Call to rally against cyber crime 建议打击网络犯罪

Security professionals are being called on to band together to fight the highly organised cyber criminals of the world.

系统安全专家正在被召集起来共同与世界上高度组织的网络犯罪进行战斗。

Data stored online is said to be the number one focus of breaches¹

The call was made at a San Francisco conference organised by security firm RSA - the largest event of its kind.

RSA President Art Coviello said the online fraudsters（诈骗犯） "are not bound by any rules of law" and "control massive armies of zombie（巫毒崇拜，蛇神） computers".

Recent reports claimed cyber criminals had infiltrated²（浸透，渗透） everything from the US power grid³ to the Pentagon（五角大楼）.

In his keynote speech（主题演讲） to the conference, Mr Coviello urged the industry not to underestimate the global cyber security threat and the sophistication of criminals.

"Our adversaries⁴ operate as a true ecosystem⁵ that thrives through interdependence（互相依赖） and constantly adapts to ensure its growth and survival.

Mr Coviello said that meant it was time for the security industry to come together to defeat the criminal element at large.

"We must evolve from acting⁶ independently to solve discreet⁷（谨慎的） information security problems to acting collaboratively（协作地，合作地） to create a common development process.

Symantec said 90% of attacks target confidential⁸ information

'Anyone can be a victim'

Statistics revealed at the conference show how the internet is increasingly being used by online fraudsters.

Sophos, a security software company, said a web page was infected every 4.5 seconds and that every day more than 20,000 new samples of malware（恶意软件） were discovered.

Symantec, one of the biggest security software firms in the world, said it had blocked 245 million attacks per month in 2008 - roughly 200,000 attacks every half hour.

"Information is the most valuable thing we protect," said Symantec CEO Enrique Salem.

"Attackers are shifting their approaches. They are moving away from the idea of mass distribution（质量分布） to a few threats being distributed to what we call micro-distribution where there are millions of distinct（独特的，不同的） threats.

"They are targeted at individuals. They are targeted at trying to steal confidential information. Anyone can be a victim," warned Mr Salem.

The trend away from random⁹ attacks to more targeted ones was echoed by Microsoft's Scott Charney.

"We have seen over the years that the internet has become much more focused in terms of bad guys going after medical records, financial data and now you see widely reported nation state attacks," he said.

"We have everything from randomised criminals who are opportunistic to organised crime and that creates a huge challenge for the internet community," Mr Charney added.

At the RSA conference, Microsoft revealed it was testing some of its new identity-based security technology in Washington State schools, where students and teachers will be able to securely access grades and class schedules.

About 50 schools and 24,000 pupils are taking part in the pilot using the company's Geneva claims-based identity platform.

Mr Coviello said the global cyber threat continues to escalate¹⁰

Collaboration¹¹

At the conference, RSA President Mr Coviello suggested a number of ways the industry could come together to mitigate¹²（镇静，缓和） the cyber security threat.

He outlined three key practices that included collaborating¹³ on standards, sharing technologies and integrating technologies and controls into the infrastructure¹⁴.

Brett Galloway, Senior Vice-President of Cisco's Wireless¹⁵ Technology Group, agreed with that collaborative approach and said it was already happening to some degree.

"The work that goes on between the companies, the standards and the work that goes on between companies operationally to integrate（整合）, inter-operate and make sure that our customers bring these solutions together is actually quite profound and important.

"We clearly live in an era of increasing sensitivity and increasing threat not only from commercial bad guys but other sorts of bad guys as well," noted¹⁶ Mr Galloway.

Microsoft's Mr Charney said he was confident the industry would band together for one very clear reason.

"I think when you have a common enemy, which is what the cyber criminal is, it really galvanises（激励） organisations to work closely together."

Mr Coviello was just as optimistic and pointed¹⁷ out to the audience that by joining forces they increase their prospect¹⁸ of success.

"There's an African proverb（谚语，格言） that advises, 'If you want to go fast, go alone; if you want to go far, go together'," Mr Coviello concluded.