中国的选项和新的美国网络战战略
来源： 中国电子报
April 23, the US Department of Defense released a new web strategy to replace in 2011 issued a “cyberspace operations strategy.” The new network strategy clearly reflects the “war to end war”, “pre-emptive” thinking explicit proposal to strengthen the construction of the network deterrence, and under what circumstances you can use cyber weapons against network attacks, and lists the greatest threat to countries China, Russia, Iran, North Korea thinks it. The US strategy is bound to intensify the arms race in cyberspace, increasing the likelihood of cyber war broke out, bring more unrest to cyberspace, our response should be prepared in advance, to prepare for contingencies.
The new network strategy “new” Where?
First, a clear network deterrence as a strategic objective. Prior to this, the US has been pursuing a strategy of active defense, the Department of Defense in 2011 issued a “cyberspace operations strategy” in spite of the new network to be deployed weapons, but still mainly focus on cyber defense. The new network strategy will focus on the network as a deterrent, will build the power of the Internet to deal with cyber war as a key objective, and clearly the network architecture includes 133 troops teams. As US Secretary of Defense Carter said, the new network strategy will show the determination of the American cyber attacks to retaliate, “We need to prove to the world that we will protect themselves.”
Second, a clear expansion of the coverage of the network of national defense. The United States has multiple departments, including the Department of Defense, Department of Homeland Security and the National Security Bureau in network security, while the United States a lot of critical information infrastructure by the private sector operators, in order to protect the network security of government departments closely between public and private institutions Cooperation.Although the 2011 “cyberspace operations strategy” in the proposed public-private partnership to strengthen, also referred to strengthen cooperation between the Department of Homeland Security, but the new strategy will be directly “to protect local interests are not destructive and core network attack “the department of Defense and other written tasks, network infrastructure, private sector operators are also included in the scope of protection of the department of Defense, but also proposes strengthening cybersecurity information sharing among government departments and between public and private institutions.
The third is clearly cyber war adversary. Although the United States has been an enemy list, but its previous strategy documents are rarely directly named 2011 “cyberspace operations strategy” in only a general reference to rival cyberspace. But the new network strategy was to dedicate China, Russia, Iran and North Korea and other countries put forward, which is the number of countries in recent years has repeatedly accused. In fact, the United States has been through a variety of ways to find a reasonable excuse for network monitoring, network armaments and other acts taken against cyber attacks accusing China, Russia and other countries are most common in the United States in April 2015 the company released a FireCam accused China and Russia were two reports of cyber attacks.
What impact will the world?
First, the network will be further intensified competition in armaments. According to the United Nations Institute for Disarmament Research in 2013 statistics, there are 47 countries, announced the formation of a network warfare units, 67 countries set up a network of non-military security agencies. With further exacerbated cyberspace security threats, data still growing, new network strategy to attack the United States and deterrence as the core will further aggravate the situation. As the world network of the most powerful country, the United States continued to increase network armaments efforts, other countries will inevitably increase its own power into the network.
Second, large-scale networks will continue to increase the risk of war. In recent years, cyber conflict between nations has been emerging, but the conflict is still the main non-governmental forces, the conflict broke out between the network such as Malaysia and the Philippines, North Korea and South Korea, although part of the conflict emerge out of the shadow of national power, but there is no State publicly acknowledged. US network to the new network strategy war on its head, and set trigger conditions for cyber attacks, in the current absence of international standards related to cyberspace, cyber war risk between countries will continue to increase.
Third, the network will become the fuse of conflict in the real world war. In recent years, the United States has been trying to set a standard network warfare, from the 2011 “cyberspace operations strategy” to 2013’s “Tallinn Manual”, to the new network strategy, the United States has been as a response to the reality of armed combat cyber attacks a means. However, due to technical limitations, network attacks traced still difficult to achieve, the US government and corporate network attacks blamed the lack of direct evidence, or even need to confirm whether the other attacks by cyber attacks, such as the media reported that the United States finds that a North Korean attack from Sony Sony Korea nearly 10 years of network attacks. In this case, it is the United States armed attacks as an excuse to invade his country may occur.
How should China respond?
First, the introduction of national cybersecurity strategy. Based on important principles and national positions to protect national security in cyberspace, the formation of a clear framework for strategic action in cyberspace, improve top-level design Cyberspace national strategic layout.Key areas and key elements for the development of integrated package of cyberspace action plan, including countries such as the protection of critical information infrastructure, the establishment of a sound network and information security system.
The second is to establish a network of space defense forces. Established under the Ministry of Defence into the establishment of the network unit, identify core functions and the main task of the network forces, formed a dedicated network security personnel training and selection of channels, rapid formation of cyberspace defense capability. Set up in the National Technology Plan network security technology projects, research network attack and defense technology and equipment, the establishment of Cyber Range, conduct regular network attack and defense drills, form a network combat capability.
Third, actively participate in international cooperation in cyberspace. Participation in the intergovernmental process of network security cooperation, strengthen dialogue between Russia and the United States, European Union and other countries and regions, forming a major cyber security incident communication and coordination mechanisms. Actively promote bilateral and multilateral cooperation within the framework of the United Nations, the promotion of international conventions to resist the formation of cyber war, the establishment of a unified network of weapons found, network attacks and other recognized international standards.Actively participate in international exchanges and publicly announced our attitude to cyber war, emphasized that States have the responsibility and obligation to protect its cyberspace and critical infrastructure from threats, interference and sabotage attacks.
Original Mandarin Chinese:
4月23日，美国国防部发布了新的网络战略，以替换于2011年发布的《网络空间行动战略》。新的网络战略明显体现了“以战止战”、“先发制人”的思想，明确提出要强化网络威慑力量的建设，以及在何种情况下可以使用网络武器来对付网络攻击者，并列出了中国、俄罗斯、伊朗、朝鲜等其自认为威胁最大的国家。美国这一战略势必加剧网络空间军备竞赛，增加网络战争爆发的可能性，给网络空间安全带来更多不安定因素，我国应提前做好应对措施，以备不时之需。
新版网络战略“新”在何处？
一是明确将网络威慑作为战略目标。在此之前，美国一直推行积极防御战略，2011年国防部发布的《网络空间行动战略》中虽然提出要部署一些新的网络武器，但仍主要以网络防御为重点。而新的网络战略中则将网络威慑作为重点，将建设应对网络战争的网络力量作为重点目标，并明确了包含133个小组的网络部队架构。正如美国国防部长卡特所说，新的网络战略展示了美国将对网络攻击进行报复的决心，“我们有必要向世界证明，我们将保护自己。”
二是明确扩大网络国防的覆盖范围。美国在网络安全方面有多个部门负责，包括美国国防部、国土安全部和国家安全局等，同时美国大量关键信息基础设施由私营机构运营，以保障网络安全有政府部门、公私机构间的紧密合作。虽然2011年的《网络空间行动战略》中就提出要加强公私合作，也提到了要加强与国土安全部之间的合作，但新的战略则直接将“保障本土和核心利益不受破坏性网络攻击”等写入了国防部的任务，私营机构运营的网络基础设施也纳入了国防部保护的范畴，同时也提出加强政府各部门间以及公私机构间的网络安全信息共享等。
三是明确提出网络战争假想敌。虽然美国一直有一个假想敌名单，但其之前的战略文件中很少直接点名，2011年的《网络空间行动战略》中也只是笼统地提到网络空间的对手。但新的网络战略却专门将中国、俄罗斯、伊朗和朝鲜等国提了出来，这也是其近年来不断指责的一些国家。实际上，美国一直通过多种途径为其采取的网络监控、网络军备等行为寻找合理借口，针对中国、俄罗斯等国的网络攻击指责则最为普遍，在2015年4月份美国火眼公司就发布了指责中国和俄罗斯进行网络攻击的两份报告。
将给世界带来什么影响？
一是网络军备竞争将进一步加剧。据联合国裁军研究所2013年的统计，有47个国家宣布组建了网络战部队，67个国家组建了非军方网络安全机构。随着网络空间安全威胁的进一步加剧，相关数据还在不断增加，美国以进攻和威慑为核心的新网络战略将进一步加剧这一情况。作为世界上网络力量最强大的国家，美国仍不断加大网络军备力度，其他国家也不可避免地加大自身网络力量投入。
二是大规模网络战争风险将不断加大。近年来，国家间的网络冲突已经不断出现，但冲突仍以民间力量为主，如马来西亚和菲律宾、朝鲜和韩国等之间爆发的网络冲突，虽然部分冲突浮现出国家力量的影子，但尚没有国家公开承认。美国新的网络战略把网络战争提到了台面上，并为网络攻击设定了触发条件，在当前缺乏国际网络空间相关标准的情况下，国家间的网络战争风险将不断加大。
三是网络冲突将成为现实世界战争的导火索。近年来，美国一直试图设定网络战的标准，从2011年的《网络空间行动战略》到2013年的《塔林手册》，再到新的网络战略，美国一直将现实武装打击作为应对网络攻击的一种手段。但由于技术所限，网络攻击追溯仍较难实现，美国政府及企业的网络攻击指责都缺乏直接证据，甚至需要通过网络攻击来确认对方是否攻击，如媒体报道称美国认定朝鲜攻击索尼公司源于索尼对朝鲜网络近10年的攻击。在这种情况下，很可能出现美国以网络攻击为借口武装入侵他国的现象。
中国应如何应对？
一是推出网络安全国家战略。基于保障国家网络空间安全的重要原则和国家立场，形成清晰的网络空间战略行动的框架，完善网络空间国家战略布局的顶层设计。针对网络空间关键领域和关键要素统筹制定一揽子行动计划，包括国家关键信息基础设施的保护工作等，建立完善的网络和信息安全保障体系。
二是建立网络空间防御力量。在国防部下设立成建制的网络部队，明确网络部队的核心职能和主要任务，形成专门的网络安全人才培养和选拔通道，快速形成网络空间防御能力。在国家科技计划中设立网络安全技术专项，研究网络攻防技术设备，建立网络靶场，开展定期网络攻防演习，形成网络实战能力。
三是积极参与国际网络空间合作。参与政府间网络安全合作进程，加强与俄罗斯、美国、欧盟等国家和地区间的对话，形成重大网络安全事故沟通和协调机制。积极推动联合国框架下的双边与多边合作，推动形成抵制网络战争的国际公约，建立统一的网络武器认定、网络攻击认定等国际标准。积极参与国际交流，公开宣布我国对网络战争的态度，强调各国有责任和义务保护本国网络空间和关键基础设施免受威胁、干扰和攻击破坏。