PBS高端访谈:美国遭遇大规模黑客攻击

JUDY WOODRUFF: There is new and troubling information on a massive cyberattack against the U.S. The Cybersecurity and Infrastructure¹ Agency has determined² that the recent hacking⁴ of federal, state, and local governments, as well as critical infrastructure and other private sector⁵ organizations, poses -- quote -- "a grave risk." They also said that eliminating the malicious⁶ computer code from compromised computer networks will be highly complex and challenging. We start by turning again to Dmitri Alperovitch. He's co-founder of Silverado Policy Accelerator. It's a Washington-based think tank. Dmitri Alperovitch, thank you so much for being with us again. We are learning from the cyber agency that the hackers⁷ used possibly more than one path to get in. How significant is that?

DMITRI ALPEROVITCH, Co-Founder, Silverado Policy Accelerator: ...espionage⁸ campaigns in history. And we have just breaking this tonight before you went on the air that Microsoft was one of the other vendors⁹ whose software was impacted here. And the Russians were able to leverage¹⁰ it to get into some of the victims, in addition to the original company called SolarWinds. But the impact is huge, because you have so many companies using the software that essentially¹¹ gave a map to the Russian intelligence service, who is believed to be behind this, to gain entry, government agencies, private sector companies alike.

JUDY WOODRUFF: Well, it sounds serious enough. But then there is this additional reporting today from Politico that they managed to get inside the Energy Department, inside the national Nuclear Security Administration, which manages the nuclear weapons stockpiles. It sounds serious. How serious is this?

DMITRI ALPEROVITCH: Well, this was a supply chain hack³. So, in effect, the Russians were able to infiltrate¹² into these software companies whose software is used by tens of thousands of organizations globally, including most of the sensitive government agencies. And then they cherry-picked. They decided¹³ which targets they wanted to go after to actually get into the doors and exfiltrate very sensitive information from those networks. And that is why we are seeing this drip, drip, by drip reports of numerous government agencies that you can imagine would be of high interest to the Russian intelligence services, like the State Department, like the Treasury¹⁴ Department, like the Pentagon, and now the Department of Energy as well and others.

JUDY WOODRUFF: So, Dmitri Alperovitch, do we have a sense of how close they came to triggering something -- I mean, the whole thing is serious enough -- but to triggering, I don't know, a nuclear incident or some other unthinkable sort of incident, step, emergency?

DMITRI ALPEROVITCH: This is an incredibly dangerous situation and very detrimental¹⁵ to our national security. But there are two silver linings¹⁷ here that I think it's useful for us to remember. One, it looks like this was a traditional espionage attack. It looks like they were not interested in destruction. And it looks like no data was -- is being changed. We may find out differently in the future. But, for now at least, it looks like they went in and did traditional theft of information, very, very serious stuff, but -- of course, but it could have been so much worse. And second silver lining¹⁶ is that, in this particular case, it looks like they were not able to get access to classified networks. Those are networks that are disconnected from the Internet, so they are extremely difficult to infiltrate. And that's where most of the U.S. government secrets, of course, are located on. But even compromising the unclassified networks, they still contain enormous amounts of sensitive information. So, this is going to be very, very damaging to our national security for many years to come.

JUDY WOODRUFF: And, as we reported, very difficult to unwind, to undo¹⁸ whatever damage was done?

DMITRI ALPEROVITCH: It is going to take us months to get the Russians out of those networks. In particular, if it is indeed the SVR, the Russian foreign intelligence service, they are the ones that infiltrated¹⁹ the White House, the Joint²⁰ Chiefs of Staff, and the State Department back in 2015. And it took many, many weeks for those organizations back then to kick them out, because they are so good at burying themselves in, staying stealthy, maintaining that foothold within the organization, that it's going to take us probably months to get them out of all these networks that they have been able to infiltrate.

JUDY WOODRUFF: Dmitri Alperovitch, as always, we thank you.

DMITRI ALPEROVITCH: Thank you so much.

朱迪·伍德乐夫：关于美国遭遇大规模网络攻击事件出现了新的令人不安的消息。网络安全与基础设施局认定，最近针对联邦、州和地方政府以及关键基础设施和其他私营部门组织的黑客攻击构成了“严重风险”。他们还说，从被攻破的计算机网络中消除恶意计算机代码将是非常复杂和具有挑战性的。我们再次连线德米特里·阿尔佩洛维奇，他是智库“Silverado Policy Accelerator”的联合创始人，其总部设在华盛顿。德米特里·阿尔佩洛维奇，非常感谢你再次来到我们的节目。我们从网络机构了解到黑客可能使用了不止一条途径进入。这一点有多重要呢？

德米特里·阿尔佩洛维奇，联合创始人，Silverado Policy Accelerator：...历史上的间谍活动。微软和其它供应商一样其软件都受到了影响，在该新闻播出之前我们今晚打破了这个局面。除了最初的“SolarWinds”公司，俄罗斯人能够利用它接触到一些受害者信息，但影响是巨大的，因为该软件说白了就是给幕后黑手、即俄罗斯情报机构提供了一张地图以便获取入口，进入政府机构、私营企业等，而使用这款软件的公司太多了。

朱迪·伍德乐夫：嗯，听起来挺严重的。但是，之后Politico网站今天又有报道称他们成功进入了能源部、进入了国家核安全局，该机构负责管理核武器库存。听起来很严重，那么到底有多严重呢？

德米特里·阿尔佩洛维奇：嗯，这是一条供应链黑客。所以，其实俄罗斯能够渗透到这些软件公司，这些公司的软件被全球数以万计的组织使用，其中包括很多敏感的政府机构。然后他们精心挑选，决定追踪哪个目标进入入口，从这些网络中窃取非常敏感的信息。这就是为什么我们看到有那么多的政府机构报告，你可以想象俄罗斯情报机构会对这些报告有多感兴趣，比如国务院、财政部、五角大楼、现在还有能源部等等。

朱迪·伍德乐夫：所以，德米特里·阿尔佩罗维奇，这件事触发一些事情的几率有多大，就是说，这件事情非常严重，所以会出发核事故或者其它什么不可思议的大事，过程是怎样的呢？紧急吗？

德米特里·阿尔佩洛维奇：这是一个非常危险的局面，对我们国家的安全非常不利。但有两点希望，有两点是我觉得有利的。首先，这次网络袭击好像只是一般的间谍攻击，他们似乎对破坏没什么兴趣，因为数据看起来没有被改变，不过后期说不准。但是，至少就目前而言他们只是像以往那样黑进来然后盗窃了信息，非常非常机密的东西。但是，当然，情况本来会更糟的。第二点希望是，在这种特殊情况下他们似乎无法进入机密网络，这些网络是跟互联网断开连接的，所以很难黑进来。当然，美国政府的大多数机密文件都存储在那里。不过，虽说是非机密网络，但它们涵盖的敏感信息的量还是非常多的。所以还是会在未来多年对我们国家的国家安全造成非常、非常严重的损害。

朱迪·伍德乐夫：还有就是，正如我们报道的那样，已经造成的损害很难消除吗？

德米特里·阿尔佩洛维奇：我们要花几个月的时间才能把俄罗斯人从这些网络里赶出来。尤其是，如果他们真的是SVR(俄罗斯对外情报机构)，就是2015年渗透进白宫、参谋长联席会议和国务院的人，当时那些组织花了好多个星期的时间才把他们赶出去，因为他们非常善于隐藏自己，秘密行事，保持组织内的立足点，我们可能要花几个月的时间才能把他们从他们能够渗透的所有网络中踢出去。

朱迪·伍德乐夫：德米特里·阿尔佩洛维奇，还是，谢谢。

德米特里·阿尔佩洛维奇：非常感谢。

1 infrastructure   

n.下部构造，下部组织，基础结构，基础设施

参考例句：

• We should step up the development of infrastructure for research.加强科学基础设施建设。
• We should strengthen cultural infrastructure and boost various types of popular culture.加强文化基础设施建设，发展各类群众文化。

2 determined   

adj.坚定的；有决心的

参考例句：

• I have determined on going to Tibet after graduation.我已决定毕业后去西藏。
• He determined to view the rooms behind the office.他决定查看一下办公室后面的房间。

3 hack   

n.劈，砍，出租马车；v.劈，砍，干咳

参考例句：

• He made a hack at the log.他朝圆木上砍了一下。
• Early settlers had to hack out a clearing in the forest where they could grow crops.早期移民不得不在森林里劈出空地种庄稼。

4 hacking   

n.非法访问计算机系统和数据库的活动

参考例句：

• The patient with emphysema is hacking all day. 这个肺气肿病人整天不断地干咳。
• We undertook the task of hacking our way through the jungle. 我们负责在丛林中开路。

5 sector   

n.部门，部分；防御地段，防区；扇形

参考例句：

• The export sector will aid the economic recovery. 出口产业将促进经济复苏。
• The enemy have attacked the British sector.敌人已进攻英国防区。

6 malicious   

adj.有恶意的，心怀恶意的

参考例句：

• You ought to kick back at such malicious slander. 你应当反击这种恶毒的污蔑。
• Their talk was slightly malicious.他们的谈话有点儿心怀不轨。

7 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

8 espionage   

n.间谍行为，谍报活动

参考例句：

• The authorities have arrested several people suspected of espionage.官方已经逮捕了几个涉嫌从事间谍活动的人。
• Neither was there any hint of espionage in Hanley's early life.汉利的早期生活也毫无进行间谍活动的迹象。

9 vendors   

n.摊贩( vendor的名词复数 )；小贩；（房屋等的）卖主；卖方

参考例句：

• The vendors were gazundered at the last minute. 卖主在最后一刻被要求降低房价。
• At the same time, interface standards also benefIt'software vendors. 同时，界面标准也有利于软件开发商。 来自About Face 3交互设计精髓

10 leverage   

n.力量，影响；杠杆作用，杠杆的力量

参考例句：

• We'll have to use leverage to move this huge rock.我们不得不借助杠杆之力来移动这块巨石。
• He failed in the project because he could gain no leverage. 因为他没有影响力，他的计划失败了。

11 essentially   

adv.本质上，实质上，基本上

参考例句：

• Really great men are essentially modest.真正的伟人大都很谦虚。
• She is an essentially selfish person.她本质上是个自私自利的人。

12 infiltrate   

vt./vi.渗入，透过；浸润

参考例句：

• The teacher tried to infiltrate her ideas into the children's minds.老师设法把她的思想渗透到孩子们的心中。
• It can infiltrate as much as 100 kilometers into enemy territory at night.可以在夜间深入敌领土100千米。

13 decided   

adj.决定了的，坚决的；明显的，明确的

参考例句：

• This gave them a decided advantage over their opponents.这使他们比对手具有明显的优势。
• There is a decided difference between British and Chinese way of greeting.英国人和中国人打招呼的方式有很明显的区别。

14 treasury   

n.宝库；国库，金库；文库

参考例句：

• The Treasury was opposed in principle to the proposals.财政部原则上反对这些提案。
• This book is a treasury of useful information.这本书是有价值的信息宝库。

15 detrimental   

adj.损害的，造成伤害的

参考例句：

• We know that heat treatment is detrimental to milk.我们知道加热对牛奶是不利的。
• He wouldn't accept that smoking was detrimental to health.他不相信吸烟有害健康。

16 lining   

n.衬里，衬料

参考例句：

• The lining of my coat is torn.我的外套衬里破了。
• Moss makes an attractive lining to wire baskets.用苔藓垫在铁丝篮里很漂亮。

17 linings   

n.衬里( lining的名词复数 )；里子；衬料；组织

参考例句：

• a pair of leather gloves with fur linings 一双毛皮衬里的皮手套
• Many of the garments have the customers' name tags sewn into the linings. 这些衣服有很多内衬上缝有顾客的姓名签。 来自辞典例句

18 undo   

vt.解开，松开；取消，撤销

参考例句：

• His pride will undo him some day.他的傲慢总有一天会毁了他。
• I managed secretly to undo a corner of the parcel.我悄悄地设法解开了包裹的一角。

19 infiltrated   

adj.[医]浸润的v.（使）渗透，（指思想）渗入人的心中( infiltrate的过去式和过去分词 )

参考例句：

• The headquarters had been infiltrated by enemy spies. 总部混入了敌方特务。
• Many Chinese idioms have infiltrated into the Japanese language. 许多中国成语浸透到日语中。 来自《现代英汉综合大词典》

20 joint   

adj.联合的，共同的；n.关节，接合处；v.连接，贴合

参考例句：

• I had a bad fall,which put my shoulder out of joint.我重重地摔了一跤，肩膀脫臼了。
• We wrote a letter in joint names.我们联名写了封信。