May 21st, 2019

Cyber Terrorism

GOP pols want to protect American secrets from several Russian and Chinese companies

Joseph Marks

By Joseph Marks The Washington Post

Published March 14, 2019

GOP pols want to protect American secrets from several Russian and Chinese companies
WASHINGTON - If Kaspersky, Huawei and ZTE are suspected of helping Russia and China spy on U.S. government computer systems, they shouldn't be allowed near sensitive academic research projects.

That's the argument made by three Republican lawmakers who introduced a bill Tuesday that would bar researchers who work on many federally funded projects from using any technology from those companies - or from any other companies with close ties to the Russian or Chinese governments.

The goal is to ensure it's just as hard for Russian and Chinese government-linked hackers to steal important U.S. academic research as it is for them to steal government secrets, the bill's sponsor, Rep. Jim Banks, R-Ind., told me.

"Huawei and ZTE are snakes in the grass, tools of the Chinese government," Banks said. "If we restrict their use for federal government purposes, we should restrict their use on college campuses as well for anything related to sensitive research."

The Protect Our Universities Act would apply to projects that receive funding from the intelligence community, Pentagon and Energy departments, but not to classified projects, which are subject to numerous other security requirements. It would also apply to projects dealing with technology that the State and Commerce departments have restricted from being sold abroad to some degree.

The concern here: That academic researchers who aren't specifically focused on cybersecurity might use Kaspersky anti-virus simply because it's cheaper than other options or unwittingly buy technology with Huawei components.

The bill - which is co-sponsored by Reps. Trent Kelly, R-Miss., Paul Cook, R-Calif., and Don Bacon, R-Neb. - is a further indication of how an effort that began with banning a few companies that posed cybersecurity risks to government computer systems is growing into an all-out battle to block numerous Russian and Chinese companies from access to American secrets.

The cybersecurity provisions in the bill are part of a larger set of security measures that include requiring the intelligence community to conduct background checks on students and researchers who work on those projects and who are citizens of Russia, China, Iran or North Korea.

Banks serves on the House Education and Armed Services committees, which probably will review the bill. He was also a leading author of a letter last year with 26 Senate and House members asking the Education Department to perform a voluntary review of Huawei's involvement in federally funded university research projects - a request he said the department failed to act on.

"The response has been inadequate at best from the Department of Education, and meanwhile the threats continue to grow," Banks told me.

Kaspersky and Huawei have consistently denied spying on behalf of their governments and both sued the U.S. government for banning them from its computer networks. Those denials have done little, however, to deter officials in the U.S. and elsewhere from trying to scrub them from other sensitive sectors.

Washington is especially stepping up the pressure on Chinese telecom giant Huawei, which Congress ordered off government systems last year. U.S. officials worry Huawei could help Chinese snooping on a mass scale if it gains a privileged position in next-generation 5G telecommunication networks, and they've been crisscrossing the globe making that case to allies.

The Federal Communications Commission is also considering banning Huawei from even less-powerful 4G networks in areas that receive federal assistance to make cell service more affordable.

The federal government is also creating a committee to review cybersecurity and national security dangers posed by all federal contractors and to recommend banning the riskiest ones - including companies with ties to governments such as Russia and China that U.S. officials don't trust.

The Protect Our Universities Act would create a similar commission to determine which companies are too risky to be trusted near sensitive research projects and to share the list of those companies with universities.The first draft of that list must include Huawei, ZTE and Kaspersky, the legislation states, as well as Hikvision and Dahua, two Chinese makers of video surveillance products, and Hytera, a Chinese radio systems manufacturer.

The list, which would be regularly updated, should also include any companies that are controlled by or have deep financial ties to the Russian or Chinese governments or to Iran or North Korea, the bill states.

In addition to introducing the bill on its own, Banks also intends to introduce it as an amendment to the National Defense Authorization Act, a mammoth annual defense policy bill. He's especially hopeful the bill can pass in that form, he said, because it's previously been a vehicle for major cybersecurity reforms, including the government's Kaspersky and Huawei bans.

"A number of my colleagues have been caught off guard realizing there's a greater threat here than they realized," Banks told me. "The nature of the growing threat to our national security research on college campuses is too great and we can't turn a blind eye to it."

Every weekday JewishWorldReview.com publishes what many in the media and Washington consider "must-reading". Sign up for the daily JWR update. It's free. Just click here.