经济学人101:网络安全,幽灵般的敌人

 　　Internet security

　　网络安全

　　An anonymous¹ foe²

　　幽灵般的敌人

　　Hackers⁴ hit big companies, the IMF and the headlines

　　网络黑客席卷名企和国际货币基金组织，大出风头

　　Jun 16th 2011 | SAN FRANCISCO | from the print edition

　　DEFENCE companies such as Lockheed Martin have seen some of their cyber-defences penetrated⁶. Sony, Google, Citigroup and other firms have had sensitive customer data swiped by high-tech⁷ intruders. The IMF has been the victim of a digital attack, as has the website of America’s Senate. And a hackers’ collective, called Anonymous, has threatened to launch an online assault on the computer systems of America’s Federal Reserve unless its chairman, Ben Bernanke, agrees to step down.

　　洛克西德马丁公司虽作为国防军企，却也意识到其部分网络防御被黑客所渗透。入侵者以其较高的技术窃取了索尼，谷歌，花旗集团等公司的客户敏感数据。国际货币基金组织成为了这次数字化入侵的受害者，美国参议院的官网也不能幸免。一个叫做“佚名”的黑客组织扬言，如果美联储的主席Ben Bernanke不愿下台，那就要对美联储的计算机系统发起网上攻击。

　　These and other events—such as the attack on the public website of the CIA, which was disrupted briefly⁸ on June 15th—have led to speculation⁹ that there has been a big increase in the threat posed by hackers in recent months. They have also reinforced a belief in some quarters that America is already engaged in a cyber war of sorts, most notably¹⁰ with China. Yet such claims are controversial.

　　美国中情局在6月15日也因黑客袭击暂时瘫痪，这样或那样的针对公共网站的袭击使得最近几月来公众对网络黑客动辄发起攻击行为的关注与日俱增。他们同样也更加坚定地认为，美国在某些方面的确陷入了一场网络大战，最沸沸扬扬的莫过于和中国的网络战。然而这些言论尚存争议。

　　Although some security experts think hacking¹¹ activity has hit a new high, others say such claims are overblown. They point out that laws in some states in America now require firms to reveal if their defences have been breached¹², which means more hacking cases are coming to light that would previously¹³ have been buried. High-profile attacks, such as the ones on the Senate website, also get plenty of media coverage¹⁴, fuelling talk of an epidemic¹⁵.

　　尽管一些安全专家认为黑客的行为创了历史新高，其他人则认为这种观点有些言过其实了。他们指出，现在美国一些州的法律要求公司透露是否他们的网络防御被黑客突破过，这意味着以前许多不为人知的黑客袭击将公之于众。一些高调的攻击，比如针对参议院网站的袭击，得到了媒体铺天盖地的报道，成了公众流行的话题。

　　The vast majority of the hacking that does take place is still perpetrated by different sets of private hackers rather than by cyber spooks. Take “hacktivists”, members of such groups as Anonymous and Lulz Security, the outfit¹⁶ that has claimed responsibility for attacking the Senate’s and the CIA’s sites. (To “lulz” means to laugh at someone’s misfortune in jargon¹⁷.) Loosely organised and motivated by causes rather than money, these online rebels shot to prominence¹⁸ last year. They targeted firms such as MasterCard that shunned¹⁹ WikiLeaks after the transparency group began releasing secret diplomatic cables. And they thrive on the oxygen of publicity²⁰, boasting of their exploits on Twitter and other social-media services. Anonymous even announced its intention to target the Fed by posting a video on YouTube. This listed all kinds of recriminations against the central bank, including plenty of bizarre ones such as “crimes against humanity”, scrolled²¹ down against a backdrop of eerie²² face masks that have become Anonymous’s calling card (see picture above).

　　大量的黑客入侵都仍是不同群的个体黑客所为，而不是网络幽灵干的。黑客分子是“佚名”和“鲁兹安全”这样组织的成员，他们已经宣称对参议院和中情局网站的入侵事件表示负责（“鲁兹”在行话中表示嘲笑某人的不幸）。他们机构松散，动机和金钱无关，这些网上反叛者的行为去年可谓登峰造极。他们瞄准了万事达卡这样的公司，因为在维基泄密这个以透明为宗旨的组织开始披露外交秘闻的时候，万事达卡和它划清了界限。他们在公众的关注下逐渐壮大，在微博和其他社会性媒体上鼓吹其功绩。“佚名”组织甚至在YouTube视频网站上传了视频，公开宣布其入侵美联储系统的意图。片中在怪诞的人脸面具的背景之下，逐一陈述了中央银行诸多罪责，其中许多很奇怪，比如“反人性罪”之类的，这些都逐渐勾勒出这个叫做“佚名”的黑客组织的个性轮廓。

　　Hacktivists’ assaults on state targets have prompted governments to try rounding them up. On June 10th Spanish police arrested three men that they claim are core members of Anonymous, which responded by causing a police website to crash. Then on June 13th police in Turkey rounded up another 32 alleged²³ hackers from the group, which had recently attacked a couple of official websites, protesting plans to increase policing of web traffic.

　　黑客分子针对政府的攻击行为使政府越发地想把他们一网打尽。在6月10日，西班牙警方逮捕了三名嫌犯，据其称是”佚名”组织的核心成员。“佚名”曾声称对某警方网站的瘫痪负责。在6月13日，土耳其警方逮捕了32名的某黑客组织的成员，他们最近入侵了一系列官方网站，以抗议对日渐增加的网络监管的计划。

　　Dmitri Alperovitch of McAfee, a web-security company, reckons that these and future raids will ensure that hacktivism declines as a source of online attacks within six to 12 months. But other experts warn that by trumpeting²⁴ the arrest of Anonymous members, instead of simply labelling them as common-or-garden hackers, governments are boosting the outfit’s standing²⁵. In the eyes of potential recruits such as young “script kiddies”, who first turn to hacking chiefly as a test of their programming skills, Anonymous may now seem more attractive.

　　来自网络安全公司迈克菲的副总裁Dmitri Alperovitch认为，这些和未来的清剿行动会保障未来6到12个月的以黑客行动主义作为精神指导的网络攻击行为的下降。但是其他的专家警告说，政府这种吹嘘逮捕黑客组织成员的行为，与其说是简单地盖棺论调，给他们贴上不过如此的黑客标签，不如说是在变相承认其组织的地位。许多潜在的新人，比如年轻的“脚本小子”们，都因为入侵系统可以测试他们的编程能力而进入黑客行业，“佚名”组织对于他们来说现在似乎更有吸引力了。

　　While hacktivists are gathering²⁶ speed, another source of hacking—organised-crime groups—are going about their business as usual. But that means they are using increasingly sophisticated techniques to extract passwords and other personal information from their victims. This then gives them access to data they can profit from in various ways. These gangs are behind some of the biggest data breaches²⁷ that companies have owned up to (see chart). They also often launch cyber-attacks using “botnets”, or networks of computers that have been taken over without their owners’ knowledge.

　　正当个体黑客组织壮大得如火如荼的时候，另一种入侵形式源的黑客-有组织犯罪的黑客群体-也在像往常一样经营着他们的勾当。不过这意味着他们使用更成熟的技术从受害者那边窃取密码和其他的个人信息数据，然后以各种形式从中牟利。一些名企的大规模数据泄露就是拜这些黑客群所赐（如图表所示）。他们经常用“僵尸程序”发起网络攻击，或者不为用户所知地感染其主机，形成僵尸网络发起攻击。

　　Code red 红色代码

　　Such ploys²⁸ can make it hard to identify exactly who is behind a particular online assault, says Adam Vincent of Cyber Squared, another security firm. In China things are particularly unclear. Jayson Street, a security researcher who has written a book on dissecting²⁹ hacks³⁰, reckons the Chinese government itself is struggling to contain hacking within the country. He recounts how the website of one regional government he studied turned out to have been compromised by hackers who had made it part of a botnet. Chinese cyber-crooks are only too happy to rent out their networks to other gangs and governments who want to launch attacks using them. North Korea and Russia are said to be among the countries that have taken advantage of such offers.

　　来自另一家网络安全公司Cyber Squared的Adam Vincent说，这样（僵尸网络的）形式的攻击真的很难定位到某次入侵的幕后真凶是谁。在中国事情就更扑朔迷离了。研究网络安全的Jayson Street曾写过一本剖析黑客行为的书，他认为中国政府自身也在挣扎着控制黑客行为于境内。他详述了他所研究的一个地方政府网站是怎么在黑客们的控制下“蜕变”到僵尸网络的一部分的。中国的网络犯罪分子倒是希望能够把他们的网络租给其他黑客帮派或者政府，供其发起攻击。朝鲜和俄罗斯据说也是利用这种机会来获取好处的。

　　This does not mean that the Chinese government is innocent of all of the hacking charges levelled against it. A recent study by McAfee of “SQL injections”, a technique used to penetrate⁵ databases, showed that around half of the reported attacks in the first quarter of 2011 originated from China. Given the scale of such activity, it is likely that at least some of these were launched by Chinese cyberspies. Google has also dropped heavy hints that the Chinese government was behind a recent hack³ of Gmail, its web-based mail service, which let online snoopers read the e-mails of high-ranking American officials and those from some other countries.

　　这并不意味着中国政府在所有罪状等身的黑客行为指控面前是无辜的。迈克菲最近的一份针对”SQL注入”（一种入侵数据库的技术）的研究中指出，2011年第一季度，大约半数的所被报告的攻击源自中国。如果考虑这种攻击的规模，那么至少有一些入侵很可能是由中国的网络间谍所发起的。谷歌也掷出重言，中国政府是最近针对其基于网络的邮件服务Gmail进行攻击的幕后使者，这样做可以让网上的间谍获取美国高官和其他国家重要人物的电子邮件。

　　But China is far from the only country engaged in cyber-espionage. It is surely no coincidence that according to McAfee’s statistics the second-largest source of SQL injections in the first quarter was none other than America. Such probing of a rival’s systems is hardly new, though it has assumed an exaggerated importance because of all the feverish³¹ talk of “cyber-warfare”.

　　但中国绝不是参与网络间谍活动的唯一国家。根据迈克菲的数据，第二大SQL注入攻击源的国家正是美国，这当然不是巧合。由于“网络战”是公众乐此不疲的话题，这种入侵行为的严重性有些被夸大了，毕竟入侵对手系统的行为可谈不上是新事物。

　　According to a report on cyber-security issued earlier this year by the Organisation³² for Economic Co-operation and Development, the chances of a conflict fought solely³³ in the electronic world are extremely slim. The same report also warns that many high-tech attacks described as acts of cyberwar, including the antics of hacktivists, do not merit the label. That is surely right. Even so they are no laughing—or lulzing—matter.

　　根据今年早些时候由经济合作与发展组织发布的网络安全报告，仅在电子世界中发生冲突的可能性微乎其微。报告还提到，许多有着高技术手段的被称作网络战的入侵事件，和那些哗众取宠的黑客分子，都有些言过其实。这当然是对的。不过就算是这样，这些（黑客和黑客行为）也不是拿来搞笑的事，或者说可以被“鲁兹”的事。

1 anonymous   

adj.无名的；匿名的；无特色的

参考例句：

• Sending anonymous letters is a cowardly act.寄匿名信是懦夫的行为。
• The author wishes to remain anonymous.作者希望姓名不公开。

2 foe   

n.敌人，仇敌

参考例句：

• He knew that Karl could be an implacable foe.他明白卡尔可能会成为他的死敌。
• A friend is a friend;a foe is a foe;one must be clearly distinguished from the other.敌是敌，友是友，必须分清界限。

3 hack   

n.劈，砍，出租马车；v.劈，砍，干咳

参考例句：

• He made a hack at the log.他朝圆木上砍了一下。
• Early settlers had to hack out a clearing in the forest where they could grow crops.早期移民不得不在森林里劈出空地种庄稼。

4 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

5 penetrate   

v.透(渗)入；刺入，刺穿；洞察，了解

参考例句：

• Western ideas penetrate slowly through the East.西方观念逐渐传入东方。
• The sunshine could not penetrate where the trees were thickest.阳光不能透入树木最浓密的地方。

6 penetrated   

adj. 击穿的，鞭辟入里的 动词penetrate的过去式和过去分词形式

参考例句：

• The knife had penetrated his chest. 刀子刺入了他的胸膛。
• They penetrated into territory where no man had ever gone before. 他们已进入先前没人去过的地区。

7 high-tech   

adj.高科技的

参考例句：

• The economy is in the upswing which makes high-tech services in more demand too.经济在蓬勃发展，这就使对高科技服务的需求量也在加大。
• The quest of a cure for disease with high-tech has never ceased. 人们希望运用高科技治疗疾病的追求从未停止过。

8 briefly   

adv.简单地，简短地

参考例句：

• I want to touch briefly on another aspect of the problem.我想简单地谈一下这个问题的另一方面。
• He was kidnapped and briefly detained by a terrorist group.他被一个恐怖组织绑架并短暂拘禁。

9 speculation   

n.思索，沉思；猜测；投机

参考例句：

• Her mind is occupied with speculation.她的头脑忙于思考。
• There is widespread speculation that he is going to resign.人们普遍推测他要辞职。

10 notably   

adv.值得注意地，显著地，尤其地，特别地

参考例句：

• Many students were absent,notably the monitor.许多学生缺席，特别是连班长也没来。
• A notably short,silver-haired man,he plays basketball with his staff several times a week.他个子明显较为矮小，一头银发，每周都会和他的员工一起打几次篮球。

11 hacking   

n.非法访问计算机系统和数据库的活动

参考例句：

• The patient with emphysema is hacking all day. 这个肺气肿病人整天不断地干咳。
• We undertook the task of hacking our way through the jungle. 我们负责在丛林中开路。

12 breached   

攻破( breach的现在分词 )； 破坏，违反

参考例句：

• These commitments have already been breached. 这些承诺已遭背弃。
• Our tanks have breached the enemy defences. 我方坦克车突破了敌人的防线。

13 previously   

adv.以前，先前（地）

参考例句：

• The bicycle tyre blew out at a previously damaged point.自行车胎在以前损坏过的地方又爆开了。
• Let me digress for a moment and explain what had happened previously.让我岔开一会儿，解释原先发生了什么。

14 coverage   

n.报导，保险范围，保险额，范围，覆盖

参考例句：

• There's little coverage of foreign news in the newspaper.报纸上几乎没有国外新闻报道。
• This is an insurance policy with extensive coverage.这是一项承保范围广泛的保险。

15 epidemic   

n.流行病；盛行；adj.流行性的，流传极广的

参考例句：

• That kind of epidemic disease has long been stamped out.那种传染病早已绝迹。
• The authorities tried to localise the epidemic.当局试图把流行病限制在局部范围。

16 outfit   

n.（为特殊用途的）全套装备，全套服装

参考例句：

• Jenney bought a new outfit for her daughter's wedding.珍妮为参加女儿的婚礼买了一套新装。
• His father bought a ski outfit for him on his birthday.他父亲在他生日那天给他买了一套滑雪用具。

17 jargon   

n.术语，行话

参考例句：

• They will not hear critics with their horrible jargon.他们不愿意听到评论家们那些可怕的行话。
• It is important not to be overawed by the mathematical jargon.要紧的是不要被数学的术语所吓倒.

18 prominence   

n.突出；显著；杰出；重要

参考例句：

• He came to prominence during the World Cup in Italy.他在意大利的世界杯赛中声名鹊起。
• This young fashion designer is rising to prominence.这位年轻的时装设计师的声望越来越高。

19 shunned   

v.避开，回避，避免( shun的过去式和过去分词 )

参考例句：

• She was shunned by her family when she remarried. 她再婚后家里人都躲着她。
• He was a shy man who shunned all publicity. 他是个怕羞的人，总是避开一切引人注目的活动。 来自《简明英汉词典》

20 publicity   

n.众所周知，闻名；宣传，广告

参考例句：

• The singer star's marriage got a lot of publicity.这位歌星的婚事引起了公众的关注。
• He dismissed the event as just a publicity gimmick.他不理会这件事，只当它是一种宣传手法。

21 scrolled   

adj.具有涡卷装饰的v.（电脑屏幕上）从上到下移动（资料等），卷页( scroll的过去式和过去分词 )；（似卷轴般）卷起；（像展开卷轴般地）将文字显示于屏幕

参考例句：

• Wherever the drop target can possibly be scrolled offscreen, the program needs to auto-scroll. 无论拖放的目标对象是否在屏幕之外，程序都需要自动滚动。 来自About Face 3交互设计精髓
• If It'still is then you've not scrolled up enough lines. 如果还在说明你向上滚动的行数不够。 来自互联网

22 eerie   

adj.怪诞的；奇异的；可怕的；胆怯的

参考例句：

• It's eerie to walk through a dark wood at night.夜晚在漆黑的森林中行走很是恐怖。
• I walked down the eerie dark path.我走在那条漆黑恐怖的小路上。

23 alleged   

a.被指控的，嫌疑的

参考例句：

• It was alleged that he had taken bribes while in office. 他被指称在任时收受贿赂。
• alleged irregularities in the election campaign 被指称竞选运动中的不正当行为

24 trumpeting   

大声说出或宣告（trumpet的现在分词形式）

参考例句：

• She is always trumpeting her son. 她总是吹嘘她儿子。
• The wind is trumpeting, a bugle calling to charge! 风在掌号。冲锋号！ 来自汉英文学 - 散文英译

25 standing   

n.持续，地位；adj.永久的，不动的，直立的，不流动的

参考例句：

• After the earthquake only a few houses were left standing.地震过后只有几幢房屋还立着。
• They're standing out against any change in the law.他们坚决反对对法律做任何修改。

26 gathering   

n.集会，聚会，聚集

参考例句：

• He called on Mr. White to speak at the gathering.他请怀特先生在集会上讲话。
• He is on the wing gathering material for his novels.他正忙于为他的小说收集资料。

27 breaches   

破坏( breach的名词复数 )； 破裂； 缺口； 违背

参考例句：

• He imposed heavy penalties for breaches of oath or pledges. 他对违反誓言和保证的行为给予严厉的惩罚。
• This renders all breaches of morality before marriage very uncommon. 这样一来，婚前败坏道德的事就少见了。

28 ploys   

n.策略，手法( ploy的名词复数 )

参考例句：

• The boss tried many ploys to get customers into the store. 老板用尽各种伎俩引顾客上门。 来自辞典例句
• She tried many ploys to get the boy interested in her. 她试过很多伎俩去赢取男孩的青睐。 来自辞典例句

29 dissecting   

v.解剖（动物等）( dissect的现在分词 )；仔细分析或研究

参考例句：

• Another group was dissecting a new film showing locally. 另外一批人正在剖析城里上演的一部新电影。 来自辞典例句
• Probe into Dissecting Refraction Method Statics Processing under Complicated Surface Conditions. 不同地表条件下土壤侵蚀的坡度效应。 来自互联网

30 hacks   

黑客

参考例句：

• But there are hacks who take advantage of people like Teddy. 但有些无赖会占类似泰迪的人的便宜。 来自电影对白
• I want those two hacks back here, right now. 我要那两个雇工回到这儿，现在就回。 来自互联网

31 feverish   

adj.发烧的，狂热的，兴奋的

参考例句：

• He is too feverish to rest.他兴奋得安静不下来。
• They worked with feverish haste to finish the job.为了完成此事他们以狂热的速度工作着。

32 organisation   

n.组织，安排，团体，有机休

参考例句：

• The method of his organisation work is worth commending.他的组织工作的方法值得称道。
• His application for membership of the organisation was rejected.他想要加入该组织的申请遭到了拒绝。

33 solely   

adv.仅仅，唯一地

参考例句：

• Success should not be measured solely by educational achievement.成功与否不应只用学业成绩来衡量。
• The town depends almost solely on the tourist trade.这座城市几乎完全靠旅游业维持。