美军是世界上信息技术最发达的国家 ~ The U.S. military has the most IT development in the world

SINA 2013-03-01

美军是世界上信息技术最发达的国家

2013-3-01 13:59  来源:新浪

 

  备战不足之士兵不是好士兵,现代网络战的兴起,并不会影响到这句格言的效用。虽然美军很清楚网络瘫痪会对军事行动构成重大影响,但其却夸大了自己适应这种危机的能力。如果美军继续忽视构建全军应对网络攻击的能力,那么在遭到网络攻击之时,美军就无法即时做出协调一致的有效回应。本报特约撰稿迦叶 美军面临四种严重网战威胁

  美军是世界上信息化程度最高的军队,但同时也是对网络依赖程度最高的军队。2012年10月初,美国国防部长帕内塔曾警告称,美国很容易遭受网络攻击,电网、运输系统或金融系统遭到网络攻击只是时间问题。在最糟糕的情况下,敌对者会针对美国若干关键基础设施同时发动网络攻击,并配合以对美物理攻击。那么,美国有可能会遭遇什么样的网络攻击?在借鉴全球网络战战例后,美国分析人士给出了四种假想:

  设想一:国家重要网站被关闭。2007年爆发的爱沙尼亚网络战就是最着名的战例。当时爱沙尼亚把首都塔林一座前苏联军事纪念像转移到军人坟场,不久之后该国政府、政党、银行以及主要媒体网站就遭到了大规模网络攻击。在这次网络战中,“拒绝服务攻击”是最主要的攻击模式,即黑客利用计算机向目标网站发送大量请求,导致网络因负荷过重而被迫关闭。

  在这次网络战中,美国需要注意的问题有三点:第一,爱沙尼亚是个非常先进的国家;第二,网络战的爆发是意料之外的;更糟糕的是,很难找到网络战的罪魁祸首。爱沙尼亚指责俄罗斯是幕后黑手,并称某个攻击服务器源自俄罗斯政府。但俄罗斯政府对此予以否认。

  设想二:黑客侵入军事网络系统,植入恶意程序,并使之在作战或网络战中发挥作用。由于美军网络化程度相当高,如果黑客入侵美军网络系统,就能够大幅度破坏其战斗力。例如,专业黑客就能够给全球定位系统重新定向。据报道,由美国以色列编写的“蠕虫”病毒曾侵入伊朗核设施,使伊朗上千台离心分离机陷入瘫痪。这是利用网络攻击现实世界的最大战例。

 

Rough Mandarin Chinese Translation:

 

  Preparing for the soldiers is not a good soldier, the rise of the modern network warfare, and will not affect the adage utility. Although the U.S. military is very clearly the network paralysis be military operations have a significant impact, but exaggerated his ability to adapt to this crisis. If the U.S. military continues to ignore the build of the whole army's ability to respond to cyber attacks, and then suffered cyber attacks, the U.S. military will not be able to respond with a prompt and effective response coordinated. Newspaper freelance writer Kasyapa U.S. military faces four serious threat of network warfare

  The U.S. Army is the army of the highest level of information technology in the world, but also the highest military dependence on the network. In early October 2012, U.S. Defense Secretary Panetta warned that the United States is vulnerable to cyber attacks, power grids, transportation systems, or financial systems have been cyber attack is only a matter of time. In the worst case, the adversary will launch a cyber attack against the United States a number of key infrastructure at the same time, and with physical attacks on the United States. Well, what kind of network attacks may encounter?Draw on a global network warfare wars, American analysts have given four hypothetical:

  Scenario: important national sites were shut down. The Estonian network warfare broke out in 2007 is the most famous wars. Then Estonian capital, Tallinn, a former Soviet military commemorative image transferred to the Military Cemetery, shortly after the country's government, political parties, banks and media sites have been subjected to a large-scale cyber attacks. This network warfare, "denial of service attack," the most important mode of attack that hackers use a computer to send a large number of requests to the target site, the network was forced to close due to overload.

  In this network warfare, the United States need to pay attention to the problem of three things: first, Estonia is a very advanced country; Second, the outbreak of the war of the network is unexpected; worse, it is difficult to find a network warfare culprit culprit. Estonia accused Russia is behind the attacks, saying an attack server from the Russian government. However, the Russian government has denied this.

  Scenario 2: hacking into military networks, malicious program, and to play a role in combat or network warfare. Due to the very high level of U.S. military network hacking U.S. military network system, can significantly undermine its combat effectiveness. For example, professional hackers will be able to be re-directed to the Global Positioning System. According to reports, the "worm" virus written by the United States andIsrael had penetrated Iranian nuclear facilities, and the thousands of centrifuges in Iran to a standstill. This is the maximum use of the network to attack the real world wars.

 

  五角大楼曾警告称,如果网络攻击对现实构成了影响,例如伤害到美国关键基础设施或导致人员伤亡,美国就有可能回应以军事行动。不过,美国戴顿大学教授苏珊·布伦纳指出,虽然黑客能够入侵军事网络系统并窃取重要信息,但私营企业(而非政府)才是最容易遭到网络攻击的目标。

  设想三:黑客会破坏关键基础设施,例如电网、金融系统或运输网络。这是美国决策者最关注的一种可能。美国国家科学院首席科学家赫伯·林指出,攻击电网会导致美国大面积停电,而重建一个电网就需要耗时9个月。奥巴马也曾以列车出轨为例——许多运输系统都依靠计算机网络调度——来描述运输系统遭到网络攻击会带来的后果。

  设想四:黑客会打响经济战,从美国私营企业窃取专利信息或资金。当幕后推手是一国政府时,网络犯罪和间谍活动就有可能会转化为战争。美国怀疑俄罗斯等国就在通过这种网络活动获取经济优势。因此,美国企业必须定期升级防御系统,以防被新型病毒和蠕虫入侵。

  目前这类攻击并不鲜见。有些人称之为“网络冷战”,相关国家争相开发最先进的攻防软件。2011年秋季赛门铁克诺盾安全报告称,网络犯罪每年造成3880亿美元损失,与毒品走私基本相同。重要的是,这类网络攻击的目标是私营企业,其网络运行不受决策者控制。 网战演习预案存在重大漏洞

  虽然美国面临着多重网络威胁,但美军网络战备情况却着实令人担忧。美国空军网络战司令部理查德·韦伯少将曾指出,美国空军负责提供“任务保障”,而不是“信息保障”,意思是美国空军的主要目标不是保护计算机,而是确保指挥官能够在网络战环境下继续作战。虽然美国陆军措辞不同,但陆军网络战司令部明显与空军持相同观点。为了实现这个目标,五角大楼开展了网络旗帜、堡垒防御者、网络努力等网络攻击演习。不过,这些大都属于团级以上梯队演习,而且美军的网络战演习预案也不够严谨。

  在很多时候,演习指挥官和规划者都会假设美军仍然可以使用网络资源,或是能够不切实际地快速恢复网络运行。而且,美军演习时间往往很短,演习预案中网络资源损失有限,并能够清楚区分损失是人为造成还是自然造成。这使指挥官和士兵能够推断其还未遇到过的环境,并做好回应准备。美军一厢情愿地认为其能够保留基本网络资源,并能够在高空电磁脉冲爆炸环境下迅速恢复网络能力,还能够攻克任何自然或人为网络破坏。事实上,即便是面对实际网络能力退化或损失程度低于未经预演的“网络珍珠港”的情况,美军各梯队依然无法有效应对。

 

Rough Mandarin Chinese Translation:

 

  The Pentagon had warned that if the cyber-attacks constitute the impact of reality, such as damage to critical  infrastructure or casualties, the United States is likely to respond to military action. However, Professor Susan Brenner of the University of Dayton, the United States pointed out that, although hackers can invade a military network system and steal important information, but the private sector (rather than government) is the most vulnerable to cyber-attacks target.

  Scenario three: the hacker will destroy critical infrastructure, such as power grids, financial systems or transportation networks. U.S. policy makers are most concerned about a possible. Herb Lin, chief scientist of the U.S. National Academy of Sciences, pointed out that the attacks the grid cause blackouts, and took nine months to rebuild a grid. Obama also derailment, for example - many transport systems rely on computer network scheduling - to describe the transport system have been the consequences of cyber-attacks will.

  Scenario 4: Hackers broke out economic warfare, theft of proprietary information or funds from the U.S. private sector. When the driving force behind the government of a country, cybercrime and espionage is likely to   be transformed into war. The American suspect that Russia and other countries in gaining economic advantage through the activities of this network. Therefore, the United States must regularly upgrade the defense system to  prevent the invasion of new viruses and worms.

  Such attacks are not uncommon. Some people call it the "Network Cold War", the related countries                  competing to develop the most advanced offensive and defensive software. Connaught Shield in autumn 2011       Symantec security report cybercrime cause a loss of $ 388 billion a year, and basically the same drug smuggling.      Important goal of this type of network attacks is the private sector, the operation of the network not controlled by policy makers. Network warfare exercise plan there are significant gaps in the

  Although the United States is facing the threat of multiple networks, but the U.S. military combat readiness    situation but really worrying. U.S. Air Force Network Warfare Command, Major General Richard Webber has pointed out, the U.S. Air Force is responsible for providing mission assurance, rather than "information protection", the meaning of the U.S. Air Force's main goal is not to protect the computer, but to ensure that the commanders in the network continue fighting in the war environment. Although the U.S. Army wording is different, but the Army Network Warfare Command was held the same view and the Air Force. To achieve this goal, the Pentagon has launched Web banner fortress defenders, network attacks, network efforts exercises. However, these mostly belong to the regiment level and above echelon exercises, and the U.S. military network warfare exercise plan is not stringent enough.

  In many cases, the exercise commanders and planners will assume that the U.S. military can still use the network resources, or unrealistic able to quickly restore the operation of the network. Moreover, the U.S. military exercises time is often very short, limited exercise plan in loss of network resources, and be able to clearly distinguish the loss is caused by human or natural cause. This allows commanders and soldiers to be able to infer its environment have not yet encountered, and prepared to answer ready. The U.S. military in wishful thinking that   it can retain the basic network resources, and the ability to quickly restore network capacity in high-altitude electromagnetic pulse explosion environment, but also be able to overcome any natural or man-made network damage. In fact, even in the face of actual network capacity without rehearsal, "Pearl Harbor," the situation of network degradation or the extent of the loss is less than the U.S. military echelon still not be able to respond        effectively.

 

 

  美军在网络战领域的备战失败,与其在上世纪八九十年代的备战情况形成了鲜明的对比。美军可以借鉴当年的两种应急演习预案,制定网络战环境下的演习预案:其一,在化学战环境下的持久和非持久演习;其二,在排级营级行动中使用信号操作训令,放弃使用无线电。自然,化学战演习预案不同于网络战演习预案。不过,这与当今美国必须面对的网络战属于同一类型。

  美军多年前曾心甘情愿地投入大量人力资源,包括高级指挥官,利用耗时费力的作战演习,提高反击生物战和化学战的作战能力。当时美军制定了演习预案,并为机械与装甲部队制定了标准作战程序,至少确保营级部队不会因小规模化学攻击遭受重大伤亡。然而,在网络战领域,美军至今还没有制定出这种预案及作战程序,虽然在应对未来网络战攻击问题上,五角大楼官员似乎比当年应对苏联化学攻击时更加自信。 提升非网战环境下作战能力

  从暂时瘫痪网络到复杂的持续性威胁,从海底滑坡到高海拔电磁脉冲爆炸,多种潜在网络问题能够对美军严重依赖的网络系统构成威胁。然而,预演网络竞赛环境下的作战行动,仍然是美军各作战梯队的重要能力缺口。如果美军不能做好充分准备,预防敌对者利用该缺口,那么就可以预想到,其势必会在未来网络战中遭受重创。

  上文提到的第二种应急演习预案要求美军重拾其忽视已久的技能:在长时间缺乏网络和无线电的大规模战场内作战。为了应对这种情况,美军各梯队指挥官可以采取以下措施:第一:减少日常C2、医疗、后勤、个人、金融和通信网络带宽应用;第二,与较高级别指挥官协同合作,请求获得非破坏性防御能力。第三,预演网络防御行动,部署不易受到威胁的网络资产;最后,模拟网络瘫痪或受限情况,实践其他通讯模式。

  简而言之,美军应定期以敌对者最危险的网络行动为演习预案,寻找应对这种危机的解决办法。而且,其还不能妄想网络突然中断后,会在短期内恢复正常或基本正常。另外,美军还应该利用实践检验其在网络受限之时的作战能力,而不是单纯地信任其技术与信息优势。

  自然,要做到这一点,美军还面临着重重挑战。对于美军而言,要展开全面网络战演习,其首先就要投入巨资,其次美军还承担着许多上级分配下来的训练目标——并非指挥官根据时间表和预算合理安排能够实现的目标。不过,在这种情况下,美军可以选择通过图上战术作业等与网战类似的作战演习提升作战能力。

 

Rough Mandarin Chinese Translation:

  U.S. troops prepare for failure in the field of network warfare, in stark contrast to its in preparing for the case of the eighties and nineties. U.S. can learn from the two emergency exercises plan formulated under the environment of network warfare exercise plan: First, persistent and non-persistent in the environment of chemical warfare exercises; Second, use the signal operation in platoon level battalion level operations Instructions renounce the use of radio. Natural, chemical warfare exercise plan is different from the the network warfare exercise plan. However, network warfare, and today the United States must face the same type.

  U.S. military years ago was willing to invest a lot of human resources, including a senior commander, to counter the biological and chemical warfare, the use of time-consuming combat exercise to improve combat capability. When the U.S. military to develop exercise plans, and to develop standard operating procedures for machinery and armored forces, at least not ensure battalions suffered heavy casualties due to the small-scale chemical attack. However, in the field of network warfare, the U.S. military has yet to work out such a plan and operational procedures in response to the attack on the issue of the future network warfare, Pentagon officials seem to deal with than when Soviet chemical attack more confident. Enhance the combat ability of the non-network warfare environment

  From the the temporary paralysis network to complex continuing threat, to the explosion of high-altitude electromagnetic pulse from submarine landslides, a variety of potential network problems pose a threat to the U.S. military relies heavily on a network system. However, the rehearsal network competition environment operations, U.S. military combat echelon capability gap. If the U.S. military can not be fully prepared to prevent hostile use of the gap can be expected to, its bound to suffer heavy losses in the future network warfare.

  The above mentioned second emergency exercise plan requires the U.S. military to regain their skills has long been overlooked: the prolonged lack of large-scale networks and radio battlefield combat. In order to deal with this situation, the U.S. military echelon commanders can take the following measures: First: Reduce daily C2, medical, logistical, personal, financial and communication network bandwidth applications;, and higher-level commanders collaboration, requesting non-destructive defensive capabilities. Third, the rehearsal for network defense operations, deployment less susceptible to the threat of network assets; Finally, the analog network, paralyzed or restricted practice other mode of communication.

  In short, the U.S. military should be most dangerous adversaries network operations on a regular basis for the exercise plan, find solutions to deal with this crisis. Moreover, it also can not delusions network suddenly interrupted, it will return to normal in the short term or nearly normal. In addition, the U.S. should take advantage of the practice to test its combat capability of the network is limited, and not simply trust the technology and information superiority.

  Naturally, you want to do this, the U.S. military also faces challenges. For the U.S. military to carry out comprehensive network warfare exercises, we must first invested heavily, followed by the U.S. military also bear many superiors assigned training goals down - not the Commander reasonable arrangements can be achieved according to the timetable and budget target. However, in this case, the U.S. can choose to enhance the operational capability on tactical operations and network warfare similar combat exercise.

http://mil.chinaiiss.com/html/20133/1/a5bc0f.html