Foreign Interference In US Elections 'Will be repeated'

The United States’ former top cyber diplomat has warned that foreign interference in the US and other democratic national elections will keep happening if western countries don’t get better at imposing consequences on so-called ‘bad actors’ on the Internet.

Chris Painter, (pictured) who was until last year the Director of Cyber Issues at the US State Department and previously the head of cybersecurity in the Obama White House’s National Security Council, told SBS News that US government cyber specialists had been “caught off guard” by Russian online operations aimed at dissuading voters from voting for Hillary Clinton in favour of now President Donald Trump in the 2016 election.  

Those operations are the subject of an indictment by Special Counsel Robert Mueller which last week charged 13 Russian nationals for allegedly attempting to interfere in the US electoral process. There is the possibility that if the 13 ever travel to a third country with an extradition treaty with the US, they will have to face a US court.  

“There was some detection, our director of National Intelligence, our FBI director, our head of Homeland Security came out during the election and said this was happening,” Mr Painter said of the interference operations. 

“But what we didn’t really see coming was this hybrid attack that was cyber-enabled but also more of a traditional influence operation... I don’t think we were looking at the whole range of activity out there. I think that caught us a bit off guard but... once it was seen, there was a lot of activity to respond to it.”

Mr Painter said before the 2016 election the US cyber community was largely focused on instances or threats of more “traditional” cyber-crime.

“We were looking at things like theft of intellectual property, or intrusion and theft of personal information, credit card information; we were focused on the threat of attacks on critical infrastructure like an attack on the electrical grid or financial system,” he said.

He warned that the Russian operation will be emulated by other state and non-state groups seeking to destabilise democracies.

“This is something that absolutely will be repeated again. If there’s no consequence for this bad action it will be repeated - it’s an invitation to repeat it. So we really have to as a community in the US and around the world make sure we are doing everything we can to prevent this, both by hardening our system, and making sure there’s costs and consequences for the people who do it,”.   

But he said the Trump administration has fallen well short of an effective response.

“There’s more we can do frankly,” he said. “One of the things the US needs to do is come out with a strong declaratory statement that this activity will not be countenanced and there will be consequences. It has to come from the very top and we haven’t had that yet.”

Mr Painter was the world’s first top cyber diplomat, a job created out of the recognition that transnational crimes and threats require high-level coordination between countries. With malicious hackers or other cyber criminals operating from anywhere in the world, and often routing their attacks through countries with lax cyber jurisdictions, a single nation's law enforcement cannot achieve much without coordinating with other nations.

Since Mr Painter's 2011 appointment under former Secretary of State Hillary Clinton, at least 25 countries have followed suit, Australia included. Australia’s Ambassador for Cyber Affairs is Dr Tobias Feakin, appointed one year ago by Prime Minister Turnbull with the brief to lead a “whole of government” approach to protecting Australia’s interests and security in cyberspace.

Mr Painter is visiting Australia with the Canberra think tank the Australian Strategic Policy Institute, meeting policy-makers, researchers and bureaucrats involved in the country's cybersecurity infrastructure. He said that Australia had been responding effectively to the range of cyber threats, but that no one country has yet successfully figured out how to deter cybercrime.

“One thing we have not done well, no one in the international community has done well, is deterrence, imposing costs on adversaries when they do bad things. Calling them out is good, name and shame is part of it, but it’s not going to change your behaviour necessarily if you’re a nation state getting a benefit out of it.”

Other tools might be economic sanctions, law enforcement indictments (such as the five Chinese PLA officers indicted in the US in 2014 for industrial espionage) or offensive cyber tools which he said are more limited in use than people understand.

Despite some successes in creating what Mr Painter calls “rules of the road” in cyberspace, including a 2015 agreement between China and the US not to steal intellectual property for the benefit of the commercial sector; the international community is still grappling with the dimensions and implications of cyber threats.

UN Secretary General Antonio Guterres last week called for international rules protecting civilians from the potentially deadly impacts of cyber warfare such as attacks on power grids.

Australia is a big target of cybercriminals as a rich country that’s heavily dependent on technology. A report by Norton Cyber Security Insights released recently said more than one in four Australians were the victims of cybercrime last year, losing an average $195 each and two days dealing with the consequences. 

Australia’s mandatory data breach reporting laws has come into effect, which will force companies to reveal when they’ve been hacked. 

SBS:       Image: Nick Youngson

You Might Also Read: 

Leaked NSA Report Claims Russian 'Cyber Espionage' Against US Elections:

Hillary Clinton’s Cyber Warfare Warning:

Russian Fake Brexit Tweets & Attacks On The UK:
 

 

« Millions Of Compromised Accounts Discovered On The Dark Web
AI Will Boost Cybercrime & Security Threats »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

BSI Group

BSI Group

BSI is the business standards company that equips businesses with the necessary solutions to turn standards of best practice into habits of excellence

Thermo Systems

Thermo Systems

Thermo Systems is a design-build control systems engineering and construction firm. Capabilties include industrial control system cybersecurity.

IoT European Research Cluster (IERC)

IoT European Research Cluster (IERC)

IERC brings together EU-funded projects with the aim of defining a common vision for IoT technology and development research challenges.

Cybersecurity Association of Maryland (CAMI)

Cybersecurity Association of Maryland (CAMI)

CAMI’s mission is to create a global cybersecurity marketplace in Maryland and generate thousands of high-pay jobs through the cybersecurity industry.

Riddle&Code

Riddle&Code

Riddle&Code is a product-led services company specializing in onboarding industries to Web3. The team's mission is to provide a trusted connection between the digital and physical worlds.

e360

e360

e360 (formerly Entisys360) is an award-winning IT consultancy specializing in advanced IT infrastructure, virtualization, security, automation and cloud first solutions.

Infinidat

Infinidat

Infinidat delivers enterprise-proven solutions for data storage, data protection, business continuity, and sovereign cloud storage.

Myota

Myota

Myota intelligently equips each file to be resilient and achieve Zero Trust-grade protection. Withstand ransomware and data breach attacks. Reduce data restoration time and effort.

Rimini Street

Rimini Street

Rimini Street is a global provider of enterprise software support products and services, and the leading third-party support provider for Oracle and SAP software products.

Ghost Security

Ghost Security

Ghost is a venture backed, product-led startup building the new standard in application security for the modern enterprise.

Bulletproof Solutions

Bulletproof Solutions

Bulletproof provides IT expert support, services, and guidance to businesses small and large as they grow and adapt to today’s complex IT, cybersecurity, and compliance needs.

Venticento

Venticento

Venticento is an IT company specialized in consulting and network support and assistance for companies that need to make their business processes more effective.

Skillfield

Skillfield

Skillfield is a Melbourne based Cyber Security and Data Services consultancy and professional services company.

E-CQURITY (ECQ)

E-CQURITY (ECQ)

ECQ is a network security company offering offensive security services and solutions focused on active offensive and defensive positioning.

NetBird

NetBird

NetBird combines a WireGuard-based overlay network with Zero Trust Network Access, providing a unified platform for reliable and secure connectivity.

Aikido Security

Aikido Security

Aikido is the no-nonsense security platform for developers. Secure your code, cloud, and runtime in one central system. Find and fix vulnerabilities automatically.