評論
打印
United States
美國版塊
Hacking and ransoms
黑客攻擊與勒索
Post-Colonial studies
Colonial Pipeline遭受勒索攻擊事件的復(fù)盤
A cyber-attack exposes growing risks to America’s energy infrastructure
一次網(wǎng)絡(luò)攻擊事件暴露出美國能源基礎(chǔ)設(shè)施所面臨的與日俱增的風(fēng)險(xiǎn)
Pipelines, like cables and substations, are the type of dull, critical infrastructure that Americans don’t think about until, suddenly, they must. On May 7th a cyber-attack prompted Colonial Pipeline, a firm headquartered in Georgia, to shut down a tube stretching from Texas to New Jersey that supplies about 45% of the petrol and diesel used on the east coast. Federal officials confirmed that DarkSide, a ransomware gang believed to be based in the former Soviet Union, was responsible. "We're not talking about some small pipeline,” explains Amy Myers Jaffe, author of “Energy’s Digital Future”, a new book. "We’re talking about the jugular.”
就像電纜和變電站一樣，管道是一種不起眼卻必不可少的基礎(chǔ)設(shè)施，美國人若非突然必要，通常不會將管道放在心上。5月7日，總部位于佐治亞州的Colonial Pipeline公司因一次網(wǎng)絡(luò)攻擊而被迫關(guān)閉了從德克薩斯州到新澤西州的輸油管道，該管道承擔(dān)著東海岸45%的汽油和柴油供應(yīng)。聯(lián)邦官員證實(shí)，此次網(wǎng)絡(luò)攻擊的幕后黑手是據(jù)信前蘇聯(lián)的勒索組織DarkSide。新書《能源的數(shù)字未來》的作者艾米·邁爾斯·賈菲解釋說：“我們談及的可不是什么小管道，而是美國的要害?！?/p>
On May 12th Colonial Pipeline said it had “initiated the restart of pipeline operations”, a carefully worded statement that conveys both the difficulty of returning to normal and a desire to contain panic. That day average petrol prices topped $3 a gallon for the first time since 2014. Much depends on whether more drivers rush to buy petrol, as they did in the oil shocks of the 1970s. If 30m carowners with half a tank decide to fill up, reckons S&P Global Platts Analytics, a data group, they would guzzle over 4m barrels, more than the recent daily demand of the entire eastern seaboard. Many are already buying while they can. Long queues formed at petrol stations in the south-east on May 11th. Some stations limited purchases; others ran out of fuel. The White House said it had established “an inter-agency response group” to “ ensure a continuing flow of fuel”.
5月12日，Colonial Pipeline公司稱已經(jīng)“開始重啟管道運(yùn)營”，這一措辭謹(jǐn)慎的聲明既表達(dá)了恢復(fù)正常的難度，也表達(dá)了其遏制恐慌的愿望。當(dāng)天，汽油平均價(jià)格自2014年以來首次突破每加侖3美元。汽油價(jià)格在很大程度上取決于是否有更多的司機(jī)像上世紀(jì)70年代石油危機(jī)時(shí)那樣急于購買汽油。數(shù)據(jù)集團(tuán)標(biāo)準(zhǔn)普爾全球普拉茨分析公司估計(jì)，如果3000萬名擁有半箱油的車主決定加滿油，那將消耗400多萬桶汽油，超過整個(gè)東海岸最近的每日需求量。很多人已經(jīng)在盡可能購買汽油了。5月11日，美國東南部的加油站排起了長隊(duì)。部分加油站限購汽油；其他加油站則全部賣光。白宮表示已成立了“跨機(jī)構(gòu)應(yīng)對小組”，以“確保燃料的持續(xù)供應(yīng)”。
Even if supplies are restored quickly, however, America faces a more stubborn problem. Despite more than a decade of attention to cybersecurity, the country’s energy infrastructure—the pipelines, power generators and grids on which the economy depends—remains exposed to hackers. Indeed the energy system may yet become more vulnerable, not less.
不過，即使供應(yīng)迅速恢復(fù)，美國也面臨著一個(gè)更為棘手的問題。盡管人們十多年來一直關(guān)注網(wǎng)絡(luò)安全，但美國的能源基礎(chǔ)設(shè)施——經(jīng)濟(jì)賴以增長的輸油管道、發(fā)電機(jī)和電網(wǎng)——仍然面臨黑客的威脅。事實(shí)上，美國能源系統(tǒng)目前可能更易受到攻擊，而并非不太脆弱。
Securing oil and electricity assets used to mean guarding against physical attacks: a bombing of a refinery, for instance. Those risks remain, but hackers can also inflict grave damage. In 2010 the Stuxnet worm, generally believed to have been deployed by Israel and America, targeted a nuclear facility in Iran. In 2015 and 2016 Russian hackers caused blackouts in Ukraine.
確保石油和電力資產(chǎn)安全在過去意味著防范物理攻擊：例如，轟炸煉油廠。物理風(fēng)險(xiǎn)仍然存在，但黑客也可能造成嚴(yán)重?fù)p害。2010年，通常被認(rèn)為是以色列和美國部署的Stuxnet蠕蟲病毒攻擊了一個(gè)伊朗核設(shè)施。2015年和2016年，俄羅斯黑客攻擊烏克蘭，造成斷電。
Aware of such risks, American executives and politicians have tried to mitigate them. The American Petroleum Institute, the country’s main oil lobby, has held an annual conference on cybersecurity since 2006. The Department of Energy dutifully developed “The Energy Sector Specific Plan” for cyberthreats, in 2015, “The Multi-year Plan for Energy Sector Cybersecurity”, in 2018 and “The 2020 Cybersecurity Multi-year Program Plan”, to name but a few.
美國高管和政客們在意識到黑客攻擊的風(fēng)險(xiǎn)后試圖降低風(fēng)險(xiǎn)。美國主要的石油游說團(tuán)體美國石油協(xié)會自2006年以來每年都舉辦一次網(wǎng)絡(luò)安全會議。美國能源部盡職盡責(zé)地在2015年制定了針對網(wǎng)絡(luò)威脅的《能源部專項(xiàng)預(yù)案》，2018年制定了《能源部網(wǎng)絡(luò)安全多年計(jì)劃》，還有《2020年網(wǎng)絡(luò)安全多年計(jì)劃》等等。
譯文由可可原創(chuàng)，僅供學(xué)習(xí)交流使用，未經(jīng)許可請勿轉(zhuǎn)載。
