How does Kaspersky software pose a national security risk to the US?

Question

Accepted Answer

Kaspersky Software Poses National Security Risks to the US Through System Access and Russian Government Ties

The Biden administration is moving to ban the sale of Kaspersky Lab's antivirus software in the United States due to critical national security risks. These risks stem from the software's privileged access to a computer's systems, which could enable it to steal sensitive information from American computers, install malware, or withhold critical updates. Furthermore, the firm's close ties to the Russian government are cited as a significant concern, given that Russian law permits intelligence agencies to compel assistance from Kaspersky and intercept communications within Russian networks.
Potential for Data Theft and System Compromise

Kaspersky's antivirus software, by design, requires extensive access to a computer's operating system to perform its functions. This deep level of access, described as privileged, creates a potential vulnerability. The US government has indicated that this access could be exploited to exfiltrate sensitive data from American computers. Beyond data theft, the software's capabilities could also be leveraged to introduce malicious software (malware) onto systems or to disrupt normal operations by preventing essential updates from being installed.
Close Ties to the Russian Government

A primary driver for the US government's action is Kaspersky Lab's alleged close relationship with the Russian government. Russian law provides intelligence agencies with the authority to compel assistance from companies like Kaspersky. This legal framework raises concerns that the Russian government could potentially access user data or direct the software's actions for intelligence gathering or other purposes. The Department of Homeland Security previously banned Kaspersky's antivirus product from federal networks in 2017, citing these alleged ties to Russian intelligence.
Broader Implications for Critical Infrastructure and Trade

The potential impact of these security risks extends to critical infrastructure providers and state and local governments in the US that utilize Kaspersky's software. The administration's decision to ban new sales and downloads of the software, effective September 29, aims to mitigate these risks. This action is part of a larger strategy to address potential cyber threats originating from adversary nations. The move to add Kaspersky to a trade restriction list will also impact the company's global reputation and sales by effectively barring its US suppliers from selling to it.

Reading history

Hide →

This history is cleared when the page is closed.

How does Kaspersky software pose a national security risk to the US?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

2

0

0

Share with friends