事實脈絡
Trump memo is first time gov't has authorized private sector to perform cyberattacks.
Private security firms will soon be allowed to hack overseas cybercriminals
· / ,
使用社群帳號登入
晨露未晞，花已上路
使用社群帳號登入
根据 Ars Technica 的报道，一份由特朗普签署的备忘录正式授权私营安全企业开展针对海外网络犯罪分子的攻击性黑客行动。这是美国政府首次明确允许私营部门在网络空间执行攻击任务，而非仅限于传统的防御性监控与漏洞修补。来源：Ars Technica
这一政策转变的背景，是美国近年来持续面临来自海外的勒索软件攻击与关键基础设施入侵威胁。传统上，攻击性网络行动属于军方和情报机构的专属权限，私营公司仅被允许在受害后协助取证、分析攻击来源或加固系统。此次备忘录的出台，意味着私营安全公司将被纳入更主动的响应链条，可以在获得授权后直接对攻击源头实施技术反制。不过，备忘录中关于授权范围、监督机制以及具体操作边界的细节，原文未提供。
从更宏观的网络安全政策视角来看，美国政府在网络空间的行动边界近期呈现出双向扩展的态势。一方面，如上述备忘录所示，私营部门被赋予更积极的角色；另一方面，政府自身的网络监控行为也在引发争议。据《卫报》报道，美国政府对左翼及反 ICE 抗议者实施了大规模监控行动，相关讨论在 Hacker News 上引发了广泛关注。来源：The Guardian 这两条线索并行出现，反映出当前美国网络政策中「对外授权攻击」与「对内扩大监控」同时推进的格局。
私营部门参与攻击性网络行动并非没有先例争议。支持者认为，安全公司拥有顶尖技术人才和对威胁行为体的深入情报，能够比政府机构更快速地响应；批评者则担忧，将攻击权限下放给商业实体可能带来问责缺失、误伤第三方系统以及行动失控等风险。目前备忘录的实际执行细则尚未公开，私营公司将在何种法律框架下运作、由哪个机构负责审批与监督，均有待后续政策文件进一步明确。
The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit hacks on US persons, organizations, or government entities.
In a National Security Presidential Memorandum issued Thursday, US President Donald Trump directed the National Coordination Center (NCC), which operates under the Homeland Security Task Force, to develop a program for conducting specific cyber operations that combat foreign transnational criminal organizations (TCOs). The Departments of Justice and Homeland Security will provide oversight. The lynchpin of that program is bringing in private sector companies to participate.
Devil will be in the still-undefined details A fact sheet that accompanied Thursday’s memo listed ransomware, sextortion schemes, phishing campaigns, financial fraud, and impersonation scams as activities eligible for private-sector security firms to target. The memo said such firms could “conduct Cyber Surveillance Operations and Cyber Effects Operations” against “cyber-enabled” TCOs. Such groups are defined as “any foreign group that conducts cyber-enabled crime against the United States Government, a United States person, or United States interests, and that is not an institutional part of a foreign government or wholly operated under a foreign government’s direction.”