U.S. Urged to Take Comprehensive Action on Chinese Cyberespionage

CSO — A high-profile report showing that Chinese cyberespionage is increasingly focused on U.S. critical infrastructure adds urgency to the government using every tool it has to dissuade China from such activity, experts say.

Security company Mandiant released a report this week that showed a group of cyberspies it had watched closely for sometime was in all probability a secretive organization within the Chinese military. It described how the group was increasingly focused on stealing information from companies involved in U.S. critical infrastructure, including the electrical power grid, oil and gas lines and waterworks.

While there's no evidence China is planning to launch a destructive attack, the fact that the country is behind gathering proprietary information from these companies is a reason for serious concern and a stepped up government response, experts say.

Paul Rosenzweig, a former deputy assistant secretary for policy at the Department of Homeland Security and the founder of Red Branch Law & Consulting, said the government should use everything it has to pressure China to stop.

Options include high-level diplomacy, financial and economic sanctions, using our own intelligence to embarrass the Chinese government, and prosecution of people involved in stealing data as well as Chinese companies that use stolen information.

Congress should also move faster in passing the Cyber Intelligence Sharing and Protection Act, reintroduced last week. The bill would establish rules for companies to share cyberthreat information with each other and government agencies.

"[Chinese spying] certainly adds oomph to the need for CISPA-like legislation, but it probably adds more oomph to the need for a concerted whole-of-government strategy for dissuading China from its current course of conduct," Rosenzweig said on Thursday.

Related Story: http://www.cio.com/article/729153/Chinese_Government_s_Link_to_Cyber_Espionage_Clearer_Than_Ever

The Obama administration is already moving in that direction. On Wednesday, the White House released its strategy for preventing the theft of U.S. trade secrets.The plan includes increasing diplomatic efforts, supporting industry-led best practices for protecting proprietary information and continuing to make the prosecution of trade secret theft by foreign companies and governments a "top priority."

While China was not mentioned, the strategy would certainly cover activities outlined in the Mandiant report.

A recently published paper by consultancy Good Harbor Security Risk Management outlines steps countries can take to prevent the escalation of cyberespionage into a more serious confrontation. Initial steps could include sharing information about threats with the intent to tackle thorny issues, like spying, later.

Russia and the U.S., for example, have discussed establishing a cyber hotline to lessen the chances of activity leading to conflict. The hotline would be modeled after one used to prevent accidental nuclear war.

Continue Reading