Upload_transparent

Tracking GhostNet: Investigating a Cyber Espionage Network

 
 
 
 
 
Secdev

by Secdev

Value This
Doc
Scribd
Average
     
Pages: 53 43
Words: 14351 13640
Characters: 97575 81678
Lines: 590 623
     
     
Letters per word: 6.8 5.99
Words per line: 24.32 21.89
Words per page: 270.77 317.21

Add to your reading list

Flag_red Flag this document

Document Information

222,405 Reads | 23 Comments

Description

This report documents the GhostNet - a suspected cyber espionage network of over 1,295 infected computers in 103 countries, 30% of which are high-value targets, including ministries of foreign affairs, embassies, international organizations, news media, and NGOs.

The capabilities of GhostNet are far-reaching. The report reveals that Tibetan computer systems were compromised giving attackers access to potentially sensitive information, including documents from the private office of the Dalai Lama. The report presents evidence showing that numerous computer systems were compromised in ways that circumstantially point to China as the culprit. But the report is careful not to draw conclusions about the exact motivation or the identity of the attacker(s), or how to accurately characterize this network of infections as a whole. The report argues that attribution can be obscured.

The report concludes that who is in control of GhostNet is less important than the opportunity for generating strategic intelligence that it represents. The report underscores the growing capabilities of computer network exploitation, the ease by which cyberspace can be used as a vector for new do-it-yourself form of signals intelligence. It ends with warning to policy makers that information security requires serious attention.

Pdf_16x16 53 Pages


Date Added

03/28/2009

Category
Tags
Groups
Awards

Award_star_gold_2 Featured Flame Rising

Copyright

Attribution No Derivatives

More info »

 

cc2oo4

cc2oo4

this is real good

10/20/2009
savingsaccount

savingsaccount

interesting stuff

10/04/2009
yogeshdp

yogeshdp

Thanks A LOT...!

08/13/2009
antispy

antispy

thank you!!!

rex12345

rex12345

oh man....linux??

05/26/2009
mzinmfjsddgphl

mzinmfjsddgphl

The problem that doesn't allow Linux users to download documents has not yet been fixed?

05/15/2009
natty james

natty james

Uhh.. not that the info in this doc would be of much use to anyone who didn't know this but... Instead of left clicking the PDF under the download menu dropdown (opening the doc in your browser) right click and "save document as". It's something different in Intercept Explorer (selecting and copying the title before right clicking comes in handy)

04/15/2009
dalehhh

dalehhh

This pdf does not work. It won't print and when it does there are marks censoring out certain pieces of important data. This pdf has caused a number of crashes of my Acrobat reader. Why no just stick this on a web site and bypass Scribid, since scribid is clearly less than technologically proficient or aware of the problems within this document. Plus there is no one to contact regarding the broken nature of the document, even at SEC DEV.

04/12/2009
knowlengr

knowlengr

Excellent radio interview with the authors on On Point http://www.onpointradio.org/shows/200...

04/03/2009
ramsesthedamned

ramsesthedamned

This is a sobering reminder that the Internet is not a friendly place. If the Chinese are behind this network (as seem likely), then it should serve as a wake up call to the rest of the world.

04/02/2009
kurtdriver

kurtdriver

@Agent D Perhaps its. time you googled "wireless security" or are you a troll?

04/01/2009
dsphunxion

dsphunxion

There's an analysis of this work called "GhostNet in the Shell 2009". Offers reasoning about the approach and science in this study as well as the political motivations behind it. http://infiltrated.net/ghostnet101.html

03/31/2009
roxyroller

roxyroller

I just want to let u know u guys did a GREAT job on this work. U should be very proud of ur accomplishment especailly im sure working as a team on important work for everyone and trying to keep us all safe from information stealing and its corrupted useage. this article help me feel a tiny bit safe when the powers that be dont really care or change. THANK YOU

03/30/2009
openid_UE4aQdQh

openid_UE4aQdQh

Scribd sucks. iPaper sucks. Flash sucks. Why can't you just put this on a web page like everyone else so it can be properly indexed and people can reference it and use it?

03/30/2009
plusoneinformative

plusoneinformative

FYI, Border's comments 3 below this translate as "Legend of the Ghost Nets"

03/30/2009