VOA慢速英语2021 美国官员考虑如何处理勒索软件赎金

American business leaders are looking for advice on how to deal with ransomware - a kind of software designed to seize a computer system until money is paid.

美国商界领袖正在寻求有关如何处理勒索软件的建议，勒索软件是一种旨在夺取计算机系统控制权直到用户缴纳赎金的软件。

The question is whether payments should be made for ransomware attacks. But the U.S. government has not yet given clear rules or policies on the issue.

问题在于是否应该为勒索软件攻击支付赎金。但是美国政府尚未就此问题出台明确规定或政策。

How to respond?

如何回应？

Eric Goldstein is a top cybersecurity official in the Department of Homeland Security. Goldstein told a congressional hearing last week, "It is the position of the U.S. government that we strongly discourage the payment of ransoms²." Discourage means to try to make people not want to do something.

埃里克·戈德斯坦是美国国土安全部的高级网络安全官员。戈德斯坦上周在一场国会听证会上表示：“美国政府的立场是，我们强烈反对支付赎金。”Discourage是指设法让人们不想做某事。

Goldstein told lawmakers that paying a ransom¹ does not guarantee that you will get your data back or that stolen files will be safe. He added even if the criminals keep their word, the money will be used to pay for the next round of attacks.

戈德斯坦对议员表示，支付赎金并不能保证你可以拿回数据或确保被盗文件的安全。他还表示，即使犯罪分子信守承诺，这笔钱也将被用于下一轮攻击。

But current laws do not punish business for making ransomware payments. Refusing to make the payments would be bad for businesses, however, especially for small and medium-sized companies. And the effect of non-payment could be serious for the U.S. itself.

但是现有法律并不会对支付勒索软件赎金的企业做出惩罚。然而拒绝支付赎金对企业不利，尤其是对中小型企业而言。不支付赎金对美国自身也可能会有严重影响。

Recent well-known ransomware attacks led to a shortage and high gas prices in the eastern U.S. and threatened the nation's meat supplies. The issue has left public officials searching for an answer.

最近几次著名的勒索软件攻击导致美国东部地区出现石油短缺和高油价，以及威胁到美国的肉类供应。这个问题让公职人员一直在寻求解决办法。

Congress is now looking at legislation requiring immediate³ reporting of ransomware attacks to federal officials. The idea is that such reporting would help identify those responsible and even help get back some of the ransom money.

美国国会现在正在考虑立法，要求立即向联邦官员报告勒索软件攻击。想法是这样报告将有助于确定责任人，甚至有助于追回部分赎金。

Recently, U.S. law enforcement recovered most of the $4.4 million that Colonial Pipeline⁴ paid to a gang of criminal hackers⁵ called DarkSide. That was the first time the U.S. government has said that it had recovered money from the Russia-based gang.

最近美国执法官员追回了科洛尼尔管道公司支付给一家名为DarkSide的黑客犯罪团伙的440万美元中的大部分。这是美国政府首次声称从俄罗斯团伙手中追回资金。

Last week, U.S. President Joe Biden met with Russian President Vladimir Putin in Geneva to talk about several issues including cybersecurity. Biden said he gave Putin a list of 16 "critical infrastructure⁶" items, including energy and water systems, that are considered off-limits to criminal activities.

上周，美国总统拜登在日内瓦会见了俄罗斯总统普京，讨论了包括网络安全在内的几个问题。拜登称他给普京提供了一份名单，列出了16个包括能源和供水系统在内的关键基础设施项目，这些项目被视为犯罪活动禁区。

Without additional action soon, however, experts say ransomware attacks will continue to increase.

然而专家表示，如果不立即采取额外行动，勒索软件攻击将会继续增加。

Cybersecurity experts

网络安全专家

U.S. Energy Secretary Jennifer Granholm said this month that she supports banning payments. But she did not know whether Congress or the president would.

美国能源部长詹妮弗·格兰霍姆本月表示，她支持禁止支付赎金。但是她不知道国会和总统是否会这样做。

Some of the strongest supporters of a payment ban are those who know ransomware criminals best — cybersecurity experts.

赎金禁令 的一些最强烈支持者是最了解勒索软件犯罪分子的网络安全专家。

Lior Div is the head of Boston-based Cybereason. He compared ransomware criminals to digital-age terrorists. "It is terrorism in a different form, a very modern one," Div said.

Lior Div 是总部位于波士顿的Cybereason公司的负责人。他将勒索软件犯罪分子比作数字时代的恐怖分子。他说：“这是一种形式不同的、非常现代的恐怖主义。”

A 2015 British law forbids United Kingdom-based insurance firms from paying back companies for terrorism ransom payments. Some believe this idea should be applied⁷ to ransomware payments.

一项2015年出台的英国法律禁止总部位于英国的保险公司向支付恐怖主义赎金的公司做出理赔。有人认为这个观点应该被应用于勒索软件赎金。

Adrian Nish is the threat intelligence chief at BAE Systems. Nish noted⁸ that "terrorists stopped kidnapping people because they realized that they weren't going to get paid."

埃德里安·尼斯是BAE Systems公司的威胁情报主管。尼斯指出，“恐怖分子不再绑架人，因为他们意识到他们拿不到赎金。”

U.S. law forbids material support for terrorists, but the Justice Department in 2015 waived⁹ the threat of criminal prosecution¹⁰ for citizens who pay terrorist ransoms.

美国法律禁止向恐怖分子提供物质支持，但是美国司法部在2015年撤回了对支付恐怖主义赎金的公民提起刑事诉讼的威胁。

Standing¹¹ up against attacks

站出来对着干

Some ransomware victims have refused to make payments at a high cost.

一些勒索软件受害人拒绝了支付高额赎金。

One is the University of Vermont Health Network, where the bill for recovery and lost services after an October attack was around $63 million.

受害方之一是佛蒙特大学健康网络，在10月份遭受攻击之后，恢复服务和丢失服务的总损失约为6300万美元。

Ireland, too, refused to negotiate when its national healthcare service was hit last month. Five weeks later, healthcare information technology in the nation of 5 million remains¹² badly damaged.

爱尔兰国家医疗保健服务在上个月受到攻击时也拒绝进行谈判。5周之后，这个拥有500万人口的国家的医疗保健信息技术仍然受到严重破坏。

Most ransomware victims end up paying. Insurance company Hiscox says over 58 percent of its affected¹³ customers pay the ransom. And leading cyber insurance company Marsh¹⁴ McLennan says about 60 percent of its affected U.S. and Canadian customers pay theirs.

大多数勒索软件受害者最终会支付赎金。Hiscox保险公司表示，超过58%的受影响客户支付了赎金。领先的网络保险公司Marsh McLennan表示，其受影响的美国和加拿大客户中大约有60%支付了赎金。

But paying does not guarantee anything near full recovery. In a study of 5,400 technology decision-makers from 30 countries, the cybersecurity company Sophos found that on average, ransom-payers got back just 65 percent of the encrypted data.

但是支付赎金并不能保证服务完全恢复。在对来自30个国家的5400名技术决策者进行的一项研究中，网络安全公司 Sophos 发现，支付赎金者平均只拿回了 65% 的加密数据。

In a separate study of nearly 1,300 security professionals, cybersecurity company Cybereason found that 4 in 5 businesses that chose to pay ransoms suffered a second ransomware attack.

在另一项对近1300名安全专家的调查中，网络安全公司 Cybereason 发现，80%选择支付赎金的企业遭受了第二次勒索软件攻击。

1 ransom   

n.赎金，赎身；v.赎回，解救

参考例句：

• We'd better arrange the ransom right away.我们最好马上把索取赎金的事安排好。
• The kidnappers exacted a ransom of 10000 from the family.绑架者向这家人家勒索10000英镑的赎金。

2 ransoms   

付赎金救人，赎金( ransom的名词复数 )

参考例句：

• The kidnappers exacted ransoms for their hostages. 绑匪勒索人质的赎金。
• Hotel:Wealthy captives sleep at the hotel for an increase in their ransoms. 酒店：富有的俘虏们要住在酒店等待足够的赎金以回家。

3 immediate   

adj.立即的；直接的，最接近的；紧靠的

参考例句：

• His immediate neighbours felt it their duty to call.他的近邻认为他们有责任去拜访。
• We declared ourselves for the immediate convocation of the meeting.我们主张立即召开这个会议。

4 pipeline   

n.管道，管线

参考例句：

• The pipeline supplies Jordan with 15 per cent of its crude oil.该管道供给约旦15%的原油。
• A single pipeline serves all the houses with water.一条单管路给所有的房子供水。

5 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

6 infrastructure   

n.下部构造，下部组织，基础结构，基础设施

参考例句：

• We should step up the development of infrastructure for research.加强科学基础设施建设。
• We should strengthen cultural infrastructure and boost various types of popular culture.加强文化基础设施建设，发展各类群众文化。

7 applied   

adj.应用的；v.应用，适用

参考例句：

• She plans to take a course in applied linguistics.她打算学习应用语言学课程。
• This cream is best applied to the face at night.这种乳霜最好晚上擦脸用。

8 noted   

adj.著名的，知名的

参考例句：

• The local hotel is noted for its good table.当地的那家酒店以餐食精美而著称。
• Jim is noted for arriving late for work.吉姆上班迟到出了名。

9 waived   

v.宣布放弃( waive的过去式和过去分词 )；搁置；推迟；放弃（权利、要求等）

参考例句：

• He has waived all claim to the money. 他放弃了索取这笔钱的权利。 来自《简明英汉词典》
• I waived the discourse, and began to talk of my business. 我撇开了这个话题，开始讲我的事情。 来自辞典例句

10 prosecution   

n.起诉，告发，检举，执行，经营

参考例句：

• The Smiths brought a prosecution against the organizers.史密斯家对组织者们提出起诉。
• He attempts to rebut the assertion made by the prosecution witness.他试图反驳原告方证人所作的断言。

11 standing   

n.持续，地位；adj.永久的，不动的，直立的，不流动的

参考例句：

• After the earthquake only a few houses were left standing.地震过后只有几幢房屋还立着。
• They're standing out against any change in the law.他们坚决反对对法律做任何修改。

12 remains   

n.剩余物，残留物；遗体，遗迹

参考例句：

• He ate the remains of food hungrily.他狼吞虎咽地吃剩余的食物。
• The remains of the meal were fed to the dog.残羹剩饭喂狗了。

13 affected   

adj.不自然的，假装的

参考例句：

• She showed an affected interest in our subject.她假装对我们的课题感到兴趣。
• His manners are affected.他的态度不自然。

14 marsh   

n.沼泽，湿地

参考例句：

• There are a lot of frogs in the marsh.沼泽里有许多青蛙。
• I made my way slowly out of the marsh.我缓慢地走出这片沼泽地。