access the report, click here.