TEDGlobal>London
Rodrigo Bijou: Governments don't understand cyber warfare. We need hackers
Rodrigo Bijou: 政府不明白網路世界的戰爭: 我們需要駭客
Filmed:
Readability: 5.6
1,396,708 views
因特網已經脱离了政府的控制, 它也成為了戰爭的前線. 據安全分析專家Rodrigo Bijou所說, 現代衝突於網路上在非國家小組, 積極分子, 私營企業中進行. 網絡世界正在被證明是恐怖分子的招募與激進化的溫床. 同時, 嚴厲的監控程式也已經足夠成熟, Bijou呼籲政府停止使用監控程序並且關閉程式的"後門"----並且他也大力提倡個體們加快進步.
Rodrigo Bijou - Security researcher
Rodrigo Bijou's work focuses on the cross section of intelligence, data science and information security. Full bio
Rodrigo Bijou's work focuses on the cross section of intelligence, data science and information security. Full bio
Double-click the English transcript below to play the video.
00:12
In 2008, Burhan Hassan, age 17,
0
840
4096
在2008年，一位17歲的
年輕人，布爾漢.漢森,
年輕人，布爾漢.漢森,
00:16
boarded a flight from Minneapolis
1
4960
1936
在明尼亞波利斯登機，
00:18
to the Horn of Africa.
2
6920
2296
飛往非洲之角意為索馬利亞半島.
00:21
And while Burhan was the youngest recruit,
3
9240
2416
雖然布爾漢是徵募兵裡面最年輕的,
00:23
he was not alone.
4
11680
1656
但他不是獨自一個人.
00:25
Al-Shabaab managed to recruit
over two dozen young men
over two dozen young men
5
13360
3376
索馬利亞青年黨，
計畫從大孩子到20出頭的青年中--
計畫從大孩子到20出頭的青年中--
00:28
in their late teens and early 20s
6
16760
2576
他們活躍在社交媒體平台，像是臉書--
00:31
with a heavy presence
on social media platforms like Facebook.
on social media platforms like Facebook.
7
19360
4016
招募二十多個年輕人.
00:35
With the Internet and other technologies,
8
23400
2256
網路或是其他科技，
00:37
they've changed our everyday lives,
9
25680
1696
它們改變了我們每天的生活.
00:39
but they've also changed
recruitment, radicalization
recruitment, radicalization
10
27400
3816
但也改變了徵募新兵制，激進主義
00:43
and the front lines of conflict today.
11
31240
2720
以及前線戰火的衝突.
00:47
What about the links connecting Twitter,
12
35680
2456
你是怎麼看待
00:50
Google and protesters
fighting for democracy?
fighting for democracy?
13
38160
3936
連結推特, 谷歌和為了捍衛民主自由權的
抗議群眾呢?
抗議群眾呢?
00:54
These numbers represent
Google's public DNS servers,
Google's public DNS servers,
14
42120
4016
這些數字代表的是Google的
DNS服務器的IP地址,
DNS服務器的IP地址,
00:58
effectively the only
digital border crossing
digital border crossing
15
46160
2536
實際上的唯一一個網絡邊界,
01:00
protesters had and could use
16
48720
2056
抗議者可以使用它
01:02
to communicate with each other,
to reach the outside world
to reach the outside world
17
50800
2816
互相溝通，與外在的世界連結,
01:05
and to spread viral awareness
18
53640
1616
並且散播關於他們國家所發生的事,
01:07
of what was happening
in their own country.
in their own country.
19
55280
2280
來引起廣泛的公眾意識.
01:10
Today, conflict is essentially borderless.
20
58960
2416
在今日，衝突的發生是無國界的.
01:13
If there are bounds to conflict today,
21
61400
2656
如果衝突是有界限的，
01:16
they're bound by digital,
not physical geography.
not physical geography.
22
64080
3896
應該 限於數位化的科技上的，
而不是自然地理學上的.
而不是自然地理學上的.
01:20
And under all this is a vacuum of power
23
68000
3056
在這種權力真空的情況下,
01:23
where non-state actors, individuals
and private organizations
and private organizations
24
71080
4056
獨立的個人，還有私人機構
01:27
have the advantage over slow, outdated
military and intelligence agencies.
military and intelligence agencies.
25
75160
5240
比起舊有的軍隊和情報機構更有優勢.
01:33
And this is because,
in the digital age of conflict,
in the digital age of conflict,
26
81240
2776
這是因為，在充滿衝突的數位化年代,
01:36
there exists a feedback loop
27
84040
2256
有反饋迴路的存在,
01:38
where new technologies,
platforms like the ones I mentioned,
platforms like the ones I mentioned,
28
86320
2856
在這個迴路裡, 新科技,
以及像我之前提過的平台,
以及像我之前提過的平台,
01:41
and more disruptive ones,
29
89200
1456
以及更有破壞性的東西,
01:42
can be adapted, learned, and deployed
by individuals and organizations
by individuals and organizations
30
90680
4776
可以在個人與機構中先適應，
學習並且部署.
學習並且部署.
01:47
faster than governments can react.
31
95480
2520
這比政府的系統反應更為快速.
01:51
To understand the pace
of our own government thinking on this,
of our own government thinking on this,
32
99840
4096
為了了解我們政府
對這個的想法是怎麼樣的,
對這個的想法是怎麼樣的,
01:55
I like to turn to something aptly named
33
103960
1976
我想求助於一個命名恰當的組織,
01:57
the Worldwide Threat Assessment,
34
105960
3136
"全球化威脅評估平台",
02:01
where every year the Director
of National Intelligence in the US
of National Intelligence in the US
35
109120
3696
每年，美國的國家情報總監
02:04
looks at the global threat landscape,
36
112840
2816
都會觀察遍布全球的威脅情況,
02:07
and he says, "These are the threats,
these are the details,
these are the details,
37
115680
3256
並且說"這些是威脅，
這些是所有事件的細節，
這些是所有事件的細節，
02:10
and this is how we rank them."
38
118960
2056
這就是我們分危險等級的方法. "
02:13
In 2007, there was absolutely
no mention of cyber security.
no mention of cyber security.
39
121040
3416
在2007年，絕對不會有人提到網路安全.
02:16
It took until 2011,
when it came at the end,
when it came at the end,
40
124480
3695
2011年這個詞才出現, 它最終誕生了.
02:20
where other things, like West
African drug trafficking, took precedence.
African drug trafficking, took precedence.
41
128199
3897
其他優先佔領一席之地的，
像是西非販毒市場.
像是西非販毒市場.
02:24
In 2012, it crept up, still behind things
like terrorism and proliferation.
like terrorism and proliferation.
42
132120
5496
在2012年，這個平台還在緩慢的成長，
而快速擴散的恐怖主義卻遙遙領先.
而快速擴散的恐怖主義卻遙遙領先.
02:29
In 2013, it became the top threat,
43
137640
2096
直到2013年，恐怖主義
這個平台成了首要威脅.
這個平台成了首要威脅.
02:31
in 2014 and for the foreseeable future.
44
139760
3480
在2014年以及可預見的未來中,
02:36
What things like that show us
45
144240
1656
像恐怖攻擊這個例子，
02:37
is that there is
a fundamental inability today
a fundamental inability today
46
145920
2976
會讓政府毫無能力,
02:40
on the part of governments
to adapt and learn in digital conflict,
to adapt and learn in digital conflict,
47
148920
4640
讓它去適應和學習甚麼是數位網路戰,
02:46
where conflict can be immaterial,
borderless, often wholly untraceable.
borderless, often wholly untraceable.
48
154120
4560
衝突也許是不重要的，
無國界的，大多無法追蹤.
無國界的，大多無法追蹤.
02:51
And conflict isn't just online to offline,
as we see with terrorist radicalization,
as we see with terrorist radicalization,
49
159560
4616
衝突並不像恐怖激進主義只是
線上到線下的模式，
線上到線下的模式，
02:56
but it goes the other way as well.
50
164200
2080
也可能是其他的方式.
02:59
We all know the horrible events
that unfolded in Paris this year
that unfolded in Paris this year
51
167520
3536
我們都知道今年在巴黎查理周刊總部
03:03
with the Charlie Hebdo terrorist attacks.
52
171080
1953
發生的恐怖攻擊事件.
03:05
What an individual hacker or a small group
of anonymous individuals did
of anonymous individuals did
53
173057
4479
駭客和匿名者的一些小型團體所做的,
03:09
was enter those social media conversations
that so many of us took part in.
that so many of us took part in.
54
177560
4616
就是進入我們平時都在使用的
社交媒體平台.
社交媒體平台.
03:14
#JeSuisCharlie.
55
182200
2136
#JeSuisCharlie(我是查理, 話題名).
03:16
On Facebook, on Twitter, on Google,
56
184360
2216
在臉書，推特和谷歌這些平台,
03:18
all sorts of places where millions
of people, myself included,
of people, myself included,
57
186600
3456
或是任何像這樣大型的網路平台，
有上百萬人,包括我自己,
有上百萬人,包括我自己,
03:22
were talking about the events
58
190080
1616
都在討論那次的攻擊事件.
03:23
and saw images like this,
59
191720
1456
當看見這樣的光景，
03:25
the emotional, poignant image of a baby
with "Je suis Charlie" on its wrist.
with "Je suis Charlie" on its wrist.
60
193200
5136
令人情緒交加和深刻的字眼"我是查理"字條，綁在嬰兒的手腕上.
03:30
And this turned into a weapon.
61
198360
2096
這成為了一項武器.
03:32
What the hackers did
was weaponize this image,
was weaponize this image,
62
200480
2336
駭客把這樣的照片，製造成武器,
03:34
where unsuspecting victims,
63
202840
1656
並讓我們這些毫無防備的受害者,
03:36
like all of us in those conversations,
64
204520
1896
在所有網路對話的群組上
03:38
saw this image, downloaded it
65
206440
2616
看到這張照片，下載它,
03:41
but it was embedded with malware.
66
209080
2136
但這張網路照片，已被植入了病毒軟件.
03:43
And so when you downloaded this image,
67
211240
1976
所以當你在下載時,
03:45
it hacked your system.
68
213240
2056
病毒就駭進系統裡.
03:47
It took six days to deploy
a global malware campaign.
a global malware campaign.
69
215320
4040
花了6天，在全球佈署惡意軟體活動.
03:52
The divide between physical
and digital domains today
and digital domains today
70
220400
2736
在今日，現實世界和
數位化世界之間的分裂，
數位化世界之間的分裂，
03:55
ceases to exist,
71
223160
1416
已經消失了,
03:56
where we have offline attacks
like those in Paris
like those in Paris
72
224600
2936
發生離線外的攻擊 (像巴黎事件) 的地方,
03:59
appropriated for online hacks.
73
227560
2240
已經被在線網路攻擊所利用.
04:03
And it goes the other way as well,
with recruitment.
with recruitment.
74
231320
2456
這種攻擊也轉向募兵制的方式.
04:05
We see online radicalization of teens,
75
233800
2456
我們看到網路上，激進組織裡的青年,
04:08
who can then be deployed globally
for offline terrorist attacks.
for offline terrorist attacks.
76
236280
4280
佈署於世界各地，
造成網路以外的恐怖攻擊.
造成網路以外的恐怖攻擊.
04:13
With all of this, we see that there's
a new 21st century battle brewing,
a new 21st century battle brewing,
77
241480
4856
基於這些事件，我們看到有很多
在新21世紀製造出來的戰爭,
在新21世紀製造出來的戰爭,
04:18
and governments
don't necessarily take a part.
don't necessarily take a part.
78
246360
2160
政府不見得會介入.
所以另外一個例子是，
匿名者及洛斯哲塔斯的較量.
匿名者及洛斯哲塔斯的較量.
04:21
So in another case,
Anonymous vs. Los Zetas.
Anonymous vs. Los Zetas.
79
249560
5336
2001年9月在墨西哥,
04:26
In early September 2011 in Mexico,
80
254920
2536
洛斯哲塔斯，最有影響力的販毒集團之一，
04:29
Los Zetas, one of the most
powerful drug cartels,
powerful drug cartels,
81
257480
3056
對二名部落客執行絞刑，並展示著標語，
04:32
hung two bloggers with a sign that said,
82
260560
2336
"所有於網路上愛管閒事的人，
將會變成這樣. "
將會變成這樣. "
04:34
"This is what will happen
to all Internet busybodies."
to all Internet busybodies."
83
262920
3680
一星期後，一位女孩被斬首.
04:39
A week later, they beheaded a young girl.
84
267720
1976
他們砍下她的頭顱，
並放在女孩的電腦上,
並放在女孩的電腦上,
04:41
They severed her head,
put it on top of her computer
put it on top of her computer
85
269720
2456
展示著同樣的標語.
04:44
with a similar note.
86
272200
1216
並在網路上做出了攻擊,
04:45
And taking the digital counteroffensive
87
273440
2856
而政府對事件的發生
根本無從理解及反應，
根本無從理解及反應，
04:48
because governments couldn't even
understand what was going on or act,
understand what was going on or act,
88
276320
3286
匿名者，一個我們無法參與，
卻用正面力量影響世界的組織,
卻用正面力量影響世界的組織,
04:51
Anonymous, a group we might not associate
as the most positive force in the world,
as the most positive force in the world,
89
279630
3896
開始了些行動，
04:55
took action,
90
283550
1186
不是針對網路攻擊，
而是關於信息自由的威脅警告.
而是關於信息自由的威脅警告.
04:56
not in cyber attacks, but threatening
information to be free.
information to be free.
91
284760
3600
在社交媒體上，他們宣告，
05:01
On social media, they said,
92
289920
1696
"我們會將這些訊息釋出
05:03
"We will release information
93
291640
1656
給那些與卡特爾販毒交易相關聯的
檢察官和州長們. "
檢察官和州長們. "
05:05
that ties prosecutors and governors
to corrupt drug deals with the cartel."
to corrupt drug deals with the cartel."
94
293320
4320
並會將衝突持續擴大，
05:10
And escalating that conflict,
95
298800
2376
洛斯哲塔斯回應"當你們每釋放出一點訊息，
我們將會殺十個人. "
我們將會殺十個人. "
05:13
Los Zetas said, "We will kill 10 people
for every bit of information you release."
for every bit of information you release."
96
301200
5800
所以反擊事件就這樣結束了，
如果繼續行動將會發生更可怕的事.
如果繼續行動將會發生更可怕的事.
05:19
And so it ended there because
it would become too gruesome to continue.
it would become too gruesome to continue.
97
307880
4640
但卻有很大的影響力的地方在於,
05:25
But what was powerful about this
98
313560
2040
匿名者團體本身，
05:28
was that anonymous individuals,
99
316640
2576
不是聯邦警察，軍方，政客
05:31
not federal policia,
not military, not politicians,
not military, not politicians,
100
319240
3616
有能力將恐懼深深導入在
05:34
could strike fear deep into the heart
101
322880
4176
全世界最有權力，暴力的販毒集團中.
05:39
of one of the most powerful,
violent organizations in the world.
violent organizations in the world.
102
327080
4400
今日我們活在一個
05:44
And so we live in an era
103
332320
2176
這樣的時代:
缺乏對以前的衝突,
缺乏對以前的衝突,
05:46
that lacks the clarity
of the past in conflict,
of the past in conflict,
104
334520
3536
對我們與之抗爭的人，
對攻擊行動背後的動機，
對攻擊行動背後的動機，
05:50
in who we're fighting,
in the motivations behind attacks,
in the motivations behind attacks,
105
338080
3816
對科技上的工具和方法，
05:53
in the tools and techniques used,
106
341920
1856
還有對他們發展得有多快
的明晰了解.
的明晰了解.
05:55
and how quickly they evolve.
107
343800
1640
不過問題還是存在:
05:58
And the question still remains:
108
346720
1496
個人，機構及政府可以怎麼做?
06:00
what can individuals,
organizations and governments do?
organizations and governments do?
109
348240
5536
要回答這些問題，先從獨立個人開始，
06:05
For answers to these questions,
it starts with individuals,
it starts with individuals,
110
353800
2816
我認為答案就在"對等安全".
06:08
and I think peer-to-peer security
is the answer.
is the answer.
111
356640
2760
那些捲入此事的人收買那些
線上的青少年,
線上的青少年,
06:12
Those people in relationships
that bought over teens online,
that bought over teens online,
112
360800
3936
我們能用"對等安全"解決它.
06:16
we can do that with peer-to-peer security.
113
364760
2056
個人在影響國家和國際安全上
06:18
Individuals have more power
than ever before
than ever before
114
366840
2536
比起以前更加重要.
06:21
to affect national
and international security.
and international security.
115
369400
2920
我們能創造積極的對等的關係,
06:25
And we can create those positive
peer-to-peer relationships
peer-to-peer relationships
116
373360
3256
無論是在線上或是線下
06:28
on and offline,
117
376640
1200
我們可以支持並教育我們的下一代駭客,
像我自己,
像我自己,
06:30
we can support and educate the next
generation of hackers, like myself,
generation of hackers, like myself,
118
378720
4336
而不是說, "你要么成為罪犯,
要么加入美國國家安全局. "
要么加入美國國家安全局. "
06:35
instead of saying, "You can either be
a criminal or join the NSA."
a criminal or join the NSA."
119
383080
3560
這在今天很重要.
06:39
That matters today.
120
387360
1360
而且不只是個人--甚至是組織, 公司.
06:41
And it's not just individuals --
it's organizations, corporations even.
it's organizations, corporations even.
121
389840
5296
他們有穿越更多邊界去行動的優勢.
06:47
They have an advantage
to act across more borders,
to act across more borders,
122
395160
2536
比政府更有效率, 更加迅速.
06:49
more effectively and more rapidly
than governments can,
than governments can,
123
397720
3536
並且有很多動機去做這件事.
06:53
and there's a set
of real incentives there.
of real incentives there.
124
401280
2880
能在這個數位時代被認為是可信的
06:57
It's profitable and valuable
125
405440
1696
是可獲利的, 有價值的.
06:59
to be seen as trustworthy
in the digital age,
in the digital age,
126
407160
3496
在即將來到的未來幾代中尤其如此.
07:02
and will only be more so
in future generations to come.
in future generations to come.
127
410680
3976
但是我們仍然不能忽略政府.
07:06
But we still can't ignore government,
128
414680
1816
因為那是我們通過求助來
使其做出一系列的行動
使其做出一系列的行動
07:08
because that's who we turn to
for collective action
for collective action
129
416520
3336
而保障我們的安全的.
07:11
to keep us safe and secure.
130
419880
2760
但是我們看看目前為止發生了什麼,
07:16
But we see where that's gotten us so far,
131
424080
3016
對適應以及研究網路衝突的無能,
07:19
where there's an inability to adapt
and learn in digital conflict,
and learn in digital conflict,
132
427120
3736
在最高層的領導力上,
07:22
where at the highest levels of leadership,
133
430880
3056
中央情報局的主管, 國防部長,
07:25
the Director of the CIA,
Secretary of Defense,
Secretary of Defense,
134
433960
2376
他們說, "網路珍珠港事件將會發生. "
" 網路911事件迫近. "
" 網路911事件迫近. "
07:28
they say, "Cyber Pearl Harbor will happen."
"Cyber 9/11 is imminent."
"Cyber 9/11 is imminent."
135
436360
4440
這種評論只會讓我們更加恐慌,
而不是感到安全.
而不是感到安全.
07:35
But this only makes us
more fearful, not more secure.
more fearful, not more secure.
136
443080
3000
通過禁止加密, 並且大量監控以及黑客行為,
07:39
By banning encryption in favor
of mass surveillance and mass hacking,
of mass surveillance and mass hacking,
137
447200
3736
国家通信总局和国家安全局
當然能監視你.
當然能監視你.
07:42
sure, GCHQ and the NSA can spy on you.
138
450960
2720
但是這並不意味著
他們是唯一一個能監控你的人.
他們是唯一一個能監控你的人.
07:46
But that doesn't mean
that they're the only ones that can.
that they're the only ones that can.
139
454880
2715
才能是廉價的, 甚至免費.
07:49
Capabilities are cheap, even free.
140
457619
2157
技術能力在全世界內都在上升,
07:51
Technical ability
is rising around the world,
is rising around the world,
141
459800
2616
並且個人和小團隊更為有利.
07:54
and individuals and small groups
have the advantage.
have the advantage.
142
462440
3520
所以說今天或許只有
国家通信总局和国家安全局監視你.
国家通信总局和国家安全局監視你.
07:59
So today it might just be
the NSA and GCHQ,
the NSA and GCHQ,
143
467520
2936
但是誰又能說中國人不能找到
你的系統的後門呢?
你的系統的後門呢?
08:02
but who's to say that the Chinese
can't find that backdoor?
can't find that backdoor?
144
470480
2762
或者在將來的某一代,
一些自己鑽研黑客技術的孩子?
一些自己鑽研黑客技術的孩子?
08:06
Or in another generation,
some kid in his basement in Estonia?
some kid in his basement in Estonia?
145
474120
3120
所以我想說這不是政府能做的事.
08:10
And so I would say that it's
not what governments can do,
not what governments can do,
146
478880
4776
他們做不了.
08:15
it's that they can't.
147
483680
1280
今天的政府們需要放棄權力和控制權
08:17
Governments today
need to give up power and control
need to give up power and control
148
485720
4496
來幫助讓我們更加安全.
08:22
in order to help make us more secure.
149
490240
2280
放棄大量的監控和黑客行為,
修補好那些系統的後門--
修補好那些系統的後門--
08:25
Giving up mass surveillance and hacking
and instead fixing those backdoors
and instead fixing those backdoors
150
493600
4096
這也許意味著他們不能監視我們,
08:29
means that, yeah, they can't spy on us,
151
497720
2256
但是中國人也不能,
08:32
but neither can the Chinese
152
500000
1336
或者那些深諳黑客技術的下一代年輕人.
08:33
or that hacker in Estonia
a generation from now.
a generation from now.
153
501360
2360
並且, 政府支持
防追踪瀏覽器以及比特幣等技術,
防追踪瀏覽器以及比特幣等技術,
08:37
And government support
for technologies like Tor and Bitcoin
for technologies like Tor and Bitcoin
154
505280
3456
也意味著放棄一些控制權,
08:40
mean giving up control,
155
508760
1576
但是也意味著開發者, 翻譯者,
擁有網路連接的任何人,
擁有網路連接的任何人,
08:42
but it means that developers, translators,
anybody with an Internet connection,
anybody with an Internet connection,
156
510360
4295
在一些像古巴, 伊朗以及中國這樣的國家,
能銷售他們的技能, 他們的產品,
能銷售他們的技能, 他們的產品,
08:46
in countries like Cuba, Iran and China,
can sell their skills, their products,
can sell their skills, their products,
157
514679
4096
在這全球市場中,
08:50
in the global marketplace,
158
518799
1377
但更重要的是兜售他們的想法,
08:52
but more importantly sell their ideas,
159
520200
2216
向我們展示在他們自己的國家正發生著什麼.
08:54
show us what's happening
in their own countries.
in their own countries.
160
522440
2680
並且這並不可怕,
08:58
And so it should be not fearful,
161
526080
2296
它對那些為公民權利, 自由言論, 民主制度
所努力的政府是充滿鼓舞的,
所努力的政府是充滿鼓舞的,
09:00
it should be inspiring
to the same governments
to the same governments
162
528400
2416
它對在上個世紀世界大戰中的
為公民權利, 自由言論, 民主制度
為公民權利, 自由言論, 民主制度
09:02
that fought for civil rights,
free speech and democracy
free speech and democracy
163
530840
2856
所努力的政府是充滿鼓舞的,
09:05
in the great wars of the last century,
164
533720
2016
直到今日，人類史上的第一次,
09:07
that today, for the first time
in human history,
in human history,
165
535760
3056
我們有一個關於技術的機會,
09:10
we have a technical opportunity
166
538840
2216
能使全球上億萬人們更安全.
09:13
to make billions of people
safer around the world
safer around the world
167
541080
2616
這是在人類歷史上的首次.
09:15
that we've never had before
in human history.
in human history.
168
543720
2536
這是令人激動的.
09:18
It should be inspiring.
169
546280
2080
(掌聲)
09:21
(Applause)
170
549840
5400
ABOUT THE SPEAKER
Rodrigo Bijou - Security researcherRodrigo Bijou's work focuses on the cross section of intelligence, data science and information security.
Why you should listen
Rodrigo Bijou is an information security researcher with a background in threat intelligence, security analytics and privacy technology. Named a Global Privacy Scholar by the International Association of Privacy Professionals, he is also currently a Watson Fellow exploring “Trust in Technology.”
Bijou previously worked as a consultant to the finance and technology industries and at companies such as Palantir. When not hacking data directly, Rodrigo can be found writing policy analysis in outlets such as IHS Jane’s Intelligence Review and the Harvard Law Review.
Rodrigo Bijou | Speaker | TED.com