Schneier on Security

off • July 6, 2008 5:39 PM

“When a new system concept or new technology is used, one has to build a system to throw away,” Let China hack away at some throw away system. It’s getting research done without paying them to do it. A ton of work for no pay and a better system. Save time while these guy work day and night testing your new systems for you. Thanks guys.

off • July 6, 2008 9:45 PM

A good summary of the threats.
It turns out that Russia is better at it than China.

COMPUTER NETWORK THREATS

“The U.S. information infrastructure, which includes telecommunications, computer networks and systems and the data that resides on them, is critical to most aspects of modern life in the United States . Russia and China pose the most experienced, well-resourced and capable computer network operations (CNO) threats to the United States , but they are not the only foreign entities that do. Other nations and non-state terrorist and criminal groups are also developing and refining their abilities to exploit and attack computer networks in support of their peacetime and wartime military, intelligence or criminal goals.

The scope and sophistication of malicious CNO targeting against U.S. networks has steadily increased over the last five years. This is of particular concern because of the pronounced military advantages that the United States has traditionally derived from information networks. Potential adversaries that cannot compete head-on against the United States may view CNO as a preferred asymmetric strategy to exploit our weakness while minimizing or degrading our traditional strengths.

China became the largest exporter of information technology in 2004, surpassing the United States and the European Union. Current trends suggest that China will soon become a major supplier to the United States . O verseas production provides opportunities for hostile actors to access targeted systems by exploiting the supply chain at its origin.

Russia and China have the technical, educational and operational ability to conduct CNO against targeted networks. Russia remains the most capable cyber-threat to the United States . Several high-ranking Russian military officials have promoted CNO’s potential against future adversaries. Since 2005 China has been incorporating offensive CNO into their military exercises, primarily in first strikes against enemy networks. Recent hacking activities emanating from China underscore concerns about Beijing ‘s potential hostile CNO intelligence collection activities.”

Source http://www.dia.mil/publicaffairs/Testimonies/statement30.html

“Russia has the most highly developed, capable, and well-resourced IO capability among potential foreign adversaries. Russian foreign and military intelligence, as well as the Russian Security Service, have active offensive and defensive CNO programs. Assessed capabilities include insider recruitment, cryptology, viruses, software and hardware attacks, and remote penetration.

China has developed an apparent large scale CNO program, including military exercises to refine and implement concepts. China’s robust presence in the global IT hardware and software supply chain enhances its technical expertise and IO capability. China is the number one IT hardware provider for U.S. consumers, accounting for 42 percent of U.S. IT hardware imports in 2005. As such, U.S. dependence on China for certain items critical to the U.S. defense industry and the waning of U.S. global IT dominance are valid concerns that demand vigilance.”
Source
http://www.dia.mil/publicaffairs/Testimonies/statement28.html

“U.S. dependence on China for certain items critical to the U.S. defense industry and the waning of U.S. global IT dominance are valid concerns that demand vigilance.” Start making hardware here. The imported IT is a threat like the imported oil is, in that we need people who don’t need us or don’t care about us. We used to make all this stuff and made it to last.