本帖最后由 渔音谦谦 于 2009-10-25 16:50 编辑
【中文标题】中国的网络战争？
【原文标题】Cyber war with China?
【登载媒体】EXAMINER
【原文链接】http://www.examiner.com/x-17537- ... yber-war-with-China
【译者】满仓
中国在全球范围内的网络间谍活动已经人所共知。印度认为中国的网络作战方针是要在2050年攫取全球的“电子支配权”，它相信中国的作战能力可以扰乱敌人的信息基础设施。这些所谓的方针包括扰乱金融市场、军队和平民的通讯策略，以及在发动传统的军事行动前摧毁敌人关键基础设施的策略。
近期的攻击已经深入到系统架构的资源。有报道描述，被窃取的大部分数据都与国防和政策有关，并且有政府参与。这类网络入侵被认为是中国过去10年以来所部署的庞大的“信息战争”策略的一部分行动。
美中经济安全观察委员会在本周发表的一份报告中提到，中国在美国进行的网络间谍行动现在瞄准了私人公司。报告中的一张时间表还显示出，一系列来自中国境内的攻击都是针对美国政府的电脑，包括外交部、白宫、宇航局和国防部。报告的标题是《中华人民共和国实施网络战争和开发计算机网络的能力》，其中提到：“针对来自中国的入侵中所发现的操作手法的技术评价，是基于大范围的司法鉴定分析和与长期关注此问题的信息安全专家们讨论的结果。”
报告进一步强调了一次被认为是来自中国的攻击，两组黑客相互协作，通过一次精密、老练的行动窃取了一家未指明的“大型”美国公司的数据。一组人破坏了安全系统，另一组人将一些文件转移到服务器上。报告这样描述：“这次事件组织有序、操作标准、技术精良，直接进入到高端软件的开发资源，需要对目标网络有深入的了解，并且有能力在目标网络内部进行持续性的活动，有时活动期会持续一个月。”
黑客窃取了他们早已获取了访问许可的文件，但是他们在下载之前并没有把文件打开，这表明他们早就知道自己在找什么。报告说：“针对这次行动的分析表明，对方或许是在精细的事前调查阶段就已经识别出文件路径、文件共享、服务器、用户账号、员工的全名、密码政策和网络上的分组成员。”
中国外交部如此回应：“该委员会经常抛出‘中国威胁’论，这等于提出了一个‘冷战学说’。它应当停止继续发布类似的报告，而是去做一些有益于中美关系的事情。”
近期的攻击已经引起很多国家关注这样的网络威胁，但是目前没有见到任何针对这些攻击的外交斡旋行动。
6月23日，国防秘书Gates批准成立了统一的美国网络指挥部，监控针对军队网络设施的信息攻击保护措施。Gates指示美国战略司令部的指挥官开发CYBERCOM的行动方案，这是新的统一指挥部即将使用的名称。
你是怎么看待中国网络威胁的？这是一次行动还是一场战争？
原文：
China is becoming known for its global cyber espionage efforts. India believes that China's Cyber Warfare Doctrine is designed to achieve global "electronic dominance" by 2050. It believes that China’s capability would have the capability to disrupt the information infrastructure of China’s enemies. This doctrine includes strategies that would disrupt financial markets, military and civilian communications capabilities and other parts of an enemy's critical infrastructure prior to the initiation of traditional military operations.
Recent attacks have resulted in deep access to resources and system architectures. Most of the data that is reported to have been stolen has been defense- and policy-related, suggesting a state actor, the report says. The network intrusions are thought to be part of a broader "information warfare" strategy that China has been developing for the past 10 years.
A new report released this week by The U.S.-China Economic and Security Review Commission noted that China’s cyber espionage operations in the United States are now targeting private companies. A time line in the report also shows a series of previous attacks from within China on U.S. government computers, including those belonging to the Department of State, White House, NASA, and Department of Defense agencies. The report entitled "Capability of the People's Republic of China to Conduct Cyber Warfare and Computer Network Exploitation," states that: "Technical assessments of operational tradecraft observed in intrusions attributed to China are the result of extensive forensic analysis and discussions with information security professionals who follow these issues closely."
The report further highlights an attack that was believed to be China-based, where two groups of hackers worked in tandem on a sophisticated operation to steal data from an unspecified "large" U.S. company. One group worked to crack the security systems while another moved specific files onto severs. The report goes on to note that: "The problem is characterized by disciplined, standardized operations, sophisticated techniques, access to high-end software development resources, a deep knowledge of the targeted networks, and an ability to sustain activities inside targeted networks, sometimes over a period of months,"
The hackers stole specific files, for which they had gained file permissions. However, they didn't open the files before downloading them, which suggests that they knew what they were looking for. "Analysis of the operation suggests that the adversaries previously identified specific directories, file shares, servers, user accounts, employee full names, password policies, and group memberships on the network, likely during their detailed reconnaissance phase," the report says.
The Chinese Foreign Ministry responded that: “The commission has always played up 'China threat,” "It has arisen out of a 'Cold War mindset’. The commission should stop releasing such kind of reports and instead do something that will benefit the China-U.S. relations."
These recent attacks have brought the cyber threat to the attention of many countries. Diplomatic efforts to address these attacks have seen no progress.
In June Defense Secretary Gates today approved the creation of a unified U.S. Cyber Command to oversee the protection of military networks against cyber threats. Gates directed the commander of the U.S. Strategic Command to develop implementation plans for CYBERCOM, as the new unified command will be called.
What do you think about the Chinese cyber threat? Is this an act of war? |
狗仔卡
发表于 2009-10-25 16:04
提升卡
变色卡
抢沙发
千斤顶
显身卡
发表于 2009-10-25 17:01
