October 25, 2012
The Cyber Trade War

by Adam Segal

Beijing has long strived to limit the use of foreign technology and develop indigenous alternatives. The "Regulations for the Administration of Commercial Encryption," implemented in 1999, require government approval for the manufacturing, sale, use, import or export of any product containing encryption, restricting the use of foreign encryption technology within China. Introduced in 2007 by the Ministry of Public Security, the "Multi-Level Protection Scheme" prohibits non-Chinese companies from supplying the core products used by the government and banking, transportation, and other critical infrastructure companies. And the May 2010 Chinese "Compulsory Certification for Information Security Scheme" forces foreign companies wishing to sell to the Chinese government to disclose their intellectual property for security products.

But it's China's over-reliance on pirated goods that makes it extra-susceptible to security breaches. Chinese software companies have been unable to develop competitive products, and as a result Chinese users pirate software from foreign companies. Because stolen software is not updated automatically by the producer, and users rarely patch on their own, it's easier to hack. In October 2008, when Chinese users with pirated copies of Windows on their computers downloaded a new Windows upgrade, their screens went black. The blackout screen could be turned off but returned every hour with a reminder to buy legitimate products. Chinese netizens were enraged at the intrusion, and many Chinese policymakers were suddenly presented with the unpleasant truth that a U.S. company was controlling computers inside their country. As Tang Lan, an expert in information security at the China Institute of Contemporary International Relations, wrote in a February 2012 article in China Daily about the incident, "It's right to attack piracy, but the incident also exposed China's online vulnerability to high-tech intrusion from overseas."

Beijing has been working to reduce the use of pirated software, especially in government offices. As part of a 2012 national anti-piracy campaign, the government spent $156.9 million on legitimate operating system licenses, office software, anti-virus, and other special-purpose software. Overall, the proportion of China's personal computers with pirated software installed fell from 92 percent in 2003 to 77 percent in 2011. Government ministries and state-owned industries, however, are still not immune to the lure of pirated software: In September 2012, Microsoft asked the Chinese government to stop the country's largest energy company, China National Petroleum Corporation, and three other state-owned enterprises from using pirated software.

Chinese analysts also worry that as the People's Liberation Army becomes increasingly dependent on computer and communication networks, it will become more vulnerable to cyberattacks. As evidence of the threat, Science and Technology Daily, the official newspaper of China's Ministry of Science and Technology, claimed in an Oct 14 article that the United States sold virus-laden computers to Iraq via France prior to the Gulf War in order to paralyze its air defense system (an allegation that has never been confirmed). The article says the result was a "soft knife without spilling blood" -- meaning an attack that causes undetectable harm, and implies that the United States could perform a similar attack against China. The Stuxnet virus, which the United States and Israel reportedly used to attack the Iranian nuclear program, has reinforced the Chinese perception of vulnerability and of the United States' willingness to use cyber weapons.

Foreign attacks on China's networks could also threaten domestic stability, the maintenance of which is Beijing's top priority. China must have its "own discourse on cyberspace," wrote Liu Zengliang of Beijing's National Defense University in an August 2011 cover story in the state-owned People's Tribune, and so must master the "integrated trio of video, voice, and data" and fully exploit technology like cellphones, blogs, podcasts, and microblogs to disseminate its message and restrict foreigners from influencing public opinion within China. A December 2011 article on the military website China Military Online argues that "online games, online shopping, and online movies, etc., which represent new online industry models, are also influencing people's lifestyles and systems of values, and are becoming important components in seizing strategic high ground for the dissemination of information online." The goal is not only to block Twitter, Google, and other foreign social-networking sites, but to ensure that the hardware and software that enables their Chinese competitors is also secure.

For Detail