+

Cookies on the Business Insider India website

Business Insider India has updated its Privacy and Cookie policy. We use cookies to ensure that we give you the better experience on our website. If you continue without changing your settings, we\'ll assume that you are happy to receive all cookies on the Business Insider India website. However, you can change your cookie setting at any time by clicking on our Cookie Policy at any time. You can also see our Privacy Policy.

Close
HomeQuizzoneWhatsappShare Flash Reads
 

Here's how the US can retaliate against Russian hacking and 'kick them in the balls'

Jul 21, 2017, 01:42 IST
  • Russia's President Vladimir Putin talks to U.S. President Donald Trump during their bilateral meeting at the G20 summit in HamburgThomson Reuters

    Russia stands accused of bold intrusions into vital US infrastructure (elections, nuclear power plants).
  • The US has the ability to fight back.
  • Empowering ordinary Russians with cyber tools against Vladimir Putin's regime would be "kick them" where it hurts, according to one cyber security expert.
Advertisement

It's been nearly a year since US intelligence agencies accused top Russian officials authorized hacks on voting systems in the US's 2016 presidential election, and mounting evidence suggests that the US has not fought back against the hacks as strongly as possible.

But attributing and responding to cyber crimes can be difficult, as it can take "months, if not years" before even discovering the attack according Ken Geers, a cybersecurity expert for Comodo with experience in the NSA.

Even after finding and attributing an attack, experts may disagree over how best to deter Russia from conducting more attacks.

But should President Donald Trump "make that call" that Russia is to blame and must be retaliated against, Geers told Business Insider an out-of-the-box idea for how to retaliate.

"It's been suggested that we could give Russia strong encryption or pro-democracy tools that the FSB [the Federal Security Service, Russia's equivalent of the FBI] can't read or can't break," said Geers.

Advertisement

In Russia, Putin's autocratic government strictly controls access to the internet and monitors the communications of its citizens, allowing it suppress negative stories and flood media with pro-regime propaganda. If the US provided Russians with tools to communicate secretly and effectively, new, unmonitored information could flow freely and Russians wouldn't have to fear speaking honestly about their government.

Riot police detain a man during an anti-corruption protest in central MoscowThomson Reuters

The move would be attractive because it is "asymmetric," meaning that Russia could not retaliate in turn, according to Geers. In the US, the government does not control communications, and Americans are already free to say whatever they want about the government.

"What if we flooded the Russian market with unbreakable encryption tools for free downloads?," Geers continued. "That would really make them angry and annoy them. It would put the question back to them, 'what are you going to do about it?'"

To accomplish this, the NSA could spend time "fingerprinting" or studying RUNET, the Russian version of the internet, according to Geers. The NSA would study the challenges Russia has with censorship, how it polices and monitor communications, and then develop a "fool-proof" tool with user manuals in Russian and drop it into the Russian market with free downloads as a "big surprise," he added.

Advertisement

"You're just trying to figure out how to kick them in the balls," Geers said of the possible tactic. "But they'd probably figure out how to defeat it in time."

Marianna Massey/Getty

Geers acknowledged that such a move could elicit a dangerous response from Russia, but, without killing or even hurting anyone, it's unclear how Russia could escalate the conflict.

As it stands, it appears that Russian hacking attempts have continued even after former president Barack Obama expelled Russian diplomats from the US in retaliation last year. Cybersecurity experts attribute a series of recent intrusions into US nuclear power plants to Russia.

Taking bold action, as Geers suggests, would leave Russia scrambling to attribute the attack to the US without clear evidence, while putting out fires from a newly empowered public inquiry into its dealings.

Advertisement

The ball would be in Russia's court, so to speak, and they might think twice about hacking the US election next time.

NOW WATCH: These are the secret bunkers government officials will go to in the event of an attack

Please enable Javascript to watch this video
Next Article