It's true.

這是實在話。

Think about everything it has brought us.

想想看它所帶給我們的一切。

Think about all the services we use,

想想我們所使用的所有服務，

all the connectivity,

所有的網絡連結與通訊，

all the entertainment,

一切的娛樂，

all the business, all the commerce.

全部的商業與經濟活動，

And it's happening during our lifetimes.

而它就在我們這一代發生了。

I'm pretty sure that one day

我非常肯定將來有一天

we'll be writing history books

我們在撰寫歷史典籍時，

hundreds of years from now. This time

也許等到距今數百年之後，

our generation will be remembered

這一次，我們這一個世代的人類將會永傳千古，

as the generation that got online,

因為這是一個開始使用網際網路的年代，

the generation

我們這一代，

that built something really and truly global.

建構出貨真價實，具體可見的全球化。

But yes, it's also true

然而，我承認，

that the Internet has problems, very serious problems,

網際網路本身是有問題的，而且是非常嚴重的難題。

problems with security

就是網路的安全性令人堪憂，

and problems with privacy.

還有網路上的隱私疑慮。

I've spent my career

我竭盡個人之所能

fighting these problems.

尋找出這些困境。

So let me show you something.

所以且容我向各位展示一些成果。

This here

在這裡，

is Brain.

就是電腦病毒始祖「大腦」（Brain）

This is a floppy disk

這是一片電腦磁碟片。

-- five and a quarter-inch floppy disk

5¼ 英吋的古早磁碟片

infected by Brain.A.

受到「大腦A」病毒的感染。

It's the first virus we ever found

對於個人電腦而言

for PC computers.

這是有史以來第一個病毒。

And we actually know

而我們的確也知道

where Brain came from.

「大腦」源自於何處。

We know because it says so

我們之所以知道，是因為

inside the code.

在病毒碼裡頭有註明出處。

Let's take a look.

現在讓我們瞧瞧。

All right.

出來了。

That's the boot sector of an infected floppy,

那裡是遭到病毒感染的啟動磁區。

and if we take a closer look inside,

倘若我們深入內部去看，

we'll see that right there,

就在那裡，我們會發現，

it says, "Welcome to the dungeon."

它說：「歡迎光臨18層地獄。」

And then it continues,

接著它說：

saying, 1986, Basit and Amjad.

「於1986年製造，製造者：Basit 和 Amjad。」

And Basit and Amjad are first names,

Basit 和 Amjad 是名字，

Pakistani first names.

巴基斯坦人的名字。

In fact, there's a phone number and an address in Pakistan.

其實，這裡有附一支巴基斯坦的電話號碼和住址。

(Laughter)

（笑聲）

Now, 1986.

曾經，1986年。

Now it's 2011.

如今，已2011年了。

That's 25 years ago.

整整25年之久。

The PC virus problem is 25 years old now.

個人電腦遭受病毒感染的問題已經存在了25年之久。

So half a year ago,

所以半年前，我決定

I decided to go to Pakistan myself.

自己親身實地到巴基斯坦走一趟。

So let's see, here's a couple of photos I took while I was in Pakistan.

來欣賞一下幾張在當地所拍攝的照片。

This is from the city of Lahore,

這是拉合爾城（Lahore，巴國第二大城）

which is around 300 kilometers south

距離阿伯塔巴德南方300公里，

from Abbottabad, where Bin Laden was caught.

阿伯塔巴德就是賓拉登被狙殺的地點。

Here's a typical street view.

這張是典型當地的街道。

And here's the street or road leading to this building,

沿著這裡的這條路，可以直達那座建築物。

which is 730 Nizam block at Allama Iqbal Town.

地址是阿拉馬伊克巴爾鎮，尼扎姆區，730號。

And I knocked on the door.

我跑去敲敲門。

(Laughter)

（笑聲）

You want to guess who opened the door?

猜猜應門的人是誰？

Basit and Amjad; they are still there.

居然是Basit 和 Amjad，他們還住在25年前的地方！

(Laughter)

（笑聲）

(Applause)

（掌聲）

So here standing up is Basit.

站著的這位就是Basit。

Sitting down is his brother Amjad.

而坐著的是他的兄弟Amjad。

These are the guys who wrote the first PC virus.

這兩位就是寫出個人電腦病毒始祖的老兄。

Now of course, we had a very interesting discussion.

想當然爾，我們聊得很愉快。

I asked them why.

我問他們原因。

I asked them how they feel about what they started.

還有他們對於無意間所造成日後病毒肆虐的感想。

And I got some sort of satisfaction

結果我得到了某種莫名的滿足感，

from learning that both Basit and Amjad

因為得知這兩位仁兄

had had their computers infected dozens of times

這麼多年來，他們自己的電腦

by completely unrelated other viruses

也一直頻頻中毒，而且是其它人

over these years.

所寫的新病毒。

So there is some sort of justice

正義終於以某種不知名的形式

in the world after all.

在這個世界得以伸張。

Now, the viruses that we used to see

對於現在的我們來說，

in the 1980s and 1990s

在1980年代至1990年代間習以為常的病毒

obviously are not a problem any more.

顯然是小巫見大巫，無關痛癢了。

So let me just show you a couple of examples

且容我向各位舉幾個例子說明

of what they used to look like.

它們以前長這付模樣。

What I'm running here

就是我現在正在寫下的這串文字。

is a system that enables me

這是一種使我能夠

to run age-old programs on a modern computer.

在新電腦上跑古董程式的作業系統。

So let me just mount some drives. Go over there.

讓我開啟一些硬碟。

What we have here is a list of old viruses.

在此所列的是舊款病毒的清單。

So let me just run some viruses on my computer.

在我的電腦上跑跑看一些病毒。

For example,

例如這個，

let's go with the Centipede virus first.

先從「蜈蚣病毒」著手吧。

And you can see at the top of the screen,

如果你中了這種病毒的話，

there's a centipede scrolling across your computer

你會在螢幕上方看到，

when you get infected by this one.

有一條蜈蚣爬過你的電腦。

You know that you're infected

你知道你的電腦中毒了，

because it actually shows up.

因為它清楚顯示在你眼前。

Here's another one. This is the virus called Crash,

這裡有另一種病毒，它叫作「墜毀」，

invented in Russia in 1992.

1992年由俄國人寫的。

Let me show you one which actually makes some sound.

讓我秀給各位看一個會製造聲音的病毒。

(Siren noise)

（救護車警鈴聲）

And the last example,

還有最後一個病毒，

guess what the Walker virus does?

猜猜看「路人病毒」會耍甚麼把戲？

Yes, there's a guy walking across your screen

一旦中了毒的話，沒錯，有個人就會在

once you get infected.

你電腦螢幕上逛大街呢。

So it used to be fairly easy to know

所以，以往，

that you're infected by a virus,

中毒與否顯而易見。

when the viruses were written by hobbyists

寫這些病毒的怪咖、青少年

and teenagers.

只是為了好玩。

Today, they are no longer being written

今非昔比，現在寫病毒的人

by hobbyists and teenagers.

不再是單純的怪咖和青少年了。

Today, viruses are a global problem.

今天，病毒儼然已成為全球的問題。

What we have here in the background

在我們背後的螢幕上，

is an example of our systems that we run in our labs,

是在我們的實驗室裡所研發的系統之一

where we track virus infections worldwide.

藉此我們追蹤全球各地病毒感染的狀況。

So we can actually see in real time

我們可以在第一時間看到

that we've just blocked viruses in Sweden and Taiwan

我們不久前才阻絕了在瑞典，台灣，

and Russia and elsewhere.

和俄國以及遍佈全球的病毒。

In fact, if I just connect back to our lab systems

事實上，假如我經由網路連線到

through the Web,

我們實驗室的系統，

we can see in real time

我們便可以立即看到

just some kind of idea of how many viruses,

每天有多少種的病毒，

how many new examples of malware we find every single day.

有多少新的惡意程式被我們發現到。

Here's the latest virus we've found,

這是我們目前所發現最新的病毒，

in a file called Server.exe.

藏在一個稱為「服務」的執行檔裡。

And we found it right over here three seconds ago --

三秒鐘前我們逮到了它--

the previous one, six seconds ago.

再之前的病毒，是六秒鐘前找到的。

And if we just scroll around,

如果我們往下看，

it's just massive.

數量大得嚇人。

We find tens of thousands, even hundreds of thousands.

我們發現了成千上萬的病毒。

And that's the last 20 minutes of malware

這些只是每一天，在20分鐘裡

every single day.

所發現的惡意程式。

So where are all these coming from then?

那麼這些病毒從何而來？

Well today, it's the organized criminal gangs

嗯，目前都是犯罪幫派集團在

writing these viruses

設計撰寫這些病毒，

because they make money with their viruses.

因為他們可以由此獲利。

It's gangs like --

這些幫派組織就像是--

let's go to GangstaBucks.com.

讓我們造訪一下GangstaBucks.com這個網站，

This is a website operating in Moscow

這個網站在莫斯科管理運作，

where these guys are buying infected computers.

這些人買賣中毒的電腦。

So if you are a virus writer

假設你會寫病毒程式，

and you're capable of infecting Windows computers,

而且能讓微軟作業系統的電腦中毒，

but you don't know what to do with them,

但不知道該拿那些中毒的電腦怎麼辦，

you can sell those infected computers --

你可以賣掉它們--

somebody else's computers -- to these guys.

把別人的電腦賣給架設這個網站的人。

And they'll actually pay you money for those computers.

他們也真的會付錢給你。

So how do these guys then monetize

那麼這些人又如何以

those infected computers?

中毒的電腦獲利？

Well there's multiple different ways,

嗯，賺錢的方式多的是，

such as banking trojans, which will steal money from your online banking accounts

像是銀行木馬，當你使用網路銀行時，就可以

when you do online banking,

從你的網路銀行帳戶偷錢，

or keyloggers.

或植入按鍵記錄程式。

Keyloggers silently sit on your computer, hidden from view,

按鍵記錄程式靜悄悄地躲在電腦裡，你根本無從得知，

and they record everything you type.

它紀錄你所按下的每個鍵。

So you're sitting on your computer and you're doing Google searches.

所以當你坐在電腦前用Google搜尋時，

Every single Google search you type

你在鍵盤上輸入的每一筆搜尋

is saved and sent to the criminals.

都會被儲存並寄給駭客。

Every single email you write is saved and sent to the criminals.

你寫的每封電子郵件也會被儲存並寄給駭客。

Same thing with every single password and so on.

每當你輸入密碼時，同樣的事情一而再，再而三的發生。

But the thing that they're actually looking for most

但是他們最想知道的事情是

are sessions where you go online

你上網的時段，

and do online purchases in any online store.

在哪間線上商店購物。

Because when you do purchases in online stores,

因為當你在網路購物時，

you will be typing in your name, the delivery address,

你會輸入姓名、配送地址、

your credit card number and the credit card security codes.

信用卡號和信用卡的安全碼。

And here's an example of a file

這是一個例子，

we found from a server a couple of weeks ago.

幾週前從一個伺服器上發現的。

That's the credit card number,

這是信用卡卡號，

that's the expiration date, that's the security code,

卡片有效期限，和安全碼，

and that's the name of the owner of the card.

還有持卡人姓名。

Once you gain access to other people's credit card information,

一旦取得他人的信用卡資訊，

you can just go online and buy whatever you want

掌握了這些資訊，你就可以上網買東西，

with this information.

愛買什麼就買什麼。

And that, obviously, is a problem.

這，顯然是個大問題。

We now have a whole underground marketplace

現在，非法地下經濟活動，

and business ecosystem

和網路商務系統，

built around online crime.

全被網路犯罪所宰制。

One example of how these guys

來看一個利用種種網路犯罪手法

actually are capable of monetizing their operations:

成功偷到錢的例子。

we go and have a look at the pages of INTERPOL

我們來看看INTERPOL的網頁，

and search for wanted persons.

搜尋一些通緝要犯。

We find guys like Bjorn Sundin, originally from Sweden,

可以發現像是從瑞典來的Bjorn Sundin，

and his partner in crime,

和他的犯案同夥，

also listed on the INTERPOL wanted pages,

都在INTERPOL網頁中榜上有名，

Mr. Shaileshkumar Jain,

Shaileshkumar Jain先生

a U.S. citizen.

是美國公民。

These guys were running an operation called I.M.U.,

這批人以前的手法是操作 I.M.U.，

a cybercrime operation through which they netted millions.

一種網路犯罪手法，他們從網路上非法取得好幾百萬元。

They are both right now on the run.

他們現在都在跑路。

Nobody knows where they are.

跑的無影無蹤。

U.S. officials, just a couple of weeks ago,

就在幾週前，美國警方

froze a Swiss bank account

凍結在瑞士，Jain先生名下的

belonging to Mr. Jain,

一個銀行帳戶，

and that bank account had 14.9 million U.S. dollars on it.

戶頭裡有高達1,490萬美元的存款。

So the amount of money online crime generates

由此可知網路犯罪所竊取的金錢

is significant.

數量之龐大，非常驚人。

And that means that the online criminals

這也意謂著，網路犯罪駭客

can actually afford to invest into their attacks.

其實負擔得起研發這些病毒的開銷。

We know that online criminals

據我們所知，網路犯罪駭客

are hiring programmers, hiring testing people,

聘請程式設計師，和測試人員，

testing their code,

去測試他們程式碼，

having back-end systems with SQL databases.

並建立支援SQL資料庫查詢語法的後端管理系統。

And they can afford to watch how we work --

而且他們負擔得起監視我們--

like how security people work --

好比警衛、保全如何運作--

and try to work their way around

然後試圖繞過任何

any security precautions we can build.

我們所建立的防毒保護系統。

They also use the global nature of Internet

同樣地，他們也運用網路的全球性

to their advantage.

建立優勢。

I mean, the Internet is international.

我的意思是網路是無國界的。

That's why we call it the Internet.

這也正是我們以此命名的原因。

And if you just go and take a look

如果各位去看一看

at what's happening in the online world,

網路世界正在發生什麼事，

here's a video built by Clarified Networks,

這是Clarified Networks製作的影片，

which illustrates how one single malware family is able to move around the world.

描述一個惡意網站如何隨時在世界各地轉換落腳處。

This operation, believed to be originally from Estonia,

據信該網站源自於愛沙尼亞，

moves around from one country to another

就在有人試圖關閉這個網站時，

as soon as the website is tried to shut down.

它立刻從一個國家轉到另一個國家，

So you just can't shut these guys down.

根本關不掉這個網站。

They will switch from one country to another,

他們會從一個國家鑽到另一個國家，

from one jurisdiction to another --

由這個管轄區鑽到另一個管轄區，

moving around the world,

在全世界流竄，

using the fact that we don't have the capability

利用我們的弱點--

to globally police operations like this.

無法組織世界警察機構的憾事。

So the Internet is as if

所以網路就好比

someone would have given free plane tickets

贈送免費機票，

to all the online criminals of the world.

給全世界的網路罪犯。

Now, criminals who weren't capable of reaching us before

這些罪犯以往無法追蹤到我們，

can reach us.

現在卻可以了。

So how do you actually go around finding online criminals?

所以該如逮到這些網路罪犯呢？

How do you actually track them down?

該如何追蹤他們？

Let me give you an example.

舉個例子。

What we have here is one exploit file.

這是一個木馬程式。

Here, I'm looking at the Hex dump of an image file,

我眼前的是十六進位的圖檔，

which contains an exploit.

裡頭藏了一個木馬。

And that basically means, if you're trying to view this image file on your Windows computer,

基本上，這意謂著，如果你在微軟系統電腦上瀏覽該圖檔，

it actually takes over your computer and runs code.

那麼木馬會掌控電腦，執行病毒。

Now, if you'll take a look at this image file --

現在，如果請各位看看這個圖檔--

well there's the image header,

這裡有個影像的標頭，

and there the actual code of the attack starts.

這就是攻擊電腦的病毒碼源頭。

And that code has been encrypted,

病毒碼已事先加密保護。

so let's decrypt it.

好，我們來解密。

It has been encrypted with XOR function 97.

這是由XOR執行97加密保護的。

You just have to believe me,

你必須相信我，

it is, it is.

它真的是，真的。

And we can go here

我們到這裡，

and actually start decrypting it.

開始解密。

Well the yellow part of the code is now decrypted.

嗯，黃色部份的碼目前已解完了。

And I know, it doesn't really look much different from the original.

我知道，已解碼處的確和原來看似相去不遠。

But just keep staring at it.

不過，只要持續盯著看。

You'll actually see that down here

各位就可以看到在下方，

you can see a Web address:

有一個網址：

unionseek.com/d/ioo.exe

unionc.com/d/ioo.exe。

And when you view this image on your computer

當你在電腦上瀏覽該圖片時，

it actually is going to download and run that program.

執行檔就會開始下載並且操作。

And that's a backdoor which will take over your computer.