《中英對照讀新聞》Chinese backdoors "hidden in router firmware" 中國後門「藏於路由器韌體」

◎陳成良

The UK’s communication networks could be at risk from Chinese backdoors hidden in firmware, according to a security company.

隱藏在韌體的中國後門，可能讓英國通訊網路處於危險中，據一家安全公司指出。

SecureTest believes spyware could be easily built into Asian-manufactured devices such as switches and routers, providing a simple backdoor for companies or governments in the Far East to listen in on communications.

SecureTest公司相信，間諜軟體很容易就能內建在諸如切換器和路由器等亞洲製造的裝置中，為遠東地區的公司或政府提供一個簡單後門，來竊聽通訊內容。

"Organisations should change their security policies and procedures immediately," says Ken Munro, managing director of SecureTest. "This is a very real loophole that needs closing. "

「組織機關應立即更改它們的安全政策及程序，」SecureTest的執行董事肯恩．孟洛說。「這是一個非常實際的漏洞，需加以關閉。」

"Would they buy a missile from China, then deploy it untested into a Western missile silo and expect it to function when directed at the Far East? That’s essentially what they’re doing by installing network infrastructure produced in the Far East, such as switches and routers, untested into government and corporate networks."

「他們會向中國買飛彈，未經測試就部署到一個西方國家的飛彈發射台嗎？那就是他們實質上正在做的事：將遠東地區生產的網路基礎設備，如切換器及路由器，未經測試就裝進政府及企業的網路中。」

Late last year MI5 sent a letter to 300 UK companies warning of the threat from Chinese hackers attempting to steal sensitive data. Reports at the time suggested that both Rolls Royce and Royal Dutch Shell had been subjected to "sustained spying assaults".

去年底「軍情5處」發函給300家英國公司，警告有關中國駭客企圖竊取敏感情報的威脅。當時報導稱，勞斯萊斯與皇家荷蘭殼牌公司遭到「持續的間諜攻擊」。

新聞辭典 Dictionary

router：路由器，是一種電腦網路設備，能將數據包通過一個個網路傳送至目的地，這個過程稱為「路由」。

firmware：韌體，是介於硬體與軟體之間的一種本身具備程式碼的硬體裝置，主要作用是控制硬體的操作。

be subjected to：為…所苦。例句：The girl was subjected to physical and mental abuse. （這個女童受到身心虐待。）

自由時報-970322

+++++++++++++++++++++++++++++++++++++++++++