Industry


Ads by TechWords

See your link here


Martin McKeay's picture
Martin McKeay

Security Matters

Chinese hackers attacking the Commerce Department

The Bureau of Industry and Security (BIS) has been under attack from IPs sourced in China since early September, admitted the Commerce Department last Friday.  The Chinese systems have been hitting any system at the BIS that's exposed to the Internet with distributed denial of service (DDoS) attacks almost continuously, as well as successfully compromising some systems attached to the Internet.  The BIS deemed the attack to be serious enough that they shut down their Internet access all together and are rebuilding or replacing any system that might have been compromised.

Whether or not the hackers are sponsored by the Chinese government, or if the attacks are really even sourced in China, is still in question.  I find it highly unlikely that any government would be so brazen as to actively encourage this type of attack against another government.  However, they might be willing to turn a blind eye while it happens.  Another possibility is that the attacks aren't even really starting in China, that the attackers are just using a number of previously compromised systems to act as reflectors for their own attacks.  Is there a third possibility?

Personally, I think it's compromised systems that are being used in the attack.  If it is, this would be a perfect example of why it's becoming at least as important that we protect home systems as corporate systems.  Most home computers have nearly as much power as a corporate server and with the high speed Internet connections that are currently available, many homes are getting to the point where they have as big a pipe (or is that tube?) to the Internet as a small or medium business.  And when an attacker can aggregate several thousand home computers with high speed access, they can take down even some of the best protected government sites.

What People Are Saying

There's no doubt that home

There's no doubt that home systems should have the highest level of protection, but I don't see this becoming widely implemented any time soon.
Most home users don't have the technical knowledge of corporations with extensive IT departments. What will prove to be helpful, though, are more products that are made especially for this type of consumer who might lack advanced technical knowledge.
It's much easier for these hackers to focus on home computers, rather than huge corporations. These machines, too, house critical documents as many people store tax information, passwords and even work emails on their home computers.

The fact that the servers

The fact that the servers are in China is no indication of who is responsible. One might be better off looking at who might have it in for this Bureau of Industry and Security. If they are responsible for dealing with network security, there's a large number of people who might be angry with them.

While it may be plausible to

While it may be plausible to blame the Chinese Govt. for this tactic (they are sneaky dealers - example: human rights, etc., as everyone knows), but let's not jump to conclusions so fast and give them the benefit of the doubt. Let's shift our focus instead to the big Telecom Co's who are in a better position to stop this sort of traffic - the world should impose on them (as a right of passage to conduct business) the obligation to immediately stop this kind of conduct, to track down the IP and shut down the offending ISP Provider. It is no mystery that you can track my IP, or anyone else's for that matter - then using the same technology, track down and SHUT DOWN that ISP. The internet is starting to look like the United Nations - a wild frontier with no enforcement or bite.

take it easy dude

take it easy dude

country is innocent!

country is innocent!