China sees gaps in US defences, ousted national security official says

WASHINGTON – China is taking advantage of gaps in American defences, as its cyber programme poses a core challenge to the United States, the former director of the National Security Agency said in an interview.

General Timothy Haugh, the former head of both the NSA and US Cyber Command, said there were weaknesses in American cyberdefences that the Chinese government was trying to exploit. While cyber security and cloud computing firms are trying to improve their defences, China is constantly looking for vulnerabilities, areas that neither kinds of firms are focusing enough of their attention on.

China, Mr Haugh said, is trying to exploit the “seams” in the defences.

He was forced out of his positions in April after Ms Laura Loomer, a right-wing conspiracy theorist and adviser to President Donald Trump, accused Gen Haugh – without evidence – of disloyalty.

In a social media post, Ms Loomer said Gen Haugh had been chosen by General Mark Milley, the former chair of the Joint Chiefs of Staff, who was critical of Mr Trump and whom she called a traitor.

Both Democratic and Republican lawmakers lamented Gen Haugh’s dismissal. Representative Jim Himes of Connecticut, the senior Democrat on the House Intelligence Committee, said Gen Haugh’s firing made the country less safe. Senator Mitch McConnell of Kentucky, the former Republican leader, said he “couldn’t figure out” what the Trump administration wanted in its senior national security figures.

In his first interview since being fired, Gen Haugh seemed reluctant to talk in detail about his dismissal, saying only that he had served at the pleasure of Mr Trump.

“I don’t and did not expect an explanation, and from the second I was told I was no longer serving in the role, the focus shifts to the leaders the president has put in the capacity,” he said.

Genr Haugh did not appear to be dwelling on his lost jobs, but instead focused on new ways to work against the same threats he had been trying to counter while in government, in particular China’s cyber operations.

China’s priorities, he said, are collecting intelligence, stealing intellectual property from American institutions and companies, and positioning for a possible attack.

In recent years China has mounted two major cyber operations: Volt Typhoon, which positioned malware to attack critical infrastructure in the event of a possible conflict with the United States, and Salt Typhoon, an ambitious effort to hack US telecom networks, allowing Chinese intelligence to listen to calls from prominent Americans.

“This is a bipartisan issue: cyber security and the security of our nation,” Gen Haugh said.

Artificial intelligence, he added, can make the threat worse but can also help generate new ways to defend against attacks.

Gen Haugh is set to teach a class at Yale University in the fall, and Ballistic Ventures, a company that funds and advises cyber-security start-ups, announced July 29 that he would join the firm as a strategic adviser.

“For me, two of the things I think I can be impactful with, is how do you inspire people to public service and how do we think about implementing new technologies in ways that more secure as a nation,” he said.

Mr Glenn Gerstell, a former general counsel for the National Security Agency, said China’s threat was still not well understood, despite breaches like Salt Typhoon and Volt Typhoon.

“The way China approaches cyber offence is so wildly different from the way we do, with massive investments in personnel, with massive amounts of money and compute power,” he said. “Americans, including policymakers, don’t understand that the threat is overwhelming and pervasive.”

Cyber weapons and their effects can often be invisible and hard to understand. The US government, Mr Gerstell said, could better explain what it knows about China’s offensive capabilities, to draw the public’s attention to the challenges. “If it caused us to focus more on the threat, the trade-off could well be worth it,” he said.

Gen Haugh said he hoped that in his two new roles he could bring new attention, research and focus to the threat from China.

He noted that in the annual threat assessment, the intelligence community warned of how artificial intelligence could help power efforts by adversarial countries to mount malign influence campaigns.

Ballistic Ventures, he said, was helping work on a range of challenges, including identifying “synthetic media” – propaganda pushed by Russia, China or firms they hire.

“This is one of the areas that I am excited to dive into – how do you identify synthetic media, how do you ensure that we understand the source of what we are looking at,” he said. “There’s work for industry to do.” NYTIMES