Attacks/Breaches

7/10/2017
05:11 PM
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
50%
50%

Trump Suggests, Then Pulls Back on Joint Russian Cybersecurity Unit

President Donald Trump proposed, and quickly rescinded, the idea of a joint cybersecurity unit with Russian President Vladimir Putin during this week's G20 summit.

On Saturday, July 9, President Donald Trump suggested via a tweet the formation of a cybersecurity alliance with Russia following a conversation with Russian President Vladimir Putin. But later that day, Trump pulled back from that statement.

The two leaders met during the G20 summit in Hamburg, Germany. Their meeting, which lasted two hours and fifteen minutes, centered on the current and future nature of the relationship between the United States and Russia.

Trump tweeted about the potential for a cybersecurity unit after, he claimed, Putin "vehemently denied" Russia's meddling in the 2016 US presidential election. The "impenetrable Cyber Security unit" would guard against "election hacking, & many other negative things."

(Source: Twitter)

(Source: Twitter)

The tweet instantly sparked criticism from officials who were outraged at the idea that Moscow could be trusted in such a collaboration. US intelligence has discovered evidence indicating Russia did interfere with the 2016 election and targeted voting systems in multiple states.

Some security experts took Trump's tweet with a grain of salt.

"As a professional, I tune out his tweets to a degree … you couldn't take them literally as serious policy statements unless there's a follow-up," says John Bambenek, manager of threat systems at Fidelis Cybersecurity. "It seems so out of left field it's hard to take it seriously."

However, he continues, the idea could have serious implications if it became reality, as "a large part of our cybersecurity concerns emanate from that part of the world." Further, Russian intelligence services have relationships with many of the same criminals to share information, a structural impediment that would prevent the two from collaborating.

"How that cooperation would work would be awkward," he notes.

Michael McFaul, former US ambassador to Russia, said such a collaboration "just will not happen," Reuters reports. Restrictions on sharing information with Russia would prevent giving the country a closer look at US cyber capabilities; similarly, Moscow would also be resistant to sharing its own capabilities with the US.

Never Mind

When Trump changed his tune later on July 9 after his initial Russian cybersecurity unit statement, he said his mention of a joint cybersecurity unit with Russia does not mean he thinks it will become reality.

"It can't," he noted, though a ceasefire in Syria did happen. Trump also mentions the negotiation of a ceasefire in a separate tweet, adding how it's time to "move forward" in collaborating with Russia.

(Image: Twitter)

(Image: Twitter)

Russian Foreign Minister Sergey Lavrov reported after the meeting that Trump accepted Putin's statements claiming Russia was not involved in the election, according to a CNN translation. A White House briefing on the meeting, which has since been deleted, placed more focus on moving forward than enforcing consequences for the alleged interference.

"I think what the two Presidents, I think rightly, focused on is how do we move forward; how do we move forward from here," said Secretary of State Rex Tillerson in a statement. "Because it's not clear to me that we will ever come to some agreed-upon resolution of that question between the two nations."

Bambenek says he would be surprised if there is anything legitimate behind Trump's tweet. He does acknowledge the US and Russia will eventually need to cooperate on cybersecurity -- though doing so for elections "would be amusing."

"As a general rule, all things being equal, we're nations with our own laws," he explains. "But the Internet respects no international boundaries. We're not going to solve cybercrime unless we get nations to play in the sandbox somehow."

Such a collaboration would ideally focus on solving conventional cybercrime and protecting citizens from threat actors. While it's theoretically conceivable for nation-states to work together on this, it's tricky because of how foreign policy works.

"Is it possible? Yes, human beings can decide to play nice," he says. "Is it reasonable to expect they would? All foreign policy is based on exchanges. If they ask for 'X', they'll want 'X' in return. There could be a deal, but nations will act in their own self-interest."

Related Content:

Kelly Sheridan is Associate Editor at Dark Reading. She started her career in business tech journalism at Insurance & Technology and most recently reported for InformationWeek, where she covered Microsoft and business IT. Sheridan earned her BA at Villanova University. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Printers: The Weak Link in Enterprise Security
Kelly Sheridan, Associate Editor, Dark Reading,  10/16/2017
20 Questions to Ask Yourself before Giving a Security Conference Talk
Joshua Goldfarb, Co-founder & Chief Product Officer, IDDRA,  10/16/2017
Why Security Leaders Can't Afford to Be Just 'Left-Brained'
Bill Bradley, SVP, Cyber Engineering and Technical Services, CenturyLink,  10/17/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
The State of Ransomware
The State of Ransomware
Ransomware has become one of the most prevalent new cybersecurity threats faced by today's enterprises. This new report from Dark Reading includes feedback from IT and IT security professionals about their organization's ransomware experiences, defense plans, and malware challenges. Find out what they had to say!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.