美国反制僵尸网络项目发展及其“技术突袭”分析

Study On The Development Of Countering Botnet Program Supported By US DARPA And Its Technological Surprise

为理清美国国防高级研究计划局支持的反制对手僵尸网络项目“利用自主性对抗网络攻击系统”发展情况和可能的影响,概述了僵尸网络威胁、现有主要对抗僵尸网络手段等立项背景,梳理了该项目发展情况,包括关键技术、每财年度研发计划情况、政府合同分配情况、技术指标情况等。依据研发情况、隐蔽研发、人工智能融合、可能的大规模试验等情况,从网络的攻击和防御两个方面分析了项目“技术突袭”生成,推测其一项关键技术衍生成果或加码“技术突袭”,进而从威慑、作战、情报等方面探讨了“技术突袭”的影响,并进行总结。

In order to clarify the development and possible impact of the countering opponent botnet program “Harnessing Autonomy for Countering Cyberadversary Systems”(HACCS) supported by US Defense Advanced Research Projects Agency(DARPA), this paper summarizes the background of this program, such as botnet threats and the main existing measures to countering botnets, and combs the development of this program, including key technologies, each fiscal year research and development plans, government contracts awarded and technical indicators. According to this program situations of research and development, pattern of covert research and development, artificial intelligence fusion and possible large-scale experiments, the generation of “technological surprise” of this program is analyzed from two aspects of network attack and defense, and we speculate that one of its key technology derivative achievements possibly add code to “technological surprise”. Furthermore, the influence of “technological surprise” is discussed from the aspects of deterrence, combat, intelligence and so on. At last, a brief summary is given.