Universities have become part of the infrastructure through which strategic technologies, specialist knowledge and research talent move across borders.
Why it matters: In cyber and other dual-use fields, the distinction between academic exchange and national-security exposure can be difficult to draw — particularly when the two sides operate under very different institutional models.
The big picture: One Network, Two Systems – The Research Security Risks of UK/China University Cyber Partnerships, written by Eugenio Benincasa for UK-China Transparency, identifies 34 structured UK-China partnerships in cyber-related disciplines.
- Thirteen involve Chinese institutions that the report links closely to the country’s defence research architecture: four with universities cleared for Top Secret work and nine with Secret-cleared or SASTIND-affiliated institutions.
- The central argument is about asymmetry. British universities may work with defence agencies and contractors, but those relationships are generally project-based and institutionally separable from civilian research.
- In China, the report argues, the Military-Civil Fusion strategy makes the integration of civilian research, industry and national-defence objectives a systemic feature. Some Chinese universities engaged in international academic cooperation can therefore also hold institutional clearances for classified weapons and defence research.
Zoom in: The report gives particular attention to the Beijing University of Posts and Telecommunications, or BUPT, and its long-standing relationship with Queen Mary University of London. The partnership, established in 2004, has expanded into joint undergraduate programmes, co-supervised PhDs, laboratories, an innovation centre and a second campus in Hainan.
- By 2024 it had produced more than 9,600 dual-degree graduates, while Scopus recorded 465 co-authored computer-science publications. The report says some BUPT faculty active in this research ecosystem also have defence-linked funding affiliations or conduct classified research.
- A second case concerns Beihang University, one of China’s “Seven Sons of National Defence”. UK-China Transparency says Beihang identifies Queen Mary, Manchester and Surrey among its strategic partners in cyber-related activities, even where those relationships are less visible on the British side. The report also points to research collaboration in dual-use areas involving faculty whose profiles show military applications or defence-designated projects.
- One of the most significant examples is Beihang’s relationship with Beijing Integrity Technology. Its cyber school established a joint laboratory with the company in 2018. Integrity Technology was later sanctioned by the United States, United Kingdom and European Union over its alleged role in enabling state-sponsored cyber activity associated with Flax Typhoon.
The research-security gap. Britain already has mechanisms including the Trusted Research framework, the Research Collaboration Advice Team and the Academic Technology Approval Scheme. But the report argues that they remain predominantly advisory or focused on individuals rather than on the institutional structures through which knowledge can move: joint degrees, research centres, laboratories and co-supervised doctorates.
- The paper’s recommendations include a government-backed list of high-risk foreign research organisations, dedicated research-security officers inside universities, financial support for institutions seeking to restructure problematic partnerships and security briefings for staff travelling to China.
- Crucially, the report does not advocate blanket academic disengagement. Its stated objective is targeted risk management rather than broad restrictions on cooperation with China.
Why Italy should pay attention. The issue is not confined to Britain. The report’s EU appendix maps comparable joint education programmes across member states and includes Italy itself. It lists a joint education institution established in 2006 between the Polytechnic University of Turin and Tongji University. In the report’s dataset, Tongji is classified at Secret level within the Chinese system.
- That does not establish that the Italian partnership involves improper technology transfer or security breaches. But it makes the British debate relevant to Rome as well.
- Italy has a strong university and research base in engineering, aerospace, telecommunications, artificial intelligence and cybersecurity — exactly the areas where civilian innovation can overlap with dual-use applications.
- The question raised by the UK case is therefore also an Italian one: whether research-security screening looks only at individual projects and researchers, or whether it also considers the institutional position of foreign partners, their links to defence structures and the possible downstream use of jointly developed expertise.
The European dimension matters too. The report notes that the EU has already excluded the Seven Sons universities from parts of Horizon Europe, reflecting a broader shift from largely open scientific cooperation toward differentiated risk assessment in sensitive technologies.
For Italy, which operates inside both the European research ecosystem and Nato’s technological-security architecture, the challenge is to build screening mechanisms capable of protecting legitimate scientific cooperation while identifying the limited number of partnerships where the strategic risk is materially higher.
The bottom line: The UK case shows how research security is moving from the margins of university governance into the wider debate over technological and economic security.
- For Britain — and increasingly for Italy and the rest of Europe — the difficult question is where legitimate scientific cooperation ends and strategic vulnerability begins.
