评论
打印
Many Asian organisations are badly defended against cyber-attacks, a year-long investigation by US security company Mandiant indicates.
根据美国网络安全公司Mandiant一份长达一年的调查显示，许多亚洲企业在抵御黑客网络攻击方面表现很差。
The median time between a breach and its discovery was 520 days, its says. That is three times the global average.
这份调查显示，从入侵发生到发现入侵，大多数亚洲企业花费的时间的520天。这一数值是全球平均水平的三倍。
Asia was also 80% more likely to be targeted by hackers than other parts of the world, the report said. An average of 3.7GB in data had been stolen in each attack, which could be tens of thousands of documents.
该报告显示，相比于世界其他地区，亚洲被黑客当做目标的几率要高80%。在每次黑客入侵中，亚洲企业平均要损失3.7G的数据，那可能是数以万计的文件。
However, the bulk of the incidents were not made public because the region lacks breach disclosure laws.
然而，大部分类似事件都没有被公开，因为亚洲地区缺少违反信息披露的法律。
Grady Summers, the chief technology officer of Mandiant's parent company, FireEye, said the findings were "very concerning".
Mandiant母公司“火眼”的首席技术主管格雷迪·萨默斯指出，这些发现“令人非常担忧”。
"We knew responses to cyber-incidents here in Asia often lag those elsewhere, but we didn't know it was by this much," he told the BBC.
格雷迪在接受BBC采访时表示：“我们知道亚洲地区对网络事件的反应要落后于世界其他地区，但是我们没想到居然会落后这么多。”
As part of the study, Mandiant hacked into one organisation's network with its permission to see how vulnerable it was.
作为研究的一部分，Mandiant在一家机构的允许之下入侵了他们的网络，从而展示他们的网络是多么的不堪一击。
"Within three days we had the keys to the kingdom," Mr Summers said. "If an expert group of hackers can do the same in three days, imagine what can they do in 520 days."
萨默斯说道：“三天不到我们就掌握了进入网络的钥匙。如果一个专业的黑客团伙可以在三天做到同样的事的话，想想看他们在520天内可以干些什么。”
The year-long investigation included vulnerability checks on about 22,000 machines across a variety of sectors.
在这份长达一年的调查中，Mandiant公司对不同行业共22000台机器做了漏洞检查。
Leaving breaches undiscovered or unreported for too long can ultimately compromise a country's economic competitiveness or national security, Mandiant warns.
Mandiant警告称，如果没有发现入侵或者太长时间不报告的话，最终会损害一个国家的经济竞争力或国家安全。
Hackers could take over key infrastructure such as power stations, which happened in the Ukraine, and potentially even transport systems in so-called smart cities.
黑客们可以占领例如发电站一类的关键基础设施（乌克兰曾经发生过这样的事），甚至有可能占领所谓的“智能城市”中的交通系统。
On a consumer level, personal information can be used for fraudulent purposes. More than 500 million digital identities were stolen or exposed last year, an earlier report by security company Symantec suggests.
在消费者层面上，个人信息也许会被用作欺诈目的。此前由网络安全公司赛门铁克发布的一份报告显示，去年全球有超过5亿人的数字身份信息被盗或被泄露。
