Sparring over cybersecurity

The success of talks between the US and Russia on cybersecurity is essential to ensure global stability and trust in the course of international politics.
The impetus for serious discussions on a range of cyber issues came at the Geneva summit in June between US President Joe Biden and his Russian counterpart Vladimir Putin. However, any agreement appears some way off since discussions are still at an embryonic stage.
The Biden administration has strong reasons to place cybersecurity as a top strategic priority in its ties with Russia. If relations between the two countries are to remain on a sound footing, there must be an end to cyberattacks launched by groups inside Russia or those with links to Moscow that target institutions and individuals inside the US.
Regrettably, while Biden appealed to Putin personally to put an end to Russian-centered cyberattacks, the rate of disruption has increased since the two leaders met a few weeks ago.
The US is particularly concerned at the rise of cybercrime, including the use of so-called ransomware — a form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Criminals then demand ransom in exchange for decryption.
In the political context, the US and Russia must adopt similar policies to enhance protection against any current or potential threat to their online capabilities, computers’ systems and critical data infrastructure.
The Biden administration has threatened to levy more sanctions on Russia if it fails to take adequate action to stop ransomware attacks directed at US businesses as well as at websites and email addresses of government offices in the US.
However, it would be better to encourage the Russian government to develop a complex set of guidelines to allow for the licensing of individuals and companies capable of hacking the websites of corporations and institutions in foreign nations.
The Biden administration must distinguish between government and non-government attacks. This can determine the role of the Russian government in facilitating ransomware computer viruses. The US has to send Moscow a firm message that ending these ransomware strategies will benefit Russia as well.

With nations still lacking confidence to share information on the threat, the most dramatic progress will come by giving regional organizations a role in countering the problem.

Maria Maalouf

If the attacks persist, it will be a sign that Putin is not in control of his country’s national security policies. However, the Russian leader is loath to project a weak image on the world stage. Negotiations on preventing ransomware wars between Washington and Moscow should encourage the Kremlin to see that politics, the economy and society in Russia can function well if ransomware is abandoned.
Many US cybersecurity experts have urged counterattacks against Russia’s computers to avenge the commission of these ransomware launches. In fact, this could lead to the collapse of negotiations and escalate cyber competition between the two powers. It could also encourage other nations to launch cyberattacks against rivals. Therefore, both the US and Russia must provide a global example on how to contain and resolve the ransomware issue.
Ideally, the world needs a ransomware treaty. Realistically, this is unlikely to materialize soon. With nations still lacking confidence to share information on the threat, the most dramatic progress will come by giving regional organizations a role in countering the problem.
Meanwhile, the Organization for Security and Cooperation in Europe, with the US and Russia as members, must establish methods to pool individual resources and end the pretense maintained by a number of nations that they are unaware of ransomware originating within their borders.

• Maria Maalouf is a Lebanese journalist, broadcaster, publisher and writer. She holds an MA in Political Sociology from the University of Lyon. Twitter: @bilarakib