作者/Author(s): Morgan Peirce
網站來源/Source: Center for a New American Security
日期/Date: 11/07/2025
關鍵字/Keywords: 網路、科技、中國
摘要:
在川普與習近平進行會晤前幾週,美國再度遭受一起由中國支持的大規模網路攻擊。然而,川普不但沒有公開譴責或提出具體行動,反而對此保持沉默,這種態度恐進一步助長中國持續對美發動網路攻擊行動。
- 中國過去便曾大規模入侵與攻擊美國私營企業網路系統,意圖滲透美國關鍵基礎設施系統並竊取個人資訊。最新一次攻擊更促使美國網安機構啟動緊急應變程序。
- 政治信號對於展現決心及影響他人行為至關重要。然而,近幾年美國政府在處理中國網路間諜問題或執行網路防禦措施方面均顯不足。這種缺失不僅讓美國陷入更脆弱的境地,更助長中國持續發動更多網路攻擊。川普若能與中國在貿易、關稅與芬太尼問題上各退一步,也應同樣對中國網路威脅採取實質行動。
- 中國的網路間諜行動多年來鎖定美國政府、企業與民間社群。
- 聯邦調查局推測,中國鎖定美國電力、供水、交通系統等關鍵民用基礎設施,作為施壓美國支持台灣的籌碼。
- 此外,中國亦利用網路攻擊在與美國的貿易談判中取得優勢。
- 然而,當中國不斷擴張網路入侵行動時,美國在網路防禦上卻未見顯著進展。美國國會至今未重新授權2015年的《網路安全資訊分享法》,導致私營企業缺乏法律保障,無法充分向政府提供威脅情報,反而削弱了華府有效回應網攻的能力。
- 川普政府曾多次強調,有必要加強對中國支持的行動實施網路嚇阻,這意味著美國必須擴展網路攻擊能力,以對中國駭客造成更大代價。然而,嚇阻不僅涉及對敵方施加更高代價的能力,更需要政治決心,讓對手確信美國有意願與能力進行報復。
- 網路行動本質上相對隱蔽,川普政府必須明確向北京提出此議題,防範中國未來支持更多的網路攻擊。
Summary:
The US experienced another significant China-backed cyber-attack just weeks before the Trump-Xi summit in South Korea. Instead of addressing these cyber-aggressions, Trump seemed to remain quiet about the issue, which could further embolden China to continue its cyber operations against the US.
- China had conducted large-scale cyber intrusions and cyberattacks on US private firms to infiltrate critical US infrastructure systems and steal personal information. The most recent attack prompted emergency responses led by the US cyber agency.
- Political signaling is crucial in demonstrating one's resolve and influencing the behavior of others. However, recent US administrations have been inadequate in addressing cyber-espionage issues with their Chinese counterparts or enforcing cyberdefense measures. The dearth not only puts the US in a more vulnerable position but also emboldens China to conduct further cyberattacks. If Trump could make concessions with China regarding trade, tariffs, and the fentanyl crisis, he could also have addressed the growing Chinese cyber threats.
- Chinese cyber-espionage operations targeted the US government, private firms, and civilians for years.
- The FBI assumed that China targeted US critical civilian infrastructure - electricity, water, transportation - as leverage against US support for Taiwan.
- China also used cyberattacks to gain the upper hand in trade negotiations with the US.
- While China is expanding its offensive cyber operations, the US has not made significant improvements in its cyber defense. The Congress has failed to reauthorize the Cybersecurity Information Sharing Act of 2015. As a result, private enterprises lack the legal certainty to provide in-depth cyber threat information to the government, which diminishes Washington's ability to respond effectively to cyberattacks.
- The Trump administration had repeatedly emphasized the need to enhance cyber deterrence against Chinese-backed operations, which entails expanding the US's offensive cyber capabilities to inflict greater costs on Chinese hackers. However, deterrence not only involves the ability to impose higher costs on an adversary, but it also necessitates political resolve, which makes the adversary expect a credible retaliation.
- Since cyber operations are inherently clandestine, the Trump administration must address this issue explicitly with Beijing to prevent future Chinese-backed cyberattacks.