|
|
【原文标题】2 China Schools Said to Be Tied to Online Attacks
【中文标题】两所中国学校据称与黑客攻击有关
【发表时间】2010年2月19日
【登载媒体】纽约时报
【原文链接】http://www.nytimes.com/2010/02/19/technology/19china.html
【译者】静水伊涟
【声明】本文仅供AC翻译交流，转载请注明出处
【原文库链接】http://bbs.m4.cn/forum.php?mod=viewthread&tid=224213&extra=&page=1
By JOHN MARKOFF and DAVID BARBOZA
Published: February 18, 2010
2010年2月18日
SAN FRANCISCO — A series of online attacks on Google and dozens of other American corporations have been traced to computers at two educational institutions in China, including one with close ties to the Chinese military, say people involved in the investigation.
旧金山报道：中国的两所教育机构被认定与一系列针对谷歌以及其他多个美国公司网站的网络攻击有关，调查人员同时表示，其中一所与中国军方有密切联系。
Daniel Rosenbaum for The New York Times
James C. Mulvenon said the Chinese government often used volunteer “patriotic hackers” to support its policies.
以下是纽约时报记者Daniel Rosenbaum发回的报道
James C. Mulvenon声称中国政府经常利用“爱国黑客”当志愿者来支持推行其政策。
They also said the attacks, aimed at stealing trade secrets and computer codes and capturing e-mail of Chinese human rights activists, may have begun as early as April, months earlier than previously believed. Google announced on Jan. 12 that it and other companies had been subjected to sophisticated attacks that probably came from China.
他们同时还表示，这些攻击最早可能于去年4月就已经开始实施，比之前所言早了数月。这些攻击旨在窃取商业机密和电脑密码，并截获中国人权活动者的电子邮件。谷歌公司于今年1月12日发表声明，称它及其他公司遭到可能来自中国的高技术黑客的精心攻击。
Computer security experts, including investigators from the National Security Agency, have been working since then to pinpoint the source of the attacks. Until recently, the trail had led only to servers in Taiwan.
包括来自国家安全局的调查员在内的电脑安全专家们自此展开调查，以核实这些攻击来源。直到不久前，调查追踪到位于台湾的服务器上。
If supported by further investigation, the findings raise as many questions as they answer, including the possibility that some of the attacks came from China but not necessarily from the Chinese government, or even from Chinese sources.
即便能够有更进一步的调查支持，其成果也让人疑窦丛生，这其中包括有一些攻击可能是来自中国，但并没有足够证据证明这是政府行为，甚至不能说明其根源就在中国。
Tracing the attacks further back, to an elite Chinese university and a vocational school, is a breakthrough in a difficult task. Evidence acquired by a United States military contractor that faced the same attacks as Google has even led investigators to suspect a link to a specific computer science class, taught by a Ukrainian professor at the vocational school.
而随着对攻击来源的调查深入，这项艰苦工作取得重大突破：一所中国高等学府和一所技术学校浮出水面。一家遭受到和谷歌公司一样袭击的美国军火商搜集到的证据，让调查人员开始对一门由该技校乌克兰教授所执教的专业计算机科学课程产生怀疑。
The revelations were shared by the contractor at a meeting of computer security specialists.
这一事实在一次由计算机安全专家参与的会议上被公之于众。
The Chinese schools involved are Shanghai Jiaotong University and the Lanxiang Vocational School, according to several people with knowledge of the investigation who asked for anonymity because they were not authorized to discuss the inquiry.
据不愿透露姓名的调查相关人士（因为他们没有讨论此事的权利）表示，涉案的学校正是上海交大和山东蓝翔职业技术学院。
Jiaotong has one of China’s top computer science programs. Just a few weeks ago its students won an international computer programming competition sponsored by I.B.M. — the “Battle of the Brains” — beating out Stanford and other top-flight universities.
交大拥有中国最顶尖的计算机课程。仅仅几周前，它的学生还在由IBM公司赞助的一项国际计算机编程大赛“脑力大赛”中击败了斯坦福和其他强有力的竞争者，勇夺桂冠，
Lanxiang, in east China’s Shandong Province, is a huge vocational school that was established with military support and trains some computer scientists for the military. The school’s computer network is operated by a company with close ties to Baidu, the dominant search engine in China and a competitor of Google.
蓝翔技校在中国东部山东省，这是一所由军方资助建立，为军方培养军事计算机科学家的大型技术学校。该校计算机网络被一家与百度集团有密切联系的公司操控，而百度正是中国搜索引擎老大，也是谷歌公司的竞争者。
Within the computer security industry and the Obama administration, analysts differ over how to interpret the finding that the intrusions appear to come from schools instead of Chinese military installations or government agencies. Some analysts have privately circulated a document asserting that the vocational school is being used as camouflage for government operations. But other computer industry executives and former government officials said it was possible that the schools were cover for a “false flag” intelligence operation being run by a third country. Some have also speculated that the hacking could be a giant example of criminal industrial espionage, aimed at stealing intellectual property from American technology firms.
在计算机安全工业和奥巴马执政框架内，分析人士对如何解释此次攻击来自学校而非中国军方或政府机构这一发现意见不一。一些分析家私下传阅的一份文件称，这家技校的背后是中国政府在操刀。但其他计算机工业执行官和前政府官员认为，也许这两所学校是被第三国掌控的“披着中国国旗的外国狼”。另一些专家则表示这次攻击可以被视为是工业间谍犯罪的极佳典范，其目的在于从美国技术公司窃取知识产权。
Independent researchers who monitor Chinese information warfare caution that the Chinese have adopted a highly distributed approach to online espionage, making it almost impossible to prove where an attack originated.
监测中国信息战的独立研究机构警告，中国的网上间谍行为采取了高度分散的接入途径，几乎不可能证明攻击究竟源自何处。
“We have to understand that they have a different model for computer network exploit operations,” said James C. Mulvenon, a Chinese military specialist and a director at the Center for Intelligence Research and Analysis in Washington. Rather than tightly compartmentalizing online espionage within agencies as the United States does, he said, the Chinese government often involves volunteer “patriotic hackers” to support its policies.
“我们必须认识到，他们（中国人）拥有不同的计算机网络研发手段，”James C. Mulvenon，中国军事问题专家、华盛顿情报研究与分析中心主任这样说。不同于美国将网络间谍活动严格控制在机构内部、并紧密分区，中国政府经常利用“爱国黑客”志愿者来支持其政策实施。
Spokesmen for the Chinese schools said they had not heard that American investigators had traced the Google attacks to their campuses.
两所当事学校的发言人都声称他们没有听说过美国调查员将对谷歌公司的攻击追踪到他们学校头上。
If it is true, “We’ll alert related departments and start our own investigation,” said Liu Yuxiang, head of the propaganda department of the party committee at Jiaotong University in Shanghai.
如果属实，“我们将对有关学院提出警告并展开调查，”上海交大党委宣传部部长刘玉祥说。
But when asked about the possibility, a leading professor in Jiaotong’s School of Information Security Engineering said in a telephone interview: “I’m not surprised. Actually students hacking into foreign Web sites is quite normal.” The professor, who teaches Web security, asked not to be named for fear of reprisal.
但当被问及（涉及此事）的可能性时，交大信息安全工程学院的一位教授在电话采访中这样回答：“我一点也不吃惊。实际上，学生攻击国外网站实在太正常了。”这位教授网络安全的教授因害怕遭到报复而不愿意透露姓名。
“I believe there’s two kinds of situations,” the professor continued. “One is it’s a completely individual act of wrongdoing, done by one or two geek students in the school who are just keen on experimenting with their hacking skills learned from the school, since the sources in the school and network are so limited. Or it could be that one of the university’s I.P. addresses was hijacked by others, which frequently happens.”
“我相信这一情况有两种可能，”这位教授继续说道，“要么是它（攻击）完全是个人的不法行为，一般是由一到两个有特殊才能的学生在校内实施的，他们仅仅是狂热地喜欢将他们在学校学到的黑客技术予以实施。要么就是某个学校IP地址遭到黑客窃取，而这时有发生。”
At Lanxiang Vocational, officials said they had not heard about any possible link to the school and declined to say if a Ukrainian professor taught computer science there.
在蓝翔技校，校方声称他们从未听说过任何学校与此事有关的传闻，并拒绝答复是否有一位乌克兰教授在该校教计算机科学。
A man named Mr. Shao, who said he was dean of the computer science department at Lanxiang but refused to give his first name, said, “I think it’s impossible for our students to hack Google or other U.S. companies because they are just high school graduates and not at an advanced level. Also, because our school adopts close management, outsiders cannot easily come into our school.”
一位自称是蓝翔技校计算机科学学院但不愿意透露全名的邵先生说，“我认为不可能是我们学校的学生攻击了谷歌及其他美国公司，因为他们仅仅是高中毕业生，而且并没有接受更高教育。同时，我们学校的管理非常严格，外人很难进入校区内。”
Mr. Shao acknowledged that every year four or five students from his computer science department were recruited into the military.
邵先生承认每年他的学院都有4到5名学生参军。
Google’s decision to step forward and challenge China over the intrusions has created a highly sensitive issue for the United States government. Shortly after the company went public with its accusations, Secretary of State Hillary Rodham Clinton challenged the Chinese in a speech on Internet censors, suggesting that the country’s efforts to control open access to the Internet were in effect an information-age Berlin Wall.
谷歌公司遭入侵后站出来指摘中国的决定向美国政府抛出了高度敏感的话题。就在该公司提出其指控后不久，国务卿希拉里在一次对互联网调查的演讲中对中国提出挑战：其文指责中国在控制互联网准入上的努力实际上是在建造“信息柏林墙”。
A report on Chinese online warfare prepared for the U.S.-China Economic Security Review Commission in October 2009 by Northrop Grumman identified six regions in China with military efforts to engage in such attacks. Jinan, site of the vocational school, was one of the regions.
一份为2009年10月美中经济安全审查委员会准备的、由诺斯罗普格鲁曼公司（美国主要的航空航天飞行器制造厂商之一---译注）提出的、针对中国网络战争的报告认为中国有六个区域有参与类似攻击的军事企图，而蓝翔技校所在地，济南，正是其中之一。
Executives at Google have said little about the intrusions and would not comment for this article. But the company has contacted computer security specialists to confirm what has been reported by other targeted companies: access to the companies’ servers was gained by exploiting a previously unknown flaw in Microsoft’s Internet Explorer Web browser.
谷歌公司执行官对此次入侵所言甚微，他们也不想对此篇报道发表任何评论。但是该公司已经与计算机安全专家进行接触，以确认其他被攻击公司的指控属实：这些公司的服务器都通过一个此前未知的微软互联网浏览器漏洞被搜集到。
Forensic analysis is yielding new details of how the intruders took advantage of the flaw to gain access to internal corporate servers. They did this by using a clever technique — called man-in-the-mailbox — to exploit the natural trust shared by people who work together in organizations.
法院的分析得出了新的细节，有关袭击者是如何利用该漏洞来窃取公司内部服务器入口的。他们利用一项聪明的技术---即所谓“邮箱人”，该技术利用了在公司内工作的同事之间的天然信任。
After taking over one computer, intruders insert into an e-mail conversation a message containing a digital attachment carrying malware that is highly likely to be opened by the second victim. The attached malware makes it possible for the intruders to take over the target computer.
在控制了一台电脑之后，入侵者在电子邮件通信中插入一个信息，该信息包括极有可能传染给下一个受害者的恶意软件。这个恶意软件可以让入侵者控制目标电脑成为可能。
|
评分
-
2
查看全部评分
-
|
狗仔卡
发表于 2010-3-10 23:16
提升卡
变色卡
抢沙发
千斤顶
显身卡
发表于 2010-3-11 00:17
