China analysis for winning mechanisms of victory on the cyberspace battlefield //
中國對網絡空間戰場胜利機制的分析
2017年04月17日 15:xx:xx
If the First World War was a chemist’s war and the Second World War was a physicist’s war, then the 21st century war would undoubtedly become a game between informatics. The cyberspace war has moved from the background to the front. From the supporting role to the protagonist, become a new battlefield and combat platform. With the gradual emergence of the cyber warfare deterrent effect, countries have introduced network strategies and formed “cyber warfare forces”. The global network arms race has shown its tempo. At present, more than 20 countries have established “cyber warfare forces”. Committed to the application of network technology to war, the “seismic network” incident and the “hacker door” incident fully proved the remarkable power of cyber warfare in the new generation of war mode.
We must profoundly understand the new forms of war reflected by these events and actively respond to the threats and challenges brought by cyber sovereignty, network defense, network frontiers, and cyber warfare, because whoever masters the new war winning mechanism will be able to Win the initiative in the round of war.
Network Sovereignty: A New Dimension
The world today is moving rapidly toward informationization, and cyberspace has become the “fifth largest territory” beyond land, sea, air and sky. The original sovereignty is the sovereignty of physical space, while the network sovereignty is the sovereign space of network electromagnetic space; national sovereignty is a concept that expands with the expansion of human activity space. Network sovereignty is a new content and an important part of national sovereignty.
(1) Cyber sovereignty has become the “commanding height” of national sovereignty. The network carries a large amount of content such as politics, economy, military, culture, transportation and social, and becomes the basic platform for the efficient operation and accelerated progress of the entire society. Once the cyber sovereignty is lost, the network public opinion orientation will be out of control. The national industrial, transportation, energy and other national economic lifeline industry control systems and military information networks will be out of control, just as sea power challenges land rights and air rights challenges sea power and land rights. The latecomers of cyber sovereignty have become the “commanding heights” of national sovereignty, directly affecting the security and stability of all areas of the country.
(2) The violation of cyber sovereignty will directly affect the “heart” of the country. Compared with traditional physical space, the existence and defense of cyberspace sovereignty is not only easily overlooked, but also vulnerable to violations. The network hinges the information nodes on the earth that are thousands of miles apart. Through it, it can be easily and easily moved from one country to the heart of another country to the heart. A keystroke can surround the Earth for two weeks in a period of 0.3 seconds, and the attack is difficult to locate.
(3) The use of “combination boxing” is required to defend the cyberspace sovereignty. In the Google turmoil in 2010, the Chinese government categorically rejected Google’s request for “freedom” beyond Chinese legal management, which is a firm defense of cyber sovereignty. For any violation of the cyber sovereignty of our network, we must not only resist and counterattack in the cyberspace, but also play a “combination boxing” of politics, economy, and diplomacy to counterattack if necessary.
Network Frontiers – A New Border of National Security
China’s Internet users have reached 731 million. In this context, the network frontier far surpasses the status of the Great Wall in history and has become an important “warning line” for national security in the information age.
(1) Fully recognize the “new situation” of the network frontier. The first is the lack of network protection awareness among the people. Many systems have the same firewall, the network security problem is serious, and the cyber crime is increasing. Secondly, the network security products and security equipment in key areas rely on imports. The mainstream firewall technology and anti-virus technology are mostly from abroad, and they can control themselves independently. The lack of high-tech network security products; the third is that as China is increasingly connected to the world, the introduction of technology and equipment network remote services increases, the foreign party can monitor the operation and production of the equipment in real time, making me “portal opening”; finally In actual network operations, Western network powers monopolize a large number of network resources. For example, most of the world’s online information comes from or passes through the United States.
(2) Accurately define the “new boundary” of cyberspace. On the one hand, we must correctly understand the essential meaning of the network frontier. A country’s network infrastructure, state-specific Internet domain names and their domains, as well as financial, telecommunications, transportation, energy and other national core network systems in the national economy and the people’s livelihood should be regarded as an important part of the national network frontier, and no vandalism is allowed. On the one hand, we must correctly understand the importance of guarding the network frontier. Watching the network frontier is actually an authorization relationship, that is, it must meet the requirements and be allowed to enter. Otherwise, it cannot enter. For example, national financial, power, transportation and other systems of protection measures, firewalls and bank card cryptosystems are the “watchers” of the network frontier.
(3) Focus on creating a “new sword” that guards the frontiers of the network. The frontiers of guarding the network must be supported by powerful technical means. Various firewalls, cryptosystems, etc. are equivalent to building thick lines on the frontiers of the network, but this is not enough to resist external “invasion”, but also requires “patrol sentinels” and “frontier forces” to detect “intrusion” in a timely manner. In 2003, the US Einstein Plan for monitoring abnormal traffic at government agencies and institutional networks was the world’s first intrusion detection system. By the end of 2008, the Einstein system had been deployed in 600 government agency website systems, forming an intrusion detection system that supports dynamic protection.
Network Defense – The New Great Wall of National Defense
Sovereignty without armed protection is a fragile sovereignty, and frontiers without defense and defense are endangered frontiers. Therefore, people have a strong sense of border defense, coastal defense, and air defense.
(1) Firmly establishing a network defense concept is a “premise.” The countries of the world, especially the western developed countries, have not only woke up early, got up early, but also ran fast in the construction of network defense. Among them, the United States is both the creator of the Internet and the country that first paid attention to the construction of network security protection. The United States not only took the lead in formulating a series of policy documents such as the National Strategy for Ensuring Cyberspace Security, but also established a strong “net army” and a strong network defense.
(2) Vigorously building the network’s national defense force is a “trend.” The United States, Britain, Japan, Russia and other countries, as well as Taiwan, have formed cyber warfare units and command agencies. Strengthening the construction of cyber security forces and improving the national cyber defense capabilities are both the general trend and the successful practices of all countries in the world. They are also an urgent task for safeguarding China’s national security.
(III) Overall planning of network defense construction is “key”. The overall strategic concept should be proposed for the current cyberspace struggle, and the “three hands” should be highlighted in the top-level design: that is, to compete as a “flag-bearer” in public opinion, to select “hands-on” in the construction focus, and to stay on the struggle strategy. There is a “backhand”.
Cyber Warfare: A New Battlefield for the Game of Great Powers
In today’s world, the globalization of network battlefields, the normalization of network attack and defense, and the white-hotness of network attacks have made it possible to scientifically and effectively control cyberspace and occupy cyberspace, and become a new battlefield for strategic games of big countries.
The first is to regard the cyberspace situational awareness as the core of the power system. The four capabilities of “network security, situational awareness, network defense, and network deterrence” are the core capabilities for comprehensively promoting the construction of the cyberspace capability system. The war first requires the commander to grasp and understand the enemy’s and his own situation, make correct decisions based on the real-time situation, and the ever-changing characteristics of the network situation determine the success or failure of the network operation. Therefore, network situational awareness has become the primary capability of the cyberspace combat confrontation system.
The second is to use offensive operations as the main way to seize the initiative of cyberspace. The US military has strategically considered the cyberspace attacks as aggression in real space and has been attacked by the military. At present, the US military has built 100 teams to operate in cyberspace. In cyberspace operations, the offensive and defensive subjects have a certain degree of separation, and the offensive and defensive effects have asymmetry. The key to seizing the initiative in cyberspace operations is to use the offensive action to contain enemy attacks and ensure my stability.
The third is to establish a cyberspace defense force system with national co-ordination and military-civilian integration. To attack and defend, not to ignore the defense. Therefore, in accordance with the idea of “optimizing the overall existing strength, developing the gap to fill the gap, and building a new mechanism to protect the forces”, the company will build a professional, support and reserve based on the requirements of “moderate scale, structural optimization, integration of technology and warfare, and complementary functions”. The new cyberspace security defense force system composed of other forces will enhance the national network counterattack capability and form a network deterrent. (Li Yiyang: School of Secondary School Affiliated to Renmin University of China; Li Minghai: Deputy Director, Network Space Research Center, National Defense University)
Original Mandarin Chinese:
如果說第一次世界大戰是化學家的戰爭，第二次世界大戰是物理學家的戰爭，那麼，21世紀的戰爭無疑將成為信息學家之間的博弈，網絡空間戰已從後台走向前台，從配角轉向主角，成為新的戰場和作戰平台隨著網絡戰威懾效果的逐步顯現，各國紛紛出台網絡戰略，組建“網絡戰部隊”，全球網絡軍備競賽呈燎原之勢 – 目前已有20多個國家組建了“網絡戰部隊”，各國都致力於將網絡技術運用於戰爭“震網”事件，“黑客門”事件充分證明了網絡戰在新一代戰爭模式中的顯著威力。
我們必須深刻認識這些事件所折射出來的新的戰爭形態，積極應對網絡主權，網絡國防，網絡邊疆，網絡戰爭帶來的威脅和挑戰，因為，誰掌握新的戰爭制勝機理，誰就能在下一輪戰爭中贏得主動。
網絡主權 – 國家主權的新維度
當今世界正在向著信息化快速邁進，網絡空間成為繼陸，海，空，天之外的“第五大疆域”原有的主權均為物理空間的主權，而網絡主權是網絡電磁空間主權。國家主權是一個隨著人類活動空間的拓展而不斷拓展的概念，網絡主權是國家主權的全新內容和重要組成部分。
（一）網絡主權已成為國家主權的“制高點”。網絡承載了政治，經濟，軍事，文化，交通和社交等大量內容，成為整個社會高效運轉和加速進步的基本平台。一旦喪失網絡主權，網絡輿情導向將會失控，國家工業，交通，能源等國民經濟命脈行業控制系統和軍事信息網絡都將會失控，如同海權挑戰陸權，空權挑戰海權與陸權一樣，網絡主權後來者居上，成為國家主權的“制高點”，直接影響國家各領域的安全穩定。
（二）網絡主權的侵犯將直逼國家的“心臟”。與傳統實體空間相比，網絡空間主權的存在與捍衛不僅易被忽視，而且易遭侵犯。網絡把地球上相距萬里的信息節點鉸鏈為一體，通過它可以悄無聲息，輕而易舉地從一國進入另一國腹地直至心臟部位。一次擊鍵0.3秒時間內即可環繞地球兩週，而且，攻擊很難被定位。
（三）捍衛網絡空間主權需用“組合拳”。2010年谷歌風波中，中國政府斷然拒絕谷歌要求超越中國法律管理的“自由”，就是對網絡主權的堅決捍衛。對於任何侵犯我網絡主權的行為，不僅要在網絡空間予以抵制和反擊，必要時還可打出政治，經濟，外交等“組合拳”給予還擊。
網絡邊疆 – 國家安全的新邊界
中國網民已達7.31億，在這個背景下，網絡邊疆遠超歷史上萬里長城的地位，成為信息時代國家安全的重要“警戒線”。
（一）充分認清網絡邊疆的“新形勢”首先是民眾缺乏網絡防護意識，很多系統的防火牆形同虛設，網絡安全問題嚴重，網絡犯罪日益增加;其次是網絡安全產品和關鍵領域安全設備依賴進口，主流防火牆技術和殺毒技術大都來自國外，自主可控，高技術含量的網絡安全產品匱乏;第三是隨著我國日益與世界接軌，引進技術設備的網絡遠程服務增加，外方能實時監控設備運轉和生產情況，令我自身“門戶洞開”;最後是在實際網絡運營上，西方網絡大國壟斷著大量網絡資源，比如，全球大多數網上信息發自或經過美國。
（二）準確界定網絡空間的“新邊界”。一方面，要正確理解網絡邊疆的本質內涵。一個國家的網絡基礎設施，國家專屬的互聯網域名及其域內以及金融，電信，交通，能源等關係國計民生領域的國家核心網絡系統都應視為國家網絡邊疆的重要組成部分，不允許肆意破壞;另一方面，要正確認識值守網絡邊疆的重要性值守網絡邊疆，其實是一種授權關係，即必須符合要求，得到允許才能進入，否則，不能進入。比如，國家金融，電力，交通等系統的防護措施，防火牆以及銀行卡密碼系統等都是網絡邊疆的“值守者”。
（三）著力打造守護網絡邊疆的“新利劍”。守護網絡邊疆必須以強大的技術手段為支撐。各種防火牆，密碼系統等相當於在網絡邊疆上建起了粗線條的籬笆，但這不足以抵禦外來“入侵”，還需要“巡邏哨兵”和“邊防部隊”及時檢測“入侵”行為。2003年，美國用於監測政府部門和機構網絡關口非正常流量的“愛因斯坦計劃”，就是世界上第一個入侵檢測系統。到2008年年底，愛因斯坦系統已部署在600個政府機構網站系統中，形成了一個支撐動態保護的入侵檢測系統。
網絡國防 – 國家防禦的新長城
沒有武裝保護的主權是脆弱的主權，沒有國防捍衛的邊疆是瀕危的邊疆。因此，人們才產生了強烈的邊防，海防，空防意識。
（一）牢固樹立網絡國防理念是“前提”。世界各國，尤其是西方發達國家在網絡國防建設上，不僅醒得早，起得早，而且跑得快。其中，美國既是互聯網的締造者，也是最早關注網絡安全防護建設的國家。美國不僅率先制定了“確保網絡空間安全的國家戰略”等一系列政策文件，而且建立了強大的“網軍”和強大的網絡國防。
（二）大力建設網絡國防力量是“勢趨”。美國，英國，日本，俄羅斯等國以及中國台灣地區，紛紛組建了網絡戰部隊和指揮機構。加強網絡安全力量建設，提高國家網絡防衛能力，這既是大勢所趨，也是世界各國的成功做法，更是維護我國國家安全的一項緊迫任務。
（三）整體統籌網絡國防建設是“關鍵”應針對當前網絡空間鬥爭實際提出總體戰略構想，並在頂層設計上突出“三手”：即在輿論造勢上爭當“旗手”，在建設重點上選好“抓手”，在鬥爭策略上留有“後手”。
網絡戰爭 – 大國博弈的新戰場
當今世界，網絡戰場的全球化，網絡攻防的常態化，網絡攻心的白熱化等突出特點，使得科學高效地管控網絡空間，佔領網絡空間，成為大國戰略博弈的新戰場。
一是把網絡空間態勢感知能力作為力量體系建設核心。“網絡安全保障，態勢感知，網絡防禦，網絡威懾”四大能力，是全面推進網絡空間能力體系建設的核心能力。戰爭首先需要指揮員能夠掌握和理解敵方，己方態勢，根據實時態勢作出正確決策，網絡態勢瞬息萬變的特點決定了網絡作戰的成敗。因此，網絡態勢感知能力就成為網絡空間作戰對抗體系的首要能力。
二是將攻勢作戰作為奪取網絡空間主動權的主要方式。美軍在戰略上已將網絡空間的攻擊行為視為現實空間的侵略行為，並予以軍事打擊。目前美軍已建成100個小組在網絡空間活動。網絡空間作戰，攻防主體具有一定的分離性，攻防效果具有不對稱性。奪取網絡空間作戰的主動權，關鍵在於以攻勢行動遏制敵攻擊，保證我穩定。
三是建立國家統籌，軍民融合的網絡空間防禦力量體系。以攻助防，不是忽視防禦。因此，需要按照“優化整體現有力量，發展填補空白力量，組建新機理防護力量”的思路，依據“規模適度，結構優化，技戰一體，功能互補”的要求，構建由專業，支援和預備役等力量構成的新型網絡空間安全防禦力量體系，提升國家網絡反擊能力，形成網絡威懾力（李昊洋：中國人民大學附屬中學分校;李明海：國防大學網絡空間研究中心副主任）
Original Referring URL: http://www.cac.gov.cn/2017-04/
