In the US, authorized private cybersecurity companies will be given the right to monitor the infrastructure of foreign hackers, block it, and even completely destroy it.
In the US, authorized private cybersecurity companies will be given the right to monitor the infrastructure of foreign hackers, block it, and even completely destroy it.
Traditionally, private companies in the US were only allowed to defend their own networks from attackers, while any offensive attacks or counterattacks in response were strictly prohibited. However, the situation is changing dramatically. A new White House program will allow verified firms to conduct offensive operations against foreign cybercriminals, operating under federal control, writes TechSpot.
President Donald Trump signed a National Security Memorandum, marking the first time in U.S. history that the federal government has officially authorized offensive cyber operations for the private sector.
The targets of the operations are foreign transnational criminal organizations that attack US citizens, American businesses, or government structures.
The program will be managed by the National Coordination Center under the Homeland Security Task Force, with joint oversight by the Executive Directors of the Department of Justice (DOJ) and the Department of Homeland Security (DHS).
To gain access to the program, private companies must sign a contract with one of the agencies and undergo a rigorous selection process. Technical capabilities, operational experience, physical security of facilities, and reliability of personnel will be checked. Official program rules are to be developed within 60 days, and they will cover both large IT corporations and small, specialized specialists.
Authorized companies will be allowed to conduct covert cyber surveillance, including accessing foreign systems without their owners’ permission. They will also be allowed to conduct more aggressive offensive operations to manipulate, disrupt, block, or completely destroy hackers’ networks, infrastructure, and data.
At the same time, the document emphasizes: this is not an unlimited license to hack.
The activities will be under strict government control: each operation requires written approval, is subject to ongoing federal oversight, and categorically prohibits any actions that threaten human life or violate international law regarding the use of force. In the event of an accidental damage to the system of a US citizen or facility, companies are required to immediately stop the operation and notify the authorities, and to guarantee compliance with the terms of the agreement, they may be required to deposit at least $ 1 million in escrow, with the risk of their confiscation for violating the rules.
Despite the potential effectiveness of involving the private sector, experts warn of significant risks: counterattacks can cause collateral damage to civilian systems through which hackers operate, the status of groups does not always allow for a quick identification of their connection with foreign intelligence services, and the company specialists themselves risk being under threat of criminal prosecution abroad.
However, the White House is resolute: "President Trump is using all available tools to stop foreign organized crime organizations that exploit Americans in cyberspace."
