Dr. Chenxi Wang, from Twistlock, talks about hacking regulation and legislation with CSO in a series of topical discussions with industry leaders and experts.
Hacked Opinions is an ongoing series of Q&As with industry leaders and experts on a number of topics that impact the security community. The first set of discussions focused on disclosure and how pending regulation could impact it. Now, this second set of discussions will examine security research, security legislation, and the difficult decision of taking researchers to court.
CSO encourages everyone to take part in the Hacked Opinions series. If you would like to participate, email Steve Ragan with your answers to the questions presented in this Q&A. The deadline is October 31, 2015. In addition, feel free to suggest topics for future consideration.
What do you think is the biggest misconception that lawmakers have when it comes to cybersecurity?
Dr. Chenxi Wang, chief strategy officer at Twistlock (CW): The biggest misconception that I see is that lawmakers thinks that cyber security research needs to be regulated, and that a one-country, top-down based approach can solve the problem.
Lawmakers don’t necessarily have the insight and expertise to fully understand this issue – not sure they can even competently decide which activities constitute “hacking, and which are not.
Also, how do we regulate hacking when China does not consider it as “hacking”? Regulations maybe able to help in certain aspects, but they are almost decidedly affect someone’s cyber security posture.