Leonid Bershidsky, Columnist

We Need Cyberwar Rules of Engagement Now

The U.S. and Russia need to agree on basic notions, such as what constitutes an attack, as opposed to a mere nuisance.
Illustration: Oscar Bolton Green

Today, Russia and the U.S. are engaged in creeping cyberwarfare against each other, and they may well be working to disable or undermine each other’s critical infrastructure. The conflict is potentially deadly and, unlike military interactions between the two adversaries, not subject to even the most rudimentary rules or mutual arrangements. That needs to be fixed, and although a multilateral process under the auspices of the United Nations or the G-20 would be preferable, a bilateral working group, of the kind proposed by Russian President Vladimir Putin during his recent meeting with U.S. counterpart Donald Trump, could be a useful start.

The greatest tension in cyberspace today is between the U.S. and Russia; the two can lead the way in defusing it. They have experience doing so on nuclear disarmament after taking the world to the brink of catastrophe. An agreement could serve as a blueprint for a multilateral convention or other bilateral deals—say, with China, which has been known to take an interest in U.S. networks.