Boosting Cybersecurity Measures: Beyond Chip Bans to Ensure Critical Network Protection

Receive free updates on Cyber warfare

We’ll send you a myFT Daily Digest email summarizing the latest Cyber warfare news every morning.

Governments around the world are imposing bans on foreign hardware in critical infrastructure due to concerns about national security. However, experts in global cyber threats are questioning the effectiveness of this strategy, as it may only escalate geopolitical tensions while leaving vulnerabilities in other areas.

In May, China announced that domestic infrastructure operators would no longer be allowed to purchase computer chips or components from the American semiconductor company Micron Technology, citing “serious network security risks.”

This move prompted the US Commerce Department to state that China’s decision had “no basis in fact” and was “inconsistent with [its] assertions that it is opening its markets and is committed to a transparent regulatory framework.”

China is not the only country implementing component bans based on security assessments. The US government has long taken a tough stance on Chinese tech companies like Huawei and ZTE. During his presidency, Donald Trump banned the use of their products in federal departments, and Joe Biden’s administration has since tightened these restrictions.

The EU has also advised its member states not to use telecommunications equipment from Huawei and ZTE in their 5G networks to enhance bloc-wide security. Similarly, the UK is in the process of removing Huawei technology from its 5G network “in response to US sanctions” related to Chinese technology.

“Western governments are taking legitimate measures to reduce their cyber security and critical infrastructure risks,” says Alastair MacGibbon, Chief Strategy Officer at cyber security company CyberCX. However, he suggests that China’s bans on Western tech are likely “more retaliatory in nature” and “a mere facade” at best.

Some experts see other motives behind China’s cyber policy. Alan Calder, CEO of governance, risk management, and compliance consultancy GRC International Group, believes that China’s Micron ban shows its desire to reduce dependence on US tech as it seeks “global dominance” and prepares for potential conflicts with the US.

However, Chris Grove, Director of Cyber Security Strategy at cyber security software company Nozomi Networks, suggests that China’s Micron ban was driven more by financial motives than national security concerns. According to Grove, by excluding Micron, China aims to gain a competitive edge in an industry where it previously struggled with its own semiconductors. However, Grove thinks this strategy may backfire if overseas companies move their manufacturing elsewhere.

Even when hardware bans are intended to protect critical infrastructure from cyber attacks, they may not achieve the desired outcomes. Bharat Mistry, Technical Director at cloud and endpoint security company Trend Micro, regards it as a “silver bullet” approach and warns that nation-state hackers can still infiltrate critical infrastructure through other means. For example, they can exploit vulnerabilities in outdated software or carry out social engineering attacks that trick victims into compromising their security.

Yuval Wollman, former Director-General of the Israeli Intelligence Ministry and President of software provider CyberProof, agrees that the choice of hardware is just a small part of bolstering cyber security for national infrastructure. Wollman emphasizes the importance of implementing an effective incident response plan, training employees to detect cyber attacks, investing in firewall and intrusion detection systems, and regularly updating software to prevent hackers from exploiting vulnerabilities.

Looking ahead, cyber attacks are expected to evolve as criminals and nation states increasingly leverage artificial intelligence. Thus, focusing on building defenses against this technology will be crucial for maintaining national security in the coming decades, rather than solely relying on hardware bans.

“The cyber risks are just one aspect of foreign tech bans,” says Katell Thielemann, Distinguished Vice President Analyst at market research provider Gartner. “Larger geopolitical competitive forces cannot be ignored and will continue to unfold in other technological domains such as AI, quantum computing, space systems, or biotech.”