The Next Level for Russia-China Cyberspace Cooperation?

On May 8, 2015, the Russian Federation and the People’s Republic of China signed a bilateral agreement on cooperation in the field of international information security. The treaty, which some have dubbed a “nonaggression pact” for cyberspace, details cooperative measures both governments pledge to undertake, including exchange of information and increased scientific and academic cooperation. With this, Russia and China continue to advance their vision of “information security,” a view of security concerns in cyberspace that is markedly different from Western approaches of “cybersecurity.”

However, a closer look reveals that the agreement follows a longstanding series of diplomatic initiatives launched by both countries. Already in 2009 Russia and China signed an agreement on cooperation in the field of international information security in the framework of the Shanghai Cooperation Organization. Later, in 2011 both countries submitted a proposal for an international code of conduct for information security to the United Nations. Although the proposal failed to garner sufficient support in the relevant Committee of the General Assembly, Russia and China redoubled their efforts. An updated version of the code of conduct is currently circulating in the UN in time for this fall’s General Assembly session. All these initiatives sought to advance Russia’s and China’s views on a variety of cybersecurity issues while shoring up their positions in international discussions. This year’s bilateral agreement is no exception in this regard.

Familiar Themes  

Second, the agreement between Russia and China also touches upon questions of Internet governance. Continuing previous efforts, the document calls for the creation of a “multilateral, democratic and transparent management system” for the Internet, giving states and their governments a greater, if not predominant, voice in the governance process. This view of multilateral Internet governance stands in contrast to the multi-stakeholder model preferred by Western states.

Novel Aspects

The treaty is most interesting for its novel aspects. Compared with past initiatives, the agreement details a remarkable level of cooperation. Whereas previous pledges of cooperation remained vague and somewhat aspirational, the current agreement provides a list of concrete measures and policies to be realized by both sides, coordinated and evaluated through two consultation meetings a year. These range from the creation of contact points and communication channels between various government entities to the realization of joint scientific projects.

Moreover, the agreement stands out for its normative aspects. It specifically provides that both countries shall cooperate in the creation and dissemination of international legal norms in cyberspace. This includes increased cooperation and coordination of positions in various international forums, including the UN, where both countries have been pushing for the negotiation of new international legal norms to regulate the use of cyber warfare.  The agreement thus formalizes their joint interest in shaping the international debate on norms in cyberspace.

Lastly, one provision has been widely reported as a “nonaggression” provision whereby Russia and China, for the first time, pledge to refrain from “computer attacks” against each other. In Article 4 the treaty provides that:

“Each Party has an equal right to the protection of the information resources of their state against misuse and unsanctioned interference, including computer attacks against them. Each Party shall not exercise such actions with respect to the other Party and shall assist the other Party in the realization of said right.”

The two sentences, in conjunction, could be read in a way to keep Russia and China from using “computer attacks” against each other. If so, this provision would be remarkable not only for its content but also for the kind of language it employs. Previously, particularly China has avoided the usage of language that could implicate the right to self-defense, which it interprets as legitimizing the use of offensive cyber activity in conflict.

On the other hand, the language of this provision is strikingly vague. Phrases such as “misuse” and “unsanctioned interference” could obviously be interpreted quite differently by both sides leaving significant loopholes in the scope of the provision. Given the magnitude of Russian and Chinese activities in cyberspace, including those directed against each other, this commitment and the seriousness with which it will be implemented are questionable. Thus, the characterization of this provision as a “nonaggression” pledge might be overstated.

Implementation Will Be Critical

Overall, the Russian and Chinese agreement continues many familiar themes. It echoes previous diplomatic initiatives that have united both countries in international cybersecurity discussions. Yet, it also offers a number of novel aspects.

In the end, however, the treaty itself is just the first step. The decisive aspect in evaluating the impact of this document will be its implementation. Particularly the implementation (or non-implementation) of the cooperation commitments, and even more so of the “nonaggression” provision, will decide whether the agreement really marks the beginning of a closer relationship between both countries or whether it will be relegated to a symbolic diplomatic effort overtaken by reality.

This article originally appeared at The Council on Foreign Relations.