针对谷歌的网络袭击源头追溯至中国军方背景学校

本主题由上肛上腺于 2010-2-20 23:52 合并天衢居士

一小撮各種不明真相

1楼大中小发表于 2010-2-19 12:02 只看该作者

《纽约时报》(New York Times)周四晚间援引参与调查的未具名消息人士的话报导，近期针对谷歌(Google Inc.,

GOOG)和其他美国公司的网络攻击源头来自两所中国学校。

《纽约时报》在一封警示性电子邮件中称，其中一家学校与中国军方有联系。报导称，谷歌1月12称该公司及其他几家公司遭遇黑客攻击。之前的报导称，黑客们的目标是人权活动者的电子邮件、商业机密和电脑代码。

http://www.cn.wsj.com/gb/20100219/BCH021293.asp?source=whatnews2

=====================================================

上海交大和蓝翔职业学校

-———————————

Two Chinese Schools Said to Be Tied to Online Attacks

SAN FRANCISCO — A series of online attacks on Google and dozens of other

American corporations have been traced to computers at two educational

institutions in China, including one with close ties to the Chinese military,

say people involved in the investigation.

They also said the attacks, aimed at stealing trade secrets and computer codes

and capturing e-mail of Chinese human rights activists, may have begun as

early as April, months earlier than previously believed. Google announced on

Jan. 12 that it and other companies had been subjected to sophisticated

attacks that probably came from China.

Computer security experts, including investigators from the National Security

Agency, have been working since then to pinpoint the source of the attacks.

Until recently, the trail had led only to servers in Taiwan.

If supported by further investigation, the findings raise as many questions as

they answer, including the possibility that some of the attacks came from

China but not necessarily from the Chinese government, or even from Chinese

sources.

Tracing the attacks further back, to an elite Chinese university and a

vocational school, is a breakthrough in a difficult task. Evidence acquired by

a United States military contractor that faced the same attacks as Google has

even led investigators to suspect a link to a specific computer science class,

taught by a Ukrainian professor at the vocational school.

The revelations were shared by the contractor at a meeting of computer

security specialists.

The Chinese schools involved are Shanghai Jiaotong University and the Lanxiang

Vocational School, according to several people with knowledge of the

investigation who asked for anonymity because they were not authorized to

discuss the inquiry.

Jiaotong has one of China’s top computer science programs. Just a few weeks

ago its students won an international computer programming competition

organized by I.B.M. — the “Battle of the Brains” — beating out Stanford and

other top-flight universities.

Lanxiang, in east China’s Shandong Province, is a huge vocational school that

was established with military support and trains some computer scientists for

the military. The school’s computer network is operated by a company with

close ties to Baidu, the dominant search engine in China and a competitor of

Google.

Within the computer security industry and the Obama administration, analysts

differ over how to interpret the finding that the intrusions appear to come

from schools instead of Chinese military installations or government agencies.

Some analysts have privately circulated a document asserting that the

vocational school is being used as camouflage for government operations. But

other computer industry executives and former government officials said it was

possible that the schools were cover for a “false flag” intelligence operation

being run by a third country. Some have also speculated that the hacking could

be a giant example of criminal industrial espionage, aimed at stealing

intellectual property from American technology firms.

Independent researchers who monitor Chinese information warfare caution that

the Chinese have adopted a highly distributed approach to online espionage,

making it almost impossible to prove where an attack originated.

“We have to understand that they have a different model for computer network

exploit operations,” said James C. Mulvenon, a Chinese military specialist and

a director at the Center for Intelligence Research and Analysis in Washington.

Rather than tightly compartmentalizing online espionage within agencies as the

United States does, he said, the Chinese government often involves volunteer

“patriotic hackers” to support its policies.

Spokesmen for the Chinese schools said they had not heard that American

investigators had traced the Google attacks to their campuses.

If it is true, “We’ll alert related departments and start our own

investigation,” said Liu Yuxiang, head of the propaganda department of the

party committee at Jiaotong University in Shanghai.

But when asked about the possibility, a leading professor in Jiaotong’s School

of Information Security Engineering said in a telephone interview: “I’m not

surprised. Actually students hacking into foreign Web sites is quite normal.”

The professor, who teaches Web security, asked not to be named for fear of

reprisal.

“I believe there’s two kinds of situations,” the professor continued. “One is

it’s a completely individual act of wrongdoing, done by one or two geek

students in the school who are just keen on experimenting with their hacking

skills learned from the school, since the sources in the school and network

are so limited. Or it could be that one of the university’s I.P. addresses was

hijacked by others, which frequently happens.”

At Lanxiang Vocational, officials said they had not heard about any possible

link to the school and declined to say if a Ukrainian professor taught

computer science there.

A man named Mr. Shao, who said he was dean of the computer science department

at Lanxiang but refused to give his first name, said, “I think it’s impossible

for our students to hack Google or other U.S. companies because they are just

high school graduates and not at an advanced level. Also, because our school

adopts close management, outsiders cannot easily come into our school.”

Mr. Shao acknowledged that every year four or five students from his computer

science department were recruited into the military.

Google’s decision to step forward and challenge China over the intrusions has

created a highly sensitive issue for the United States government. Shortly

after the company went public with its accusations, Secretary of State Hillary

Rodham Clinton challenged the Chinese in a speech on Internet censors,

suggesting that the country’s efforts to control open access to the Internet

were in effect an information-age Berlin Wall.

A report on Chinese online warfare prepared for the U.S.-China Economic

Security Review Commission in October 2009 by Northrop Grumman identified six

regions in China with military efforts to engage in such attacks. Jinan, site

of the vocational school, was one of the regions.

Executives at Google have said little about the intrusions and would not

comment for this article. But the company has contacted computer security

specialists to confirm what has been reported by other targeted companies:

access to the companies’ servers was gained by exploiting a previously unknown

flaw in Microsoft’s Internet Explorer Web browser.

Forensic analysis is yielding new details of how the intruders took advantage

of the flaw to gain access to internal corporate servers. They did this by

using a clever technique — called man-in-the-mailbox — to exploit the natural

trust shared by people who work together in organizations.

After taking over one computer, intruders insert into an e-mail conversation a

message containing a digital attachment carrying malware that is highly likely

to be opened by the second victim. The attached malware makes it possible for

the intruders to take over the target computer.

http://www.nytimes.com/2010/02/19/technology/19china.html?hp

Terminusbot 整理，讨论请前往 2049bbs.xyz

陶艾婷是马甲

你要一直相信，这世界不该是你看到的这个样子。

2楼大中小发表于 2010-2-19 12:02 只看该作者

NYT新进展：Google等科技公司受到的网络攻击来源可能涉及中国两所高校

纽约时报报道,

之前对于谷歌等美国科技公司的网络攻击调查取得突破性进展.调查人员追踪到源头来自上海交通大学及蓝翔职业学院。后者是山东的一个技校，由专治不孕不育的唐国强老师代言，这次可露脸了。对此,

两所学校均表示没有听说相关事件;

而交大宣传部一官员向纽约时报表示,如果事情属实”我们将告知相关部门,并且展开自我调查”;而一位匿名的交大信息安全工程学院教授就表示”对此我并不感到惊讶;要么就是学生的个人行为;要么是学校ip被劫持”

原文链接 http://www.nytimes.com/2010/02/19/technology/19china.html?hp

Two Chinese Schools Said to Be Tied to Online Attacks

Published: February 18, 2010