PBS高端访谈:为什么黑客会将目标锁定在保险公司?

 　　JUDY WOODRUFF: Today's disclosure of a major hacking¹ attack on the nation's second-largest health insurer, Anthem², is setting off alarms about cyber-crime at a new level.

　　Hackers³ were able to crack a database that included records for 80 million people. The cyber-criminals were able to get names, addresses and e-mails, as well as Social Security numbers and income. But hospital and doctor information related to patients wasn't hacked⁴.

　　Bloomberg News reported that investigators⁵ believe Chinese state-sponsored hackers are involved.

　　Mark Bower⁶ is a noted⁷ expert on these issues. He's also a vice⁸ president at Voltage Security in California.

　　Mark Bower, welcome.

　　So, compared to the hacks⁹ we have seen until now, how serious is this one?

　　MARK BOWER, Voltage Security: Well, certainly, we have just started the year off with a bang in terms of data breaches¹¹; 80 million records is a very substantial amount, so this is quite a serious attack

　　And the nature of the data, you have got lots of personal data that can potentially be monetized. It's going to be very inconvenient¹² for those individuals and also quite costly¹³ for the organization that this affects.

　　JUDY WOODRUFF: It is possible to know at this point who is behind this? You — we mentioned the Bloomberg news report that it's potentially the Chinese. They mentioned a group called Deep Panda.

　　MARK BOWER: It's not clear yet. We only have a couple data points on information like that.

　　But, fundamentally, there's got to be some organized crime behind this or very well-organized attackers to be able to get into these types of systems and steal this volume of data. And we shouldn't forget that these types of attacks are pretty much expected these days.

　　We have seen breaches of this nature across the board over the last decade. And, in fact, the volumes of data that have been stolen are actually staggering these days.

　　JUDY WOODRUFF: What can the people behind this data breach¹⁰ do with this information?

　　MARK BOWER: So, it depends on the — their motive¹⁴ in the end. But, ultimately, if you have stolen large amounts of personal information, whether you have got Social Security numbers, name and address, date of birth, all that kind of stuff — and in this case, it seems like there's also employment history and income data — well, you can start to create identity theft situations, where you're actually stealing people's information or identity to commit fraud.

　　But, more importantly, there is also the risk of side effects, that this type of data can actually result in attacks that are more targeted. So, for example, we might have an individual that is maybe a wealthy individual, and the attacker can go now after them more specifically based on the information that they have about them in what we call a spear phishing attack.

　　And that might involve going after them with targeted e-mails, even phone calls, to try and get them to reveal more data that then can be used in a compromise or for further identity theft.

　　JUDY WOODRUFF: So for individuals who either now or did have health coverage¹⁵ through Anthem, what should they be on the lookout¹⁶ for?

　　MARK BOWER: So, after these types of attacks, what we often see is a wave of spam e-mails. Those are those fake e-mails that are often trying to lure¹⁷ people into Web sites where there may be viruses and malware, the more sinister¹⁸ phishing attacks, which might be there to lure people to Web sites to then download malware that will actually steal further information from their own personal computers or maybe even get into their bank accounts and so on with online banking¹⁹.

　　So people have to be vigilant²⁰ to make sure that they're not seeing e-mails that look suspicious and clicking on things there. And also be wary²¹ of things like phone calls, for instance, from organizations that may be purporting²² to be from service providers that may be related to Anthem, but they're actually criminal gangs trying to get more information from consumers that can then be used for further fraud or accessing their bank account or accessing their computers and so on.

　　JUDY WOODRUFF: Just quickly, Mark Bower, how would you rank or rate the security system at a company like Anthem? I mean, obviously, it was breached²³, but had they taken all the steps that a big company is supposed to take?

　　MARK BOWER: That's hard to say.

　　But even the best-prepared organizations can often succumb²⁴ to these types of attacks. What we have found over the last several years is that the attackers are becoming much more sophisticated. The malware is becoming much more advanced. And it just takes one vulnerability to be able to bypass those traditional perimeter²⁵ defenses, the firewalls and the log-in and the intrusion detection, to get into the heart of these systems.

　　And once they're in there, it's too late. The information can be stolen, monetized. And we see victims, as we have seen today.

　　JUDY WOODRUFF: Well, it's certainly got a lot of people's attention.

　　Mark Bower with Voltage Security, we thank you.

　　MARK BOWER: Thank you very much.

1 hacking   

n.非法访问计算机系统和数据库的活动

参考例句：

• The patient with emphysema is hacking all day. 这个肺气肿病人整天不断地干咳。
• We undertook the task of hacking our way through the jungle. 我们负责在丛林中开路。

2 anthem   

n.圣歌，赞美诗，颂歌

参考例句：

• All those present were standing solemnly when the national anthem was played.奏国歌时全场肃立。
• As he stood on the winner's rostrum,he sang the words of the national anthem.他站在冠军领奖台上，唱起了国歌。

3 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

4 hacked   

生气

参考例句：

• I hacked the dead branches off. 我把枯树枝砍掉了。
• I'm really hacked off. 我真是很恼火。

5 investigators   

n.调查者，审查者( investigator的名词复数 )

参考例句：

• This memo could be the smoking gun that investigators have been looking for. 这份备忘录可能是调查人员一直在寻找的证据。
• The team consisted of six investigators and two secretaries. 这个团队由六个调查人员和两个秘书组成。 来自《简明英汉词典》

6 bower   

n.凉亭，树荫下凉快之处；闺房；v.荫蔽

参考例句：

• They sat under the leafy bower at the end of the garden and watched the sun set.他们坐在花园尽头由叶子搭成的凉棚下观看落日。
• Mrs. Quilp was pining in her bower.奎尔普太太正在她的闺房里度着愁苦的岁月。

7 noted   

adj.著名的，知名的

参考例句：

• The local hotel is noted for its good table.当地的那家酒店以餐食精美而著称。
• Jim is noted for arriving late for work.吉姆上班迟到出了名。

8 vice   

n.坏事；恶习；[pl.]台钳，老虎钳；adj.副的

参考例句：

• He guarded himself against vice.他避免染上坏习惯。
• They are sunk in the depth of vice.他们堕入了罪恶的深渊。

9 hacks   

黑客

参考例句：

• But there are hacks who take advantage of people like Teddy. 但有些无赖会占类似泰迪的人的便宜。 来自电影对白
• I want those two hacks back here, right now. 我要那两个雇工回到这儿，现在就回。 来自互联网

10 breach   

n.违反，不履行；破裂；vt.冲破，攻破

参考例句：

• We won't have any breach of discipline.我们不允许任何破坏纪律的现象。
• He was sued for breach of contract.他因不履行合同而被起诉。

11 breaches   

破坏( breach的名词复数 )； 破裂； 缺口； 违背

参考例句：

• He imposed heavy penalties for breaches of oath or pledges. 他对违反誓言和保证的行为给予严厉的惩罚。
• This renders all breaches of morality before marriage very uncommon. 这样一来，婚前败坏道德的事就少见了。

12 inconvenient   

adj.不方便的，令人感到麻烦的

参考例句：

• You have come at a very inconvenient time.你来得最不适时。
• Will it be inconvenient for him to attend that meeting?他参加那次会议会不方便吗？

13 costly   

adj.昂贵的，价值高的，豪华的

参考例句：

• It must be very costly to keep up a house like this.维修这么一幢房子一定很昂贵。
• This dictionary is very useful,only it is a bit costly.这本词典很有用，左不过贵了些。

14 motive   

n.动机，目的；adv.发动的，运动的

参考例句：

• The police could not find a motive for the murder.警察不能找到谋杀的动机。
• He had some motive in telling this fable.他讲这寓言故事是有用意的。

15 coverage   

n.报导，保险范围，保险额，范围，覆盖

参考例句：

• There's little coverage of foreign news in the newspaper.报纸上几乎没有国外新闻报道。
• This is an insurance policy with extensive coverage.这是一项承保范围广泛的保险。

16 lookout   

n.注意，前途，瞭望台

参考例句：

• You can see everything around from the lookout.从了望台上你可以看清周围的一切。
• It's a bad lookout for the company if interest rates don't come down.如果利率降不下来，公司的前景可就不妙了。

17 lure   

n.吸引人的东西，诱惑物；vt.引诱，吸引

参考例句：

• Life in big cities is a lure for many country boys.大城市的生活吸引着许多乡下小伙子。
• He couldn't resist the lure of money.他不能抵制金钱的诱惑。

18 sinister   

adj.不吉利的，凶恶的，左边的

参考例句：

• There is something sinister at the back of that series of crimes.在这一系列罪行背后有险恶的阴谋。
• Their proposals are all worthless and designed out of sinister motives.他们的建议不仅一钱不值，而且包藏祸心。

19 banking   

n.银行业，银行学，金融业

参考例句：

• John is launching his son on a career in banking.约翰打算让儿子在银行界谋一个新职位。
• He possesses an extensive knowledge of banking.他具有广博的银行业务知识。

20 vigilant   

adj.警觉的，警戒的，警惕的

参考例句：

• He has to learn how to remain vigilant through these long nights.他得学会如何在这漫长的黑夜里保持警觉。
• The dog kept a vigilant guard over the house.这只狗警醒地守护着这所房屋。

21 wary   

adj.谨慎的，机警的，小心的

参考例句：

• He is wary of telling secrets to others.他谨防向他人泄露秘密。
• Paula frowned,suddenly wary.宝拉皱了皱眉头，突然警惕起来。

22 purporting   

v.声称是…，（装得）像是…的样子( purport的现在分词 )

参考例句：

• Cindy Adams (Columnist) : He's purporting to be Mother Teresa. 辛迪？亚当斯（专栏作家）：他无意成为德兰修女。 来自互联网
• To prohibit certain practices purporting to be sales by auction. 本条例旨在对看来是以拍卖方式作出的售卖中某些行为予以禁止。 来自互联网

23 breached   

攻破( breach的现在分词 )； 破坏，违反

参考例句：

• These commitments have already been breached. 这些承诺已遭背弃。
• Our tanks have breached the enemy defences. 我方坦克车突破了敌人的防线。

24 succumb   

v.屈服，屈从；死

参考例句：

• They will never succumb to the enemies.他们决不向敌人屈服。
• Will business leaders succumb to these ideas?商业领袖们会被这些观点折服吗？

25 perimeter   

n.周边，周长，周界

参考例句：

• The river marks the eastern perimeter of our land.这条河标示我们的土地东面的边界。
• Drinks in hands,they wandered around the perimeter of the ball field.他们手里拿着饮料在球场周围漫不经心地遛跶。