VOA慢速英语--报告称数百万智能设备面临遭黑客攻击的风险

Internet security researchers say they have identified software weaknesses that put millions of smart devices at risk for attacks, or hacking³.

The security weaknesses, also known as vulnerabilities, could be used by hackers⁴ to attack business or home computer networks.

The report, by cybersecurity company Forescout Technologies, says the affected⁵ devices were built by an estimated 150 manufacturers.

Many devices are designed for personal use and include the ability to control home cameras and temperature controls from a distance, the report said. Companies use similar devices in security systems, heating and cooling equipment, printers and servers.

There is no evidence that any attacks have already been carried out on the vulnerable devices. But the risks pointed⁶ out in the report led the U.S. Cybersecurity and Infrastructure⁷ Security Agency (CISA) to issue an advisory⁸ warning.

In the advisory, CISA suggests that defensive⁹ measures should be taken to lessen¹⁰ the risks of hacking. Specifically, the agency said industrial control systems should not be accessible from the internet and should be separated from company networks.

Awais Rashid is a computer scientist at Britain's Bristol University who examined the report's findings. He told The Associated Press that in the worst case, control systems that drive "critical services" - such as water, power and self-operating building equipment - could be damaged.

Rashid said the discovery shows the dangers cybersecurity experts often find in internet-linked devices designed without much attention to security. Careless programming by developers appears to be the main issue in this case, he added.

Dealing¹¹ with the problem is especially complex because the vulnerabilities are found in so-called open-source software. Open-source means the software is free to use and that the program that was first created can be changed by anyone.

In this case, the issue relates to internet software that runs communications through a technology called TCP/IP. This technology uses a set of rules that control the connection of computer systems to the internet.

Elisa Costante is vice¹ president of research for Forescout. She told the AP the fact that open-source software is not owned by anyone makes the problem difficult to solve. In addition, some of the vulnerable TCP/IP methods used are twenty years old.

This means it is up to device manufacturers to fix the vulnerabilities themselves and some may not have the time or money to do so, Costante said.

"The biggest challenge comes in finding out what you've got," said Bristol University's Rashid.

The vulnerabilities could leave business networks open to destructive denial-of-service attacks. Computer systems could also be infected with ransomware or other tools that permit attackers to take over devices.

Experts say the risks are even higher now with so many people working from home during the coronavirus pandemic. This could permit attackers to hack² into home networks and use this as a pathway into company networks.

Forescout says it contacted as many device manufacturers as it could about the vulnerabilities. It also warned security officials in the U.S., Germany and Japan.

Words in This Story

accessible – adj. able to be reached or easily gotten

challenge – n. something that is difficult to do

ransomware – n. software designed by internet attackers that can lock computer users out of their own devices unless they pay money

1 vice   

n.坏事；恶习；[pl.]台钳，老虎钳；adj.副的

参考例句：

• He guarded himself against vice.他避免染上坏习惯。
• They are sunk in the depth of vice.他们堕入了罪恶的深渊。

2 hack   

n.劈，砍，出租马车；v.劈，砍，干咳

参考例句：

• He made a hack at the log.他朝圆木上砍了一下。
• Early settlers had to hack out a clearing in the forest where they could grow crops.早期移民不得不在森林里劈出空地种庄稼。

3 hacking   

n.非法访问计算机系统和数据库的活动

参考例句：

• The patient with emphysema is hacking all day. 这个肺气肿病人整天不断地干咳。
• We undertook the task of hacking our way through the jungle. 我们负责在丛林中开路。

4 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

5 affected   

adj.不自然的，假装的

参考例句：

• She showed an affected interest in our subject.她假装对我们的课题感到兴趣。
• His manners are affected.他的态度不自然。

6 pointed   

adj.尖的，直截了当的

参考例句：

• He gave me a very sharp pointed pencil.他给我一支削得非常尖的铅笔。
• She wished to show Mrs.John Dashwood by this pointed invitation to her brother.她想通过对达茨伍德夫人提出直截了当的邀请向她的哥哥表示出来。

7 infrastructure   

n.下部构造，下部组织，基础结构，基础设施

参考例句：

• We should step up the development of infrastructure for research.加强科学基础设施建设。
• We should strengthen cultural infrastructure and boost various types of popular culture.加强文化基础设施建设，发展各类群众文化。

8 advisory   

adj.劝告的，忠告的，顾问的，提供咨询

参考例句：

• I have worked in an advisory capacity with many hospitals.我曾在多家医院做过顾问工作。
• He was appointed to the advisory committee last month.他上个月获任命为顾问委员会委员。

9 defensive   

adj.防御的；防卫的；防守的

参考例句：

• Their questions about the money put her on the defensive.他们问到钱的问题，使她警觉起来。
• The Government hastily organized defensive measures against the raids.政府急忙布置了防卫措施抵御空袭。

10 lessen   

vt.减少，减轻；缩小

参考例句：

• Regular exercise can help to lessen the pain.经常运动有助于减轻痛感。
• They've made great effort to lessen the noise of planes.他们尽力减小飞机的噪音。

11 dealing   

n.经商方法，待人态度

参考例句：

• This store has an excellent reputation for fair dealing.该商店因买卖公道而享有极高的声誉。
• His fair dealing earned our confidence.他的诚实的行为获得我们的信任。