|
 |
 |
|
US officials say report of Chinese hacking proves need for cybersecurity bill
Lawmakers and the White House said on Tuesday that a report accusing a Chinese military unit of orchestrating hacking attacks against U.S. computer systems shows the need for cybersecurity legislation.
The report from American computer security firm Mandiant concluded that a 12-story building in Shanghai is almost certainly the headquarters of China's secretive cyberwar division, the People's Liberation Army Unit 61398.
The firm said that since 2006, the Chinese unit has stolen data from at least 141 companies across 20 major industries. At least 115 of the companies were in the United States.
"That’s why the United States government is taking an active approach to addressing the issue of cyber theft. We have urged Congress to pass legislation, and the president is taking all steps he can through the executive branch to make sure that we’re safeguarding government networks and providing helpful and useful and relevant information to the private sector to help them safeguard their networks," Carney said during the press briefing.
He added that it is vital that the United States and China continue a "sustained, meaningful dialogue and work together to develop an understanding of acceptable behavior in cyberspace."
Senate Homeland Security Committee Chairman Tom Carper (D-Del.) said the report is "yet another important reminder" of the nation's frightening vulnerability to cyberattacks.
"Our nation cannot afford more delay on this issue. That’s why it was so important that the President issued his cybersecurity Executive Order and why we must quickly pass the still critically needed comprehensive cybersecurity legislation,” Carper said.
Senate Intelligence Committee Chairwoman Dianne Feinstein (D-Calif.) said the report "clearly demonstrates the need to pass cyber security legislation as soon as possible."
She expressed frustration that the Chinese government continues to deny any involvement in the attacks.
"I have personally raised cyber attacks with Chinese officials as recently as last week. Again, complete denial," she said.
Feinstein said the report reinforces the need for a binding international agreement to prohibit cyberattacks.
"There are already international agreements in place to govern criminal activity and war. Cyber attacks are both, but there is nothing currently in place to govern this emerging and increasingly dangerous national and economic security threat," she said.
Senate Commerce Committee Chairman Jay Rockefeller (D-W.Va.) said the report "echoes what our military and national security officials have been warning for years."
"We need comprehensive cybersecurity legislation and I will continue working with my colleagues to give the government and private sector the strongest resources to protect ourselves from increasing intrusions and attacks,” he said.
"The report shows what we already knew," said Rep. Dutch Ruppersberger (D-Md.), the ranking member of the House Intelligence Committee. "China is robbing American companies blind, stealing our valuable trade secrets and stealing our jobs. We must give our businesses the cyber threat intelligence they need to protect themselves from these cyber attacks."
Ruppersberger and House Intelligence Committee Chairman Mike Rogers (R-Mich.) introduced legislation last week that would allow companies and the government to share more information about cyber threats.
Ruppersberger said his bill, the Cyber Intelligence Sharing and Protection Act (CISPA), "will help American businesses protect themselves."
The White House and Sens. Carper, Feinstein and Rockefeller backed separate legislation last year that would have set cybersecurity standards for critical infrastructure, such as banks and power plants.
But Senate Republicans blocked the legislation, arguing it would have burdened businesses with ineffective regulations.
Ahead of his State of the Union address last week, President Obama signed an executive order that will create a voluntary set of cybersecurity best-practices for companies that operate critical infrastructure.
The order also requires federal agencies to share more information about cyber threats to U.S. companies and the public.
—Updated at 6:42 p.m.
Most Viewed RSS Feed »
