China As The Most Active Shaper Of The Cybersecurity Space

### Overview In this talk, Adam Segal explores how China has emerged as the most active shaper of cybersecurity and cyberspace globally. Segal emphasizes that policies originating in Beijing—spanning domestic regulation, technical standards, diplomacy, and foreign infrastructure investment—will fundamentally impact international technology and security ecosystems. Under President Xi Jinping, cybersecurity has been placed at the very top of the national agenda, framed around the core doctrine that modernization and national security cannot exist without digitalization and cybersecurity.

### Key Topics - **Chinese Strategic Motivations**: China's cyber strategy is driven by three core interests: domestic stability and regime legitimacy (enforced through rigorous censorship, real-name registration, VPN bans, and the Great Firewall); cybersecurity and national security (rooted in a perception of vulnerability to foreign backdoors and reliance on Western vendors like the "eight guardian warriors"); and techno-nationalism (the ambition to transition from "Made in China" to "Invented in China," avoiding the middle-income trap via initiatives like Made in China 2025, massive semiconductor investment, AI leadership plans, and quantum communications). - **Domestic Regulatory Measures**: Beijing has rolled out sweeping legislative frameworks, including the National Security Law ("secure and controllable" mandates), the Anti-Terrorism Law, and the 2017 Cybersecurity Law. These introduce the designation of Critical Information Infrastructure (CII), requiring mandatory security reviews (potentially involving source code inspection administered via the Ministry of State Security), data localization, and strict mandatory threat information sharing, supplemented by specific action plans for industrial control systems (ICS). - **International Strategy & Diplomacy**: Internationally, China projects its technical and regulatory standards through the multi-trillion-dollar Belt and Road Initiative across roughly 65 countries. In international diplomacy, China promotes "cyber sovereignty" under the UN Charter rather than Western interpretations of the laws of armed conflict, leading to the breakdown of consensus in forums like the UN Group of Governmental Experts (UN GGE). - **Key Uncertainties**: Segal highlights three major variables shaping the future: implementation friction and bureaucratic competition among Chinese agencies (e.g., CAC, MIIT, MPS, MSS, PLA); conflicting pressures on globalizing Chinese tech firms (such as Huawei and ZTE) caught between international market expectations and tighter domestic state control; and evolving US policy amid looming trade disputes and Section 301 investigations.

### Technical Details - **CII Review & Localization**: Critical Information Infrastructure operators face ambiguous designations overseen by the Cyberspace Administration of China (CAC), MIIT, and MPS. Network equipment entering CII is subject to state security reviews, potentially demanding source code access, alongside mandatory in-country data storage. - **ICS Security Initiatives**: A 2018–2020 action plan specifically addresses industrial control systems, establishing emergency management protocols, domestic standard R&D platforms, and legally mandated threat intelligence sharing to reduce dependence on foreign-serviced systems. - **Offensive & Deterrent Operations**: Chinese defense analysts conceptualize critical infrastructure cyber operations as deterrent measures against advanced Western Pacific adversaries. Technical incidents highlighted include pre-conflict operational mapping of critical infrastructure and state-level traffic redirection, exemplified by the "Great Cannon" attack that hijacked Baidu ad streams to launch denial-of-service strikes against GitHub.

### Takeaways - Foreign leverage against Beijing's cyber strategy is limited because policies tie directly to existential regime interests. However, historical precedents (such as the WAPI standard push and Green Dam censorship software) demonstrate that unified resistance from foreign governments and multinational corporations without commercial defections can force policy compromises. - Escalation risks remain elevated due to the lack of bilateral military-to-military communication—stalled since the 2014 PLA indictments—and absent definitions regarding thresholds for cyber acts of war. - Potential counter-strategies include building multilateral consensus on cyber norms among allies (e.g., EU and Japan) and demanding strict commercial and regulatory reciprocity against Chinese technology companies operating abroad.