Chinese Cyber-Warfare Capabilities

[baltoro]

While searching for interesting stories on CNN's website, I came across this interesting review paper by Northrop Grumman: Capability of the People's Republic of China to Conduct Cyber Warfare and Computer Network Exploitation, 2009.

This paper presents a comprehensive open source assessment of China's capability to conduct computer network operations (CNO) both during peacetime and periods of conflict.

Highlights from the report:   

"A long term, persistent campaign to collect sensitive but unclassified information from US Government and US defense industry networks using computer network exploitation techniques, long attributed to China, has successfully exfiltrated at least 10 to 20 terabytes of data from US Government networks as of 2007, according to US Air Force estimates,..."

'The conceptual framework currently guiding PLA Information Warfare strategy is called "Integrated Network Electronic Warfare" (wangdian yitizhan) a combined application of computer network operations and electronic warfare used in a coordinated or simultaneous attack on enemy C4ISR networks and other key information systems. The objective is to deny an enemy access to information essential for continued combat operations."

This, from the current CNN Cyber-crime series (China vs. U.S.: The cyber Cold War is raging):   
"U.S. military networks were attacked 6 million times in 2006, according to the National Security Agency. By 2010, there were 6 million attacks per day. "

[vanjast]

Doesn't surprise me, but you can use their ability to work 25 hours a day to your advantage  :bg

[hutch--]

There IS a solution, stop slopping sensitive data all over the internet and use a private network that cannot be hacked. It would have to be classed as rediculous that military information of any value can be accessed over the internet as it means anyone with an internet connection and hacking knowhow can start WW3. maybe its time that heads of security were hauled up in front of a Senate Committee to explain why they are so inept at protecting serious security information.

[anunitu]

The military used to be one of only a few that had access,mostly intended for research groups and military to stay in touch, then it changed into what we have now.
it would not be hard for the old model to be used strictly for military purposes.

[dedndave]

i am sure that, since wikileaks, they have tightened things up considerably
you can bet that someones butt-hole got tightened, as well - lol
in our gov't, it is rarely the right person, however
all the "best" officials have a plan and a patsy for every situation
that's why they stay in place