Southeast Asian ‘white hat’ urges more countries to sign the Paris Call

The Paris Call in Southeast Asia

The Paris Call was launched late last year by French president Emmanuel Macron with the intention of bringing together countries and supporters from across the world on a consensus statement relating to growing concerns about cyber threats.

According to the Nuclear Threat Initiative based in Washington DC, the signatories agreed on the importance of a peaceful cyber space, the relevance of international law and responsible behaviour by governments, and the threat posed by malicious cyber activities.

The signatories include 67 states, 139 international and civil society organisations, and 358 private-sector companies, including Huawei which joined the Paris Call earlier this month. In Southeast Asia, only Singapore and the Philippines have signed the Paris Call.

Countering the next frontier of warfare

To Fong, the Paris Call represents an international cyber security agreement-in-principle to counter the next frontier of warfare.

“State-sponsored cyber attacks are already an integral part of military strategy for many countries,” said Fong, adding that cyber warfare presents a multitude of threats towards nations which are not adequately prepared for such attacks.

“At the most basic level, cyber attacks could be used to support traditional warfare. For example, tampering with the operation of air defences via cyber means could be intended to facilitate air attacks, conducting espionage or even spreading propaganda,” he said.

He also cited the Stuxnet worm of a decade ago as “a good textbook study of how state-sponsored cyber attacks could infiltrate deep into enemy territory”.

“Stuxnet was extremely sophisticated and based on its complexity and heavy financial resources needed for its development, we believe that the worm was developed and orchestrated at the state level,” Fong said.

When asked to cite first-hand examples of foreign attacks, Fong said over the past decade, he had personally witnessed several severe cyber attacks against clients mostly in the banking and financial services industry.

“We have observed highly coordinated cyber attacks against top financial services targets which would not had been possible without proper planning and attack strategies coupled with their manner of deployment.

“Given the sophistication of such attacks encountered, we can only conclude that they were possible only because of strong financial support in the background to fund research and development before the execution.”

To Fong, cyber threats will always loom in the background. “In our daily lives, they could be in the form of ransomware attacks or criminals stealing credit card numbers or personal information,” he said.

“Potentially even more disruptive, however, would be attacks on critical infrastructure such as the electric grid, or even militarily significant attacks that could spark or amplify international conflicts,” Fong added. “Hence, the world should come together as one to address such issues.”