Unit 34
It is a devastating prospect. Terrorists electronically break into the computers that control the water supply of a large American city, open and close valves to contaminate the water with untreated sewage or toxic chemicals, and then release it in a devastating flood. As the emergency services struggle to respond, the terrorists strike again, shutting down the telephone network and electrical power grid with just a few mouse clicks. Businesses are paralysed, hospitals are overwhelmed and roads are gridlocked as people try to flee.
This kind of scenario is invoked by doom-mongers who insist that stepping up physical security since the September 11th attacks is not enough. Road-blocks and soldiers around power stations cannot prevent digital terrorism. "Until we secure our cyber-infrastructure, a few keystrokes and an Internet connection is all one needs to disable the economy and endanger lives," Lamar Smith, a Texas congressman, told a judiciary committee in February. He ended with his catchphrase: "A mouse can be just as dangerous as a bullet or a bomb." Is he right?
It is true that utility companies and other operators of critical infrastructure are increasingly connected to the Internet. But just because an electricity company's customers can pay their bills online, it does not necessarily follow that the company's critical control systems are vulnerable to attack. Control systems are usually kept entirely separate from other systems, for good reason. They tend to be obscure, old-fashioned systems that are incompatible with Internet technology anyhow. Even authorised users require specialist knowledge to operate them. And telecoms firms, hospitals and businesses usually have contingency plans to deal with power failures or flooding.
A simulation carried out in August by the United States Naval War College in conjunction with Gartner, a consultancy, concluded that an "electronic Pearl Harbour" attack on America's critical infrastructure could indeed cause serious disruption, but would first need five years of preparation and $200m of funding. There are far simpler and less costly ways to attack critical infrastructure, from hoax phone calls to truck bombs and hijacked airliners.
On September 18th Richard Clarke, America's cyber-security tsar, unveiled his long-awaited blueprint for securing critical infrastructure from digital attacks. It was a bit of a damp squib, making no firm recommendations and proposing no new regulation or legislation. But its lily-livered approach might, in fact, be the right one. When a risk has been overstated, inaction may be the best policy.
It is difficult to avoid comparisons with the "millennium bug" and the predictions of widespread computer chaos arising from the change of date to the year 2000. Then, as now, the alarm was sounded by technology vendors and consultants, who stood to gain from scare-mongering. But Ross Anderson, a computer scientist at Cambridge University, prefers to draw an analogy with the environmental lobby. Like eco-warriors, he observes, those in the security industry--be they vendors trying to boost sales, academics chasing grants, or politicians looking for bigger budgets--have a built-in incentive to overstate the risks.
Economist; 10/26/2002, Vol. 365 Issue 8296, p19, 3/4p, 1c
注(1):本文選自Economist;10/26/2002, p19, 3/4p, 1c;
注(2):本文習題命題模仿對象1999年真題text 2 (1,2,3,5)和2001年真題text 5第3題(4);
1. We learn from the first paragraph that ____________.
[A] terrorists could plunge a large American city into chaos through electronic attack
[B] American people have no experience in dealing with terrorists
[C] the computer systems of utility companies are rather vulnerable
[D] the response of emergency services is far from satisfactory
2. Speaking of the doom-mongers, the author implies that_____________.
[A] their worries are quite reasonable
[B] their warnings should be taken seriously
[C] they exaggerate the threat utility companies are facing
[D] they are familiar with they way terrorists strike
3. In the view of Gartner consultant, ___________.
[A] terrorists may launch another “Pearl Harbor” attack
[B] terrorists have ample capital and time to prepare a stunning strike
[C] it is very costly and time-consuming to attack critical infrastructure
[D] it is unlikely that terrorists would resort to electronic means to attack critical infrastructure
4. “Lily-livered approach” (Line 4, Paragraph 5) probably means an approach
characterized by________.
[A] flexibility
[B] boldness
[C] cowardice
[D] conservatism
5. We learn from the last paragraph that__________.
[A] the computer industry suffered heavy loss due to the “millennium bug”
[B] doom-mongers care more about their own interests than national security
[C] computer scientists have better judgment than doom-mongers
[D] environmentalists are criticized for their efforts of protecting environment
答案:ACDCB
篇章剖析
本篇文章是一篇議論文,駁斥了恐怖分子會利用電子手段襲擊公用事業公司和關鍵基礎設施的觀點。
文章第一段是散布恐怖威脅論者所描繪的恐怖分子用電子手段進行恐怖襲擊的場景。第二段介紹了他們所宣揚的觀點。第三段反駁了對公用事業公司發動電子恐怖襲擊的可能性。第四段以一次模擬演習的結論進一步佐證了恐怖分子不可能用電子手段對關鍵基礎設施進行恐怖襲擊的觀點。第五段分析了散布恐怖威脅論的人的動機。
詞匯注釋
valve[vAlv] n. 閥門
contaminate[kEn5tAmineit] v. 弄臟;污染
sewage[5sju(:)idV] n. 下水道, 污水
paralyze[5pArElaIz] v. 使無力[無效]; 使不活動
gridlocked[5^ridlCkt] adj. 交通擁堵的
scenario[si5nB:riEu] n. 預料或期望的一系列事件的梗概或模式;場景
invoke[in5vEuk] v. 借助求助于;使用或應用:
doom-monger n. 末世論者;散布恐怖威脅論的人
cyber-[5saibE] prefix. 網絡的
infrastructure[5InfrEstrQktFE(r)] n. 基本設施
catchphrase[5kAtFfreIz] n. 標語;引為標語的短句;口頭禪
utility[ju:5tiliti] n. 公用事業
obscure[Eb5skjuE] adj. 難懂的
incompatible[7inkEm5pAtEbl] adj. 不相容的, 矛盾的, 不能和諧共存的(with)
authorize[5C:WEraIz] v. 授權;批準;認可
contingency[kEn5tindVEnsi] n.
conjunction n. 意外, 意外事故
consultancy[kEn5sQltEnsi] n. 顧問(工作)
disruption[dis5rQpFEn] n. 破壞
hoax[hEJks] n. 惡作劇;騙局
tsar[zB:(r)] n. 沙皇
squib[skwib] n. 爆竹
millennium[mi5leniEm] n. 千禧年
vendor[5vendC:] n. 小販, 叫賣
analogy[E5nAlEdVi] n. 類推;類比
難句突破
Like eco-warriors, he observes, those in the security industry--be they vendors trying to boost sales, academics chasing grants, or politicians looking for bigger budgets--have a built-in incentive to overstate the risks.
主體句式:those…have a built-in incentive
結構分析:本句雖然是個簡單句,但由于里面有一個較長的插入語,而且這個插入語本身是一個省略了should并采用倒裝句式的虛擬條件句,所以整個句子理解起來有一定難度。
句子譯文:他發現,就像那些環保衛士一樣,從事安全工作的人---不論是想要促銷產品的商人,還是渴望得到補助金的學者,抑或是期望更多預算的政客--- 都有一種內在的動機促使他們夸大危險。
題目分析
1. 答案為A,屬推理判斷題。文章一開頭用了prospect一詞,可見所描述的場景只是想象中未來可能發生的情景。這一段描述了恐怖分子用電子手段發動對美國大城市的襲擊后的混亂場景:企業癱瘓,醫院爆滿,道路堵塞等等。可見,如果這種襲擊發生的話,美國的一座大城市就會陷入混亂。
2. 答案為C,屬推理判斷題。monger這個詞本身就是一個貶義詞,指一個持悲觀論調,散布末世論的人。再看文章第三段,作者針對這種人散布的恐怖威脅論進行了分析,認為所謂公用事業公司的關鍵控制系統易受攻擊的說法站不住腳。第四段座作者引用一次模擬演習的結論說,電子恐怖襲擊可能造成巨大破壞,但襲擊的成本非常高,耗時也非常長,有遠比這簡單有效的辦法。在文章末尾,作者引用計算機專家的話“those (people) … overstate the risk”。可見,作者雖然也承認這種威脅有可能存在,但認為這些doom-mongers夸大了威脅的程度。
3. 答案為D,屬推理判斷題。文章第四段分析了電子恐怖襲擊關鍵基礎設施的說法站不住腳的另一個理由:通過模擬演習得出結論,這種襲擊耗資巨大,耗時太長,恐怖分子完全可以采取更加簡單有效成本低廉的襲擊手段。可見,恐怖分子不太可能借助電子手段襲擊關鍵基礎設施的。
4. 答案為C,屬猜詞題。根據上下文,Richard Clarke針對如何保護關鍵基礎設施免遭數字化襲擊提出了人們期待已久的計劃,但這個計劃就好像一個受潮的爆竹,既沒有給出堅決的建議,也沒有提出新的規章或者法規。然后對作者對這種做法用“lily-livered”一詞加以總結,顯然只有“膽小”一詞最為貼切。
5. 答案為B,屬推理判斷題。本文最后一段將現在的恐怖威脅論和“千年蟲”恐慌加以對比,認為這種人為制造恐慌的做法只是為了讓那些散布恐慌的人“stood to gain”。接著,作者引用一位專家的話,認為這些人,“不論是想要促銷產品的商人,還是渴望得到補助金的學者,抑或是期望更多預算的政客--- 都有一種內在的動機促使他們夸大危險。”由此可見,散布恐怖威脅論的人與其說是關心國家安全,不如說是關心自己的利益。
參考譯文
這是一幅毀滅性的景象。恐怖分子用電子手段闖入了控制一座美國大城市供水系統的電腦,他們把閥門打開又關上,用未經處理的污水或者有毒化學物質來污染水源,然后把水放出來,形成一股極具破壞力的洪水。當應急服務正忙于做出反應時,恐怖分子再次出擊,只見他們輕點幾下鼠標,就關閉了電話網和電網。一時間,商業陷入癱瘓,醫院人滿為患,人們爭相逃離,道路擁堵不堪。
這種情景是那些散布恐怖威脅論的人描繪的場景。他們堅持認為911襲擊之后僅采取實體安全措施是不夠的。攔截道路,派兵把守電站都不能防止數字化恐怖主義。“除非我們對網絡基礎設施加以保護,否則只需要幾個按鍵和一個互聯網連接就能讓經濟陷入癱瘓并危及人們的生命,”德克薩斯州議員拉馬爾·史密斯在二月份向一個司法委員會發言時如此說道。他用一句標語結束了自己的發言:“一個鼠標和一顆子彈或者炸彈一樣危險。”他說得對嗎?
的確,現在越來越多的公用事業公司和其它重要的基礎設施運營商連接到互聯網上。但那僅僅是為了讓一家電力公司的客戶可以在網上支付帳單,它并不一定意味著這家公司的關鍵控制系統就容易受到攻擊。出于安全的原因,控制系統通常都和其它系統完全分開。再說它們一般都是老式的復雜系統,和互聯網技術并不兼容。即使是授權用戶也需要有專業知識才能操作它們。而電信公司,醫院和商業企業通常都有應急預案來應付停電或者洪水等突發事件。
八月,美國海軍軍事學院聯合加特納咨詢公司進行了一次模擬演習,最后得出結論,對美國關鍵基礎設施發動一次“電子化珍珠港”襲擊的確能夠帶來嚴重破壞,但這樣的襲擊首先需要五年的準備時間以及2億美元的資金。而襲擊關鍵基礎設施有遠比這簡單和廉價的方法,從恐嚇電話到汽車炸彈以及劫持飛機等不一而足。
九月18日,負責美國網絡安全事務的理查德·克拉克公布了人們期待已久的保護關鍵基礎設施免遭數字化襲擊的計劃。不過它就像一個受潮了的爆竹,既沒有給出堅決的建議,也沒有提出新的規章或者法規。但實際上這種膽小的做法也許是正確的。如果某種危險被夸大,那么不采取行動也許就是上策。
人們難免會把它和“千年蟲”以及由于把日期調整到2000年所引發的有關各地的電腦將陷入混亂的預言加以對比。當時的情況和現在一樣,那些技術販子和咨詢師們發出警報,然后通過散布恐慌坐收漁利。不過劍橋大學的計算機科學家羅斯·安德森更傾向于將其與環境游說團體加以類比。他發現,就像那些環保衛士一樣,從事安全工作的人---不論是想要促銷產品的商人,還是渴望得到補助金的學者,抑或是期望更多預算的政客--- 都有一種內在的動機促使他們夸大危險。