Chinese firm's Canadian contracts raise security fears

mentalfloss

Prickly Curmudgeon Smiter
Jun 28, 2010
39,778
454
83
Chinese firm's Canadian contracts raise security fears
Barred by the U.S. and Australia, tech giant Huawei makes inroads in Canada

The former head of U.S. counter-espionage says the Harper government is putting North American security at risk by allowing a giant Chinese technology company to participate in major Canadian telecommunications projects.

In an exclusive interview in Washington, Michelle K. Van Cleave told CBC News the involvement of Huawei Technologies in Canadian telecom networks risks turning the information highway into a freeway for Chinese espionage against both the U.S. and Canada.

Huawei has long argued there is no evidence linking the company to the growing tidal wave of international computer hacking and other forms of espionage originating in China.

Nonetheless, the U.S. and Australia have already blocked Huawei from major telecom projects in those countries, and otherwise made it clear they regard China's largest telecommunications company as a potential security threat.

Van Cleave, who served as top spy-catcher for the Bush administration until 2006, describes Huawei as a potential "stalking horse" for Chinese military and intelligence objectives.

Even Canada's own intelligence agencies have warned the Harper government of the risks of throwing open the door to Chinese telecom companies.

Despite all the warnings, the federal and Ontario governments have rolled out the red carpet to Huawei, officially praising the Chinese company's partnerships in Canadian telecom projects with Telus, Bell, SaskTel and WIND Mobile.

During a recent visit to China, for instance, Prime Minister Stephen Harper said he was "honoured" to have witnessed the signing of large contracts for Huawei to provide Telus and Bell with the latest LTE high-speed wireless networks across Canada.

Among its many large customers, Telus has just signed a $250-million contract to provide the Canadian military with secure voice and data services worldwide.

The Ontario government has been equally enthusiastic toward Huawei, giving the telecom giant $6.5 million of taxpayers' money to locate its Canadian office and a "research facility" in the province.

Huawei last year had worldwide revenues of more than $32 billion.

For its part, Huawei has long confronted its critics with claims to be just another multinational corporation owned by its employees, free of Chinese government control, adding it would be commercially suicidal to engage in espionage.

Huawei declined to be interviewed by the CBC. Instead, the company issued a written statement late Tuesday saying, in part, that the company ensures "all our stakeholders, including governments, have a clear understanding of the tools we use to protect the integrity of our customers' networks to the highest standards.

"Over the past four years, we've worked openly and transparently in consultation with our customers and government to meet these requirements."

Van Cleave sees things differently.

"China is a totalitarian government, and Huawei operates at the sufferance of the government, and those relationships are there. Even if Huawei management wished them away, they would still be there."

Van Cleave says the intelligence community fears digital "back doors" could be hidden in the telecommunications networks, allowing spies to steal American and Canadian secrets and ultimately disrupt everything from public utilities to military operations in the event of international conflict.

She says the U.S. government's actions to prevent Huawei from taking over U.S. telecom companies, or participating in major infrastructure projects, "is the right thing to be doing."

'Considerable risk' to Canadians

The Harper government's own Department of Public Safety warned more than a year ago that Canada's telecommunications network is too important to be left to foreign companies.

In a secret memo written in 2011 and obtained under the Access to Information Act, a senior public safety official says "the security and intelligence community" believes that throwing open the Canadian telecom market to foreign companies "would pose a considerable risk to public safety and national security."

While large sections of the secret memo were withheld from release, intelligence sources say the biggest concern was the Chinese.

Van Cleave says China indeed remains the No. 1 espionage threat to the United States, mainly through computer hacking aimed at stealing everything from proprietary technologies to defence secrets.

And it's only getting worse.

The former counter-intelligence boss says frankly: "I would be hard-pressed to say we are winning."

The U.S. International Trade Commission estimates that in 2009 alone, Chinese theft of U.S. intellectual property cost almost a million American jobs, and $48 billion in economic losses.

Van Cleave wonders why Canada hasn't intervened with Huawei.

"Isn't there a process for… the [Canadian] government to step in?"

Canada targeted by hackers

Last year, the Canadian government itself was hit with its worst-ever hacking attack from China, penetrating the highly classified computer systems in at least three federal departments: Finance, Treasury Board and Defence Research.

Documents obtained by CBC show the hackers managed to steal large amounts of classified data before the computer systems could be shut down.

Eighteen months later, those computer systems remain corrupted and unable to connect directly to most of the internet without losing more data to the as-yet-unidentified Chinese spies.

More recently, a former executive of now bankrupt Nortel has blamed Chinese technology theft for hastening the demise of the former Canadian telecom giant.

So, why is the Canadian government greeting Huawei with open arms?

From a business perspective, Huawei is apparently hard to resist.

The upstart WIND Mobile, for instance, used Huawei to build a whole new wireless network in Canada, and has publicly gushed about the Chinese company's high-quality products, reliable service and lower prices than the competition.

China's exploding marketplace of over a billion consumers is also an offer most multinational companies and Western governments — Canada's included — find hard to refuse.

The Harper government, for one, has done a complete about-face with respect to China over the past six years, from a prime ministerial cold shoulder to an all-out trade love-in.

Huawei is bending over backward to show it is a good corporate citizen. For instance, it has put up $1.4 million along with Telus to fund a new centre for cutting-edge research into so-called cloud computing at Ottawa's Carleton University.

Michel Juneau-Katsuya, a security expert and former member of Canada's spy service, says the Harper government is "absolutely" taking a big risk with Huawei, and appears to be ignoring warnings from the U.S., Australia and other allies.

He says there's little doubt CSIS "did its homework" on Huawei, and passed along the information and resulting security recommendations to the Prime Minister's Office.

"Unfortunately, the PMO is very nonchalant when it comes to security," said the intelligence expert. "They have an agenda, a political agenda … and they disregard some of the warnings coming from the official agencies."

Juneau-Katsuya said one of the dangers in Huawei's having access to the Canadian telecommunications network is that it could damage intelligence sharing with the Americans.

He says Canada remains one of China's most important espionage targets precisely because of our close intelligence relationship with the U.S. and other allies.

"If we have not taken certain responsibilities and certain steps to protect ourselves, then our allies will have to assume we have been compromised, and cut communication from their end."

U.S., Australia wary

One thing the Canadian government could not possibly have missed is all the controversy about Huawei in the U.S. and Australia.

In the past five years, there has not been a time when at least one U.S. government agency involved in security hasn't been holding hearings, writing reports and otherwise investigating the possible threats posed by Chinese telecommunications companies such as Huawei.

The CIA, the FBI, the Department of Homeland Security, the Pentagon, the White House, Congress, the list goes on — all of them have tried to dissect Huawei's activities and intentions in the U.S. and beyond.

The latest of these is an investigation by the powerful House intelligence committee into "the threat posed by Chinese-owned telecommunications companies."

In announcing the probe, committee chairman Mike Rogers said: "We are looking at the overall infrastructure threat and Huawei happens to be the 800-pound gorilla in the room.

"As the formal investigation begins, I stand by my caution to the American business community about engaging Huawei technology until we can fully determine their motives."

The U.S.-China Economic and Security Review Commission, an independent agency created by Congress, has produced two thick reports on the role of Chinese telecoms in the growing problem of cyber-espionage against the West.

Both reports conclude there is reason to be wary of Huawei.

Mike Wessel is a sitting member of the commission, and suggests Huawei is a clear and present danger to both the U.S. and Canada.

"Our [telecommunications] systems are not only seamless, they are completely intertwined," Wessel said in an interview with CBC News.

"If it's a security concern for us … why aren't we concerned about what may be happening across the border?"

Australia has taken an even tougher stand than the U.S., telling Huawei there was no point even bidding on that country's largest ever telecommunications expansion.

The Chinese government has dismissed the allegations, accusing Australia of trade protectionism.

But Australia's foreign affairs minister, Bob Carr, later told reporters that the decision on Huawei was purely "on security grounds, reflecting a focus by Australia on the resilience and security of core infrastructure."

Bell and Telus declined interview requests for this story but issued prepared statements.

Bell states in part: "For a company like Bell, security is of primary importance. We work with government and the Canadian and international telecom industry to ensure Bell always offers the highest possible levels of security to our customers.

"We are confident in our network suppliers, including of course Huawei [which] partners with most of the world's carriers."

Telus never mentions Huawei in its statement: "Like all telecommunications companies, we implement the best security safeguards into our network leveraging our own extensive expertise, and the expertise of federal security agencies."

Finally, Public Safety Minister Vic Toews issued a written statement late Tuesday saying that while the government has taken "strong steps" to open the mobile phone sector to competition, it will "continue to ensure that Canadians can rely on telecommunications infrastructure that's safe and secure."

One of the most vocal and colourful critics of Huawei in Washington is congressman Frank R. Wolf.

"The Chinese are the most aggressive spying in this town, and my sense is in Canada and many other places," Wolf said in a recent interview on Capitol Hill.

The congressman comes by his concern about Chinese cyber-espionage through personal experience.
In 2007, hackers traced to China hit his congressional office computers, "and got to everything."

Chinese firm's Canadian contracts raise security fears - Politics - CBC News
 

mentalfloss

Prickly Curmudgeon Smiter
Jun 28, 2010
39,778
454
83
How telecom systems can be compromised

Hardware and software provided by foreign suppliers, particularly those suppliers with strong government connections, can compromise the security of Canada's telecommunication systems and leave them vulnerable to attack, computer experts warn.

"If you buy equipment or software that's essentially produced by the government of another country, then you have no control over what that software or hardware might be doing that you can't see," said Prof. David Skillicorn at the school of computing at Queen's University in Kingston, Ont.

"It's the reason we don't buy fighter planes from the Russians. If you're running on hardware that somebody else built, and you don't trust the somebody else, then it's never going to do, securely, what you want it to do."

Other experts agree that sensitive buyers need to know exactly what it is they are purchasing.

"You can hide things in software. You can hide things in hardware," says Thomas Dean, a professor in the department of electrical and computer engineering at Queen's.

"Hardware components can do all sorts of things. They can record things. They can transmit things. They can also be a back door for disabling" parts of a system.

In recent days, concerns have been raised over the Harper government's decision to allow China's Huawei Technologies to participate in large Canadian telecommunication projects with companies like Bell, Telus and WIND Mobile.

The company has been blocked by the U.S. and Australia when it attempted to participate in similar projects in those countries. Some have accused Huawei of engaging in espionage on behalf of the Chinese government, an accusation Huawei has vehemently rejected.

Intelligence officials have long been worried that foreign-controlled technology companies could potentially hide digital "back doors" in telecommunication networks that might steal Canadian secrets or disrupt operations.

"It means that if you buy a switch from a company it [could] take a copy of everything that passes through it and send it off to some other place," Skillicorn said.

"It would have to be transmitted in a covert way, but that’s not all that difficult a problem if you control the whole ball game."

Skillicorn said the problem with hardware is that it's difficult to inspect the equipment that you're getting because so much of it is "working down at the very, very small scale.

"So you would have to tear the chips apart and look at them in incredible detail."

Skillicorn noted that when it comes to intelligence sharing between Canada and its allies, Ottawa would never consider using anyone else's equipment for the top, most secure levels of communication.

However, at the next level down, governments are starting to use encrypted communication over shared channels that are basically part of the public infrastructure.

"So now you have to rely on how strong you think your encryption is rather than concealing the traffic completely from people who might be your enemies."

"There’s always been rumours that there are encryption back doors that are known to government intelligence organizations that let them get into encrypted stuff relatively easy."

But Skillicorn warned that even if the data can't be extracted, a hostile agent could use what's called a kill switch to disrupt systems entirely.

"I can cut off your network completely and utterly at every level whenever I feel like it," using such a switch, he said. "That of course would have a huge impact at every level including the military," he said.

"They could have their switches turn themselves off on a particular date, for example. Once you have the potential, you can think up all sorts of ways to do very bad things."

When it comes to manipulating telecommuncations systems, Dean said there is also the potential risk of modification, meaning the way in which a hidden program might change or redirect a particular communication, like an email for example, as it passes through.

"It's not unthinkable to talk about something that could actually modify traffic. That's a little bit more remote of a threat, but it's certainly not unreasonable."

How telecom systems can be compromised - Canada - CBC News