Posts
N.S.A. Devises Radio Pathway Into Computers
WASHINGTON
— The National Security Agency has implanted software in nearly 100,000
computers around the world that allows the United States to conduct
surveillance on those machines and can also create a digital highway for
launching cyberattacks.
While
most of the software is inserted by gaining access to computer
networks, the N.S.A. has increasingly made use of a secret technology
that enables it to enter and alter data in computers even if they are
not connected to the Internet, according to N.S.A. documents, computer experts
and American officials.
and American officials.
The
technology, which the agency has used since at least 2008, relies on a
covert channel of radio waves that can be transmitted from tiny circuit boards
and USB cards inserted surreptitiously into the computers. In some
cases, they are sent to a briefcase-size relay station that intelligence
agencies can set up miles away from the target.
and USB cards inserted surreptitiously into the computers. In some
cases, they are sent to a briefcase-size relay station that intelligence
agencies can set up miles away from the target.
The
radio frequency technology has helped solve one of the biggest problems
facing American intelligence agencies for years: getting into computers
that adversaries, and some American partners, have tried to make
impervious to spying or cyberattack. In most cases, the radio frequency
hardware must be physically inserted by a spy, a manufacturer or an
unwitting user.
The
N.S.A. calls its efforts more an act of “active defense” against
foreign cyberattacks than a tool to go on the offensive. But when
Chinese attackers place similar software on the computer systems of
American companies or government agencies, American officials have
protested, often at the presidential level.
Among the most frequent targets of the N.S.A. and its Pentagon partner, United States Cyber Command,
have been units of the Chinese Army, which the United States has
accused of launching regular digital probes and attacks on American
industrial and military targets, usually to steal secrets or
intellectual property. But the program, code-named Quantum, has also
been successful in inserting software into Russian military networks and
systems used by the Mexican police and drug cartels, trade institutions
inside the European Union, and sometime partners against terrorism like
Saudi Arabia, India and Pakistan, according to officials and an N.S.A.
map that indicates sites of what the agency calls “computer network
exploitation.”
“What’s
new here is the scale and the sophistication of the intelligence
agency’s ability to get into computers and networks to which no one has
ever had access before,” said James Andrew Lewis, the cybersecurity
expert at the Center for Strategic and International Studies in
Washington. “Some of these capabilities have been around for a while,
but the combination of learning how to penetrate systems to insert
software and learning how to do that using radio frequencies has given
the U.S. a window it’s never had before.”
it’s never had before.”
Transmission distance of up to eight miles
DATA FROM TARGET COMPUTER
TARGET
COMPUTER
DATA TRANSMITTED
BACK TO N.S.A.
Data and malware are transmitted
over a covert radio frequency
MALWARE
ANTENNA
CASE
N.S.A. FIELD
STATION
TRANSCEIVER
PLANTED INSIDE
USB CABLE
1. Tiny transceivers are built into USB plugs and inserted into target computers. Small circuit boards may be placed in the computers themselves.
may be placed in the computers themselves.
2. The transceivers communicate with a briefcase- size N.S.A. field station, or hidden relay station, up to eight miles away.
3. The field station communicates back to the N.S.A.’s Remote Operations Center.
4. It can also transmit malware, including the kind used in attacks against Iran’s nuclear facilities.
How the N.S.A. Uses Radio Frequencies to Penetrate Computers
The N.S.A. and the Pentagon’s Cyber Command have implanted
nearly 100,000 “computer network exploits” around the world, but the
hardest problem is getting inside machines isolated from outside
communications.
Transmission distance of up to eight miles
DATA FROM TARGET COMPUTER
TARGET
COMPUTER
DATA TRANSMITTED
BACK TO N.S.A.
Data and malware are transmitted
over a covert radio frequency
MALWARE
ANTENNA
CASE
N.S.A. FIELD
STATION
TRANSCEIVER
PLANTED INSIDE
USB CABLE
1. Tiny transceivers are built into USB plugs and inserted into target computers. Small circuit boards may be placed in the computers themselves.
may be placed in the computers themselves.
2. The transceivers communicate with a briefcase- size N.S.A. field station, or hidden relay station, up to eight miles away.
3. The field station communicates back to the N.S.A.’s Remote Operations Center.
4. It can also transmit malware, including the kind used in attacks against Iran’s nuclear facilities.
No Domestic Use Seen
There
is no evidence that the N.S.A. has implanted its software or used its
radio frequency technology inside the United States. While refusing to
comment on the scope of the Quantum program, the N.S.A. said its actions
were not comparable to China’s.
“N.S.A.'s
activities are focused and specifically deployed against — and only
against — valid foreign intelligence targets in response to intelligence
requirements,” Vanee Vines, an agency spokeswoman, said in a statement.
“We do not use foreign intelligence capabilities to steal the trade
secrets of foreign companies on behalf of — or give intelligence we
collect to — U.S. companies to enhance their international
competitiveness or increase their bottom line.”
Over
the past two months, parts of the program have been disclosed in
documents from the trove leaked by Edward J. Snowden, the former N.S.A.
contractor. A Dutch newspaper published the map of areas where the United States has inserted spy software, sometimes in cooperation with local authorities, often covertly. Der Spiegel, a German newsmagazine, published the N.S.A.'s catalog
of hardware products that can secretly transmit and receive digital
signals from computers, a program called ANT. The New York Times
withheld some of those details, at the request of American intelligence
officials, when it reported, in the summer of 2012, on American cyberattacks on Iran.
, sometimes in cooperation with local authorities, often covertly. Der Spiegel, a German newsmagazine, published the N.S.A.'s catalog
of hardware products that can secretly transmit and receive digital
signals from computers, a program called ANT. The New York Times
withheld some of those details, at the request of American intelligence
officials, when it reported, in the summer of 2012, on American cyberattacks on Iran.
President
Obama is scheduled to announce on Friday what recommendations he is
accepting from an advisory panel on changing N.S.A. practices. The panel
agreed with Silicon Valley executives that some of the techniques
developed by the agency to find flaws in computer systems undermine
global confidence in a range of American-made information products like
laptop computers and cloud services.
.
Embracing
Silicon Valley’s critique of the N.S.A., the panel has recommended
banning, except in extreme cases, the N.S.A. practice of exploiting
flaws in common software to aid in American surveillance and
cyberattacks. It also called for an end to government efforts to weaken
publicly available encryption systems, and said the government should
never develop secret ways into computer systems to exploit them, which
sometimes include software implants.
Richard
A. Clarke, an official in the Clinton and Bush administrations who
served as one of the five members of the advisory panel, explained the
group’s reasoning in an email last week, saying that “it is more
important that we defend ourselves than that we attack others.”
“Holes
in encryption software would be more of a risk to us than a benefit,”
he said, adding: “If we can find the vulnerability, so can others. It’s
more important that we protect our power grid than that we get into
China’s.”
From
the earliest days of the Internet, the N.S.A. had little trouble
monitoring traffic because a vast majority of messages and searches were
moved through servers on American soil. As the Internet expanded, so
did the N.S.A.'s efforts to understand its geography. A program named
Treasure Map tried to identify nearly every node and corner of the web,
so that any computer or mobile device that touched it could be located.
A
2008 map, part of the Snowden trove, notes 20 programs to gain access
to big fiber-optic cables — it calls them “covert, clandestine or
cooperative large accesses” — not only in the United States but also in
places like Hong Kong, Indonesia and the Middle East. The same map
indicates that the United States had already conducted “more than 50,000
worldwide implants,” and a more recent budget document said that by the
end of last year that figure would rise to about 85,000. A senior
official, who spoke on the condition of anonymity, said the actual
figure was most likely closer to 100,000.
That
map suggests how the United States was able to speed ahead with
implanting malicious software on the computers around the world that it
most wanted to monitor — or disable before they could be used to launch a
cyberattack.
A Focus on Defense
In
interviews, officials and experts said that a vast majority of such
implants are intended only for surveillance and serve as an early
warning system for cyberattacks directed at the United States.
“How
do you ensure that Cyber Command people” are able to look at “those
that are attacking us?” a senior official, who compared it to submarine
warfare, asked in an interview several months ago.
“That
is what the submarines do all the time,” said the official, speaking on
the condition of anonymity to describe policy. “They track the
adversary submarines.” In cyberspace, he said, the United States tries
“to silently track the adversaries while they’re trying to silently
track you.”
If
tracking subs was a Cold War cat-and-mouse game with the Soviets,
tracking malware is a pursuit played most aggressively with the Chinese.
The United States has targeted Unit 61398, the Shanghai-based Chinese Army unit
believed to be responsible for many of the biggest cyberattacks on the
United States, in an effort to see attacks being prepared. With
Australia’s help, one N.S.A. document suggests, the United States has
also focused on another specific Chinese Army unit.
Documents
obtained by Mr. Snowden indicate that the United States has set up two
data centers in China — perhaps through front companies — from which it
can insert malware into computers. When the Chinese place surveillance
software on American computer systems — and they have, on systems like
those at the Pentagon and at The Times — the United States usually
regards it as a potentially hostile act, a possible prelude to an
attack. Mr. Obama laid out America’s complaints about those practices to
President Xi Jinping of China in a long session at a summit meeting in
California last June.
At
that session, Mr. Obama tried to differentiate between conducting
surveillance for national security — which the United States argues is
legitimate — and conducting it to steal intellectual property.
No comments:
Post a Comment