旁白：2001年9月11日，恐怖袭击 NARRATOR: September 11, 2001, terror strikes
为21世纪的战争定下基调。 set the tone for warfare in the 21st century.
但是21世纪也看到了崛起 But the 21st century has also seen the rise
另一种战争 of another kind of warfare--
允许民族和孤独者的战争 warfare that lets nations and loners
在没有枪或炸弹的情况下进行战斗。 do battle without guns or bombs.
这些天，我们面临的最大威胁 These days, the biggest threat we face
可能是笔记本电脑的流氓演员 may be a rogue actor with a laptop
并渴望破坏。 and a desire to wreak havoc.
网络战可能是最大的挑战 Cyberwarfare is probably the greatest challenge
就我们国家而言 that we have as far as our nation's
关系到国家安全。 national security is concerned.
我们比其他竞争形式都有优势 We have an advantage over every other form of competition
与一个可能的盟友，那就是网络战。 with possible allies except one, and that is cyberwarfare.
当你看到潜在的 And when you see the potential of what
成功的网络攻击可以实现， a successful cyber-attack can achieve,
这足以使您深感忧虑。 it's enough to make you deeply concerned.
这将是新的战场- This is going to be the new battlefield--
一个看不见的看不见的战场 an unseen invisible battlefield--
来自各个国家的黑客团队将在那里决斗。 where teams of hackers from various nations will duel.
2010年，一种名为“ Stuxnet”的计算机病毒 In 2010, a computer virus named "Stuxnet"
拆除了秘密的伊朗核武器工厂。 demolished a secret Iranian nuclear weapons plant.
赛门铁克公司的黑客揭开了它的神秘面纱。 Hackers at Symantec Corporation unraveled its mysteries.
Stuxnet的与众不同之处在于它不仅仅停留 What made Stuxnet different was it didn't just stick
进入网络世界，它实际上达到并引起了排序 to the cyber world, it actually reached and caused sort
现实世界中的动能损害。 of real world kinetic damage.
这是我们从未见过的东西。 It's nothing that we had ever seen before.
因此，Stuxnet刚刚开始在世界范围内传播 And so Stuxnet just began spreading all around the world
到处都是Windows机器。 onto Windows machines everywhere.
但是它正在做的是 But what it was doing was, it was also
寻找其他东西。 looking for something else.
它一直在寻找被称为PLC的东西， It was looking for these things that are called PLCs,
或控制工厂等事物的小型计算机， or these small computers that control things like factories,
像电网。 like the power grid.
您在此处看到的是PLC上的代码， What you see here is the code that is put on to the PLC,
这是正常的过程代码进入PLC and this is the normal process code goes on to the PLC
打开或关闭PLC并对其进行控制。 turns the PLC on or off and controls it.
当我们第一次获得代码时，它实际上是零和一。 When we first got the code, it's literally zeros and ones.
这有点难以理解。 It's sort of unintelligible.
直到后来，我们才能够确定 It was only later that we were able to determine that actually
该法规专门针对伊朗的铀 this code was targeted, specifically, at Iran's uranium
纳坦兹的浓缩厂。 enrichment plant in Natanz.
LIAM O'MURCHU：铀浓缩设施 LIAM O'MURCHU: Uranium enrichment facilities
是非常安全的设施。 are very secure facilities.
并不是说他们已连接到互联网。 It's not like they're connected to the internet.
您不能以这种方式输入和输出代码。 You can't get your code in and out in that way.
因此，Stuxnet的一种方式是 So one of the ways that Stuxnet was
能够通过USB钥匙进入设施。 able to get into the facility was via USB key.
因此它能够感染USB密钥， So it was able to infect USB keys,
然后有人会随身携带USB密钥 and then somebody would bring the USB key with them
进入没有意识到它已被感染的安全设施， into the secure facility not realizing it was infected,
插入计算机内部，然后连接到该计算机 plug into a computer inside, and then that computer
里面会被感染。 inside would be infected.
我们不确定到底是谁支持Stuxnet， We don't know definitively who is behind Stuxnet,
但很明显，这是一个民族国家， but it's very clear that it's a nation state,
是民族国家反对伊朗， and it's nation states that had something against Iran,
而且它可能不是一个单一的民族国家。 and it's likely that it isn't a single nation state.
并且还要记住，在网络战中，障碍 And remember, as well, with cyberwarfare that the barrier
进入是相当低的。 to entry is quite low.
如果一个国家想做某事 If a country wants to do something
就像制造核导弹，实际上 like build a nuclear missile, that's actually
非常困难。但是当你谈论某事时 quite difficult. But when you talk about something
就像网络战一样，它实际上很便宜而且很容易 like cyberwarfare, it's actually quite cheap and quite easy
为了一个国家发展网络武器， for a country to develop a cyber weapon,
而且该网络武器可以产生同等的效果。 and that cyber weapon can have equivalent effects.
您可能拥有网络武器 You can have a cyber weapon potentially
例如关闭电网 shut down the power grid, for example,
在整个东海岸。 on the whole east coast.
纽约出局了。 New York is out.
华尔街出局了。 Wall Street is out.
您所有的银行都花光了。 All your banks are out.
您甚至都不能取款。 You can't even withdraw money.
你可以想象人们 You can imagine people--
恐慌开始-人们试图获取现金。 panic starting-- and people trying to get cash.
你不能得到现金。 You can't get cash.
自动柜员机无法运作。 ATMs aren't working.
然后像是废水和污水处理厂 And then things like your water waste and treatment plants
没有工作，所以没有干净的水。 aren't working, so no clean water.
商店里必定有抢购潮。 There's going to be a run on stores.
商店甚至可能无法营业。 Stores potentially aren't even operating.
您的信用卡无法在商店使用。 Your credit card is not going to work at the store.
绝对会有群众恐慌。 There will be absolutely mass panic.
如果您可以蒙蔽美国军人， If you can blind the US military--
如果您可以关闭我们的GPS和计算机网络， if you could shut down our GPS and our computer networks,
我军基本无法运作。 our military is basically unable to function.
而获得这些系统可能需要几天或几周的时间 And it could take days or weeks to get those systems
备份并运行。 back up and running.
他们会造成巨大的伤害。 They can do tremendous damage.
他们可以击败您的军队，您的机队，您的空军， They can defeat your armies, your fleets, your Air Forces,
通过简单地使他们蒙蔽-通过采取 by simply blinding them-- by taking
降低他们的网络系统。 down their cyber systems.
我认为这是我们面临的巨大风险。 I think that's a huge risk that we face.
在网络战争中，我一直认为最有效的方法之一 With cyberwar, I always think one of the most effective ways
在网络中战斗，就是找到计算机和操作员 to fighting in cyber, is to find the computer and the operator
并通过他们两个。 and put a bullet through both of them.