Workflow
微软主动防护计划(MAPP)
icon
Search documents
心智观察所:美国网络安全智库的“反华合唱团”
Guan Cha Zhe Wang· 2025-09-22 01:58
Core Viewpoint - The article discusses the increasing scrutiny and criticism of Chinese cybersecurity companies by U.S. experts and institutions, particularly focusing on the actions of Dakota Cary and the implications for the cybersecurity industry. Group 1: Criticism of Chinese Cybersecurity Companies - Dakota Cary, a prominent figure in U.S. cybersecurity, has accused several Chinese companies, including Alibaba and Baidu, of being "weapons suppliers" for state-sponsored hacking, distorting the nature of penetration testing services [1][3][6] - Cary's claims are seen as part of a broader strategy to isolate Chinese cybersecurity firms from international collaborations, particularly the Microsoft Active Protections Program (MAPP) [6][7] - Following Cary's accusations, Microsoft announced restrictions on Chinese companies' access to vulnerability information, which was celebrated by Cary as a victory [7][8] Group 2: Historical Context and Evolution - The article traces the origins of U.S. criticism of Chinese cybersecurity back to a 2012 congressional hearing where Richard Bejtlich accused the Chinese government of extensive cyber espionage [9][13] - This hearing marked the beginning of a decade-long focus on China as a primary adversary in cyberspace, leading to a series of reports and accusations against Chinese firms [13][14] - The narrative has evolved, with newer figures like Cary taking the lead in shaping public perception and policy against Chinese cybersecurity entities [17][20] Group 3: The Role of U.S. Cybersecurity Firms - U.S. cybersecurity firms, such as SentinelOne, have benefited from the political climate by increasing government contracts, with SentinelOne's government orders rising from 12% in 2021 to 37% by 2025 [32][33] - The article highlights a pattern where U.S. cybersecurity companies publish reports that criticize Chinese firms, which in turn helps them secure government contracts and funding [32][34] - The rise of companies like CrowdStrike and SentinelOne is linked to their ability to align with U.S. government interests and narratives against China [33][34] Group 4: Response from Chinese Cybersecurity Firms - In response to the accusations, Chinese cybersecurity companies have begun to publish their own reports exposing U.S. cyber activities, aiming to counter the narrative and assert their capabilities [36][37] - Reports from firms like Qihoo 360 and Antiy have detailed U.S. cyber attacks, marking a shift towards a more aggressive defense strategy against U.S. claims [35][36] - The article notes that these responses are part of a broader struggle for legitimacy and recognition in the global cybersecurity landscape [34][38] Group 5: Future Implications - The ongoing conflict between U.S. and Chinese cybersecurity firms reflects a larger geopolitical struggle, with implications for international cybersecurity cooperation and competition [48][49] - The article suggests that the U.S. is conducting a comprehensive assessment of China's cybersecurity capabilities, which may signal preparations for future cyber confrontations [48][49] - The narrative constructed by U.S. experts may influence policy decisions and funding allocations within the U.S. government, further entrenching the divide between the two nations in the cybersecurity domain [57][58]