时代周刊:公司如何让黑客难以得逞（1）

How one company refused to let cyberattackers win

公司如何让黑客难以得逞

In March 2019, the day after Hilde Merete Aasheim was appointed CEO of Norsk Hydro, an aluminum¹ and renewable-energy production company that produces enough energy in Norway for 900,000 homes per year, she received a call at 4 a.m. "We are under a severe cyberattack. You have to come to work," Aasheim recalls a colleague on the other end of the line telling her. "This is not a drill."

挪威海德鲁公司是一家铝和可再生能源生产公司，每年为挪威90万户家庭提供能源。2019年3月，就在希尔德·梅雷特·阿斯海姆被任命为该公司首席执行官后的第二天，她在凌晨4点接到了一个电话。“我们遭到了严重的网络攻击，你得回来上班，”阿斯海姆回忆着，电话另一端的同事对她说。“这不是演习。”

Critical infrastructure² systems around the globe have become a favorite target of hacker³ organizations. Last May's attack on Colonial Pipeline⁴, a major oil provider on the East Coast of the U.S., showed not only how brittle⁵ corporate⁶ cybersecurity standards can be but also that integral businesses can potentially be extorted⁷ into paying ransoms⁹. (Colonial Pipeline paid the attackers $4.4 million, though much of the money was later recovered by the U.S. government.)

全球的关键性基础设施系统已成为黑客组织最爱攻击的目标。去年5月，美国东海岸的大型石油供应商科洛尼尔管道运输公司遭到攻击，这不仅反映了企业的网络安全标准的脆弱，还预示着整合型企业可能会被勒索支付赎金。(科洛尼尔管道运输公司向攻击者支付了440万美元，不过后来大部分的钱都被美国政府追回。)

But paying a ransom⁸ "offers no assurance that a victim organization will regain¹⁰ access to their data or have their stolen data returned," says Eric Goldstein, executive assistant director for cybersecurity at the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which assists companies caught up in ransomware incidents. "Ransomware is a criminal economy—and as long as victims are paying ransom, we can expect these criminal groups to be further incentivized to conduct ongoing¹¹ attacks."

但是，美国网络安全和基础设施安全局(CISA)负责网络安全的执行助理主任埃里克·戈尔茨坦表示，支付赎金“并不能保证受害企业能够重新访问他们的数据，或者重新拿到被窃取的数据。”网络安全和基础设施安全局(CISA)旨在帮助陷入了勒索勒索病毒事件的公司。“勒索病毒是一种犯罪经济——只要受害者还在支付赎金，我们就可以预计这些犯罪集团将进一步受到鼓舞，进行持续的攻击。”

The attack against Hydro infected its global network of nearly 3,000 computers and encrypted key areas of the company's IT network. It stalled production in most of its manufacturing facilities. But paying the hackers¹² to regain access could have left the company with a compromised system—and receptive to another attack. "There was never the option to pay any ransom," says Aasheim. So Hydro shut down its network and took up the task of removing the virus from the equation altogether.

针对挪威海德鲁公司的攻击感染了该公司全球近3000台电脑的网络，并加密了其IT网络的关键区域。它的大部分生产设施都停止了生产。但是，付钱让黑客重新获得访问权限可能会让公司的系统受损，并容易再次受到攻击。“从来就没有支付赎金这一选择，”阿斯海姆说。因此，海德鲁公司关闭了自己的网络，开始着手将病毒从方程式中彻底清除。

1 aluminum   

n.(aluminium)铝

参考例句：

• The aluminum sheets cannot be too much thicker than 0.04 inches.铝板厚度不能超过0.04英寸。
• During the launch phase,it would ride in a protective aluminum shell.在发射阶段，它盛在一只保护的铝壳里。

2 infrastructure   

n.下部构造，下部组织，基础结构，基础设施

参考例句：

• We should step up the development of infrastructure for research.加强科学基础设施建设。
• We should strengthen cultural infrastructure and boost various types of popular culture.加强文化基础设施建设，发展各类群众文化。

3 hacker   

n.能盗用或偷改电脑中信息的人，电脑黑客

参考例句：

• The computer hacker wrote that he was from Russia.这个计算机黑客自称他来自俄罗斯。
• This site was attacked by a hacker last week.上周这个网站被黑客攻击了。

4 pipeline   

n.管道，管线

参考例句：

• The pipeline supplies Jordan with 15 per cent of its crude oil.该管道供给约旦15%的原油。
• A single pipeline serves all the houses with water.一条单管路给所有的房子供水。

5 brittle   

adj.易碎的；脆弱的；冷淡的；(声音)尖利的

参考例句：

• The pond was covered in a brittle layer of ice.池塘覆盖了一层易碎的冰。
• She gave a brittle laugh.她冷淡地笑了笑。

6 corporate   

adj.共同的，全体的；公司的，企业的

参考例句：

• This is our corporate responsibility.这是我们共同的责任。
• His corporate's life will be as short as a rabbit's tail.他的公司的寿命是兔子尾巴长不了。

7 extorted   

v.敲诈( extort的过去式和过去分词 )；曲解

参考例句：

• The gang extorted money from over 30 local businesses. 这帮歹徒向当地30多户商家勒索过钱财。
• He extorted a promise from me. 他硬要我答应。 来自《现代英汉综合大词典》

8 ransom   

n.赎金，赎身；v.赎回，解救

参考例句：

• We'd better arrange the ransom right away.我们最好马上把索取赎金的事安排好。
• The kidnappers exacted a ransom of 10000 from the family.绑架者向这家人家勒索10000英镑的赎金。

9 ransoms   

付赎金救人，赎金( ransom的名词复数 )

参考例句：

• The kidnappers exacted ransoms for their hostages. 绑匪勒索人质的赎金。
• Hotel:Wealthy captives sleep at the hotel for an increase in their ransoms. 酒店：富有的俘虏们要住在酒店等待足够的赎金以回家。

10 regain   

vt.重新获得，收复，恢复

参考例句：

• He is making a bid to regain his World No.1 ranking.他正为重登世界排名第一位而努力。
• The government is desperate to regain credibility with the public.政府急于重新获取公众的信任。

11 ongoing   

adj.进行中的，前进的

参考例句：

• The problem is ongoing.这个问题尚未解决。
• The issues raised in the report relate directly to Age Concern's ongoing work in this area.报告中提出的问题与“关心老人”组织在这方面正在做的工作有直接的关系。

12 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网