CFR Presents

Net Politics

CFR experts investigate the impact of information and communication technologies on security, privacy, and international affairs.

Print Print Cite Cite
Style: MLA APA Chicago Close

loading...

Sanctioning Hackers

by Adam Segal
April 1, 2015

China Net Cafe VPN Cyber CFR Adam Segal People use computers at an Internet cafe in Changzhi, Shanxi province December 30, 2010. (Stringer/Courtesy Reuters).

Share

President Obama signed an executive order today that allows the U.S. Department of the Treasury to sanction individuals or entities involved in “significant malicious cyber-enabled activities” (you can read the order here). The sanctions, which could involve travel bans to the United States or the seizure of funds, would be levied against those who engage in attacks that disrupt or destroy critical infrastructure networks, or who steal intellectual property or trade secrets. State-owned enterprises or entities that benefit from cyber espionage could also be the target of sanctions.

This is, as others have noted, a big deal. For years, pundits, including myself, have been saying that the costs of hacking had to be raised, and the next steps would be sanctions targeting individuals. In a June 2014 Asia Unbound podcast, Special Advisor to the President and Senior Director for Asian Affairs at the National Security Council Evan Medeiros hinted that after indicting the five PLA hackers, the Obama administration was thinking about how to penalize the state-owned enterprises that were the recipients of the stolen intellectual property.

Three quick questions:

How and how often the order will be implemented? It is unlikely to have much effect on North Korean and Iranian hackers, since both of those countries are already under substantial sanction regimes. The same might be said of Russia, since the United States and its European allies have levied sanctions in the wake of the crisis in Crimea. Does that mean China is the main target? Even if it is China, the idea might be to deter the next generation of hackers rather than prevent the current wave of attacks. That is, a PLA attacker may not think much about travel to the United States now, but a college student who has not yet traveled down that road might think twice. They may still have dreams of visiting Los Angeles.

If China is the main target, what does Washington think Beijing’s response will be? Right now, the two sides are involved in a complicated dance, where each step seems to be matched by the other. The United States claims China is behind attacks on U.S. networks, China claims the United States is the real evil empire in cyberspace, hacking the entire world. Beijing uses Washington’s demands for backdoors in encryption as justification for similar demands in the revised anti-terror law. Chinese and U.S. tech companies are blocked from each other’s market because of security concerns. If the United States places a travel ban on a Chinese hacker, should NSA employees think twice before they book a tour to see the Forbidden City? Where does the tit-for-tat end?

Finally, the executive order says any case must be supported with evidence that can withstand a court challenge. Does that mean we should expect to see the government roll out even more technical details to be used for the attribution of attacks? In the past, the intelligence agencies have hesitated because they wanted to protect their sources and methods. Will the order result in the NSA and others burning more intelligence to levy sanctions?

We will have to wait and see how these three questions play out, but there is no doubt that this is a major policy development.

Post a Comment 1 Comment

  • Posted by K. K. Lim

    I thought Snowden said it all! The U.S. has never admitted hacking the World but Snowden showed it has. The fact is the U.S. Uses China as the whipping dog and without doubt in non-Western eyes the efforts by the U.S. Government indicate the approach to China is contained in a simple word – containment from every angle. How this will payout is yet to be seen but frankly China is too big a country to contain. But the real issue is the U.S. talks about fairness whereas it’s actions show fairness means following the U.S. in all respect. Let’s see how this plays out. Does the U.S. have the patience or will it be “boots on the ground” as in every conflict since the end of WW2.

Post a Comment

CFR seeks to foster civil and informed discussion of foreign policy issues. Opinions expressed on CFR blogs are solely those of the author or commenter, not of CFR, which takes no institutional positions. All comments must abide by CFR's guidelines and will be moderated prior to posting.

* Required

Pingbacks