‫‪A/68/156/Add.1‬‬ ‫ﺍﻟﺸﺮﻳﺮﺓ ﻣﺘﻮﺍﻓﺮﺓ ﻋﻠﻰ ﳓﻮ ﻳﺘﻴﺢ ﺍﳊﺼﻮﻝ ﻋﻠﻴﻬﺎ ﺑﺴﻬﻮﻟﺔ ﻧـﺴﺒﻴﺎ‪ ،‬ﻟﻜﻮﻬﻧـﺎ ﻣﺘﺎﺣـﺔ ﲡﺎﺭﻳـﺎ ﰲ ﺍﻟـﺴﻮﻕ‬ ‫ﺍﻟــﺴﻮﺩﺍﺀ ﺃﻭ ﻏــﲑ ﺍﳋﺎﺿــﻌﺔ ﻷﻱ ﺃﻧﻈﻤــﺔ‪ .‬ﻭﻻ ﳝﻜــﻦ ﺗــﺄﻣﲔ ﺑﻴﺌــﺎﺕ ﺗﻜﻨﻮﻟﻮﺟﻴــﺎ ﺍﳌﻌﻠﻮﻣــﺎﺕ ﺍﳊﺎﻟﻴــﺔ‬ ‫ﻟﺪﻳﻨﺎ ﺿﺪ ﻫﺬﻩ ﺍﻷﺩﻭﺍﺕ ﺑﺎﻻﻋﺘﻤﺎﺩ ﻋﻠﻰ ﻬﻧﺞ ﺃﻣﻦ ﺗﻜﻨﻮﻟﻮﺟﻴﺎ ﺍﳌﻌﻠﻮﻣﺎﺕ ﺍﻟﺘﻘﻠﻴﺪﻳﺔ ﻭﺣﺪﻩ‪.‬‬ ‫ﻭﻳﻜﺮﺱ ﺍﳌﻬﺎﲨﻮﻥ ﺍﻟﺬﻳﻦ ﻳﺘﻤﺘﻌﻮﻥ ﺑﻘﺪﺭ ﻛـﺒﲑ ﻣـﻦ ﺍﻟﻜﻔـﺎﺀﺓ ﺍﻟﻔﻨﻴـﺔ ﻭﺳـﺎﺋﻞ ﺗﻘﻨﻴـﺔ ﻭﻣﺎﻟﻴـﺔ‬ ‫ﻛﺒﲑﺓ ﻟﻠﻜـﺸﻒ ﻋـﻦ ﻣـﻮﺍﻃﻦ ﺍﻟـﻀﻌﻒ ﰲ ﻧﻈـﻢ ﺗﻜﻨﻮﻟﻮﺟﻴـﺎ ﺍﳌﻌﻠﻮﻣـﺎﺕ ﻭﺍﻻﺗـﺼﺎﻻﺕ‪ ،‬ﻭﺍﺳـﺘﻐﻼﻝ‬ ‫ﺗﻠﻚ ﺍﻟﻨﻘﺎﻁ ﻟﺘﺤﻘﻴﻖ ﺃﻏﺮﺍﺿﻬﻢ ﺍﳋﺎﺻﺔ‪ .‬ﰒ ﺇﻥ ﺻﻌﻮﺑﺔ ﺇﺳﻨﺎﺩ ﺗﻠـﻚ ﺍﳍﺠﻤـﺎﺕ ﻋﻠـﻰ ﳓـﻮ ﻣﻮﺛـﻮﻕ‪،‬‬ ‫ﻭﻣﺎ ﻳﻨﺠﻢ ﻋﻦ ﺫﻟﻚ ﻣﻦ ﻓﺮﺹ ﻟﺸﻦ ﻫﺠﻤﺎﺕ ﻣﺘﺨﻔﻴﺔ‪ ،‬ﺗـﺸﻜﻞ ﳐـﺎﻃﺮ ﺇﺿـﺎﻓﻴﺔ ﻋﻠـﻰ ﺍﻷﻣـﻦ ﻋﻠـﻰ‬ ‫ﺍﻟﺼﻌﻴﺪﻳﻦ ﺍﻟـﻮﻃﲏ ﻭﺍﻟـﺪﻭﱄ‪ ،‬ﻭﻻ ﺳـﻴﻤﺎ ﺟـﺮﺍﺀ ﺳـﻮﺀ ﺍﻟﻔﻬـﻢ ﻭﺳـﻮﺀ ﺍﻟﺘﻘـﺪﻳﺮ‪ .‬ﻭﻋﻤﻠﻴـﺎﺕ ﺍﻻﻗﺘﺤـﺎﻡ‬ ‫ﺍﻟﺮﺍﻣﻴﺔ ﺇﱃ ﲨﻊ ﻣﻌﻠﻮﻣﺎﺕ ﻻ ﺗﺒﺪﻭ ﰲ ﺑﺎﺩﺉ ﺍﻷﻣﺮ‪ ،‬ﻭﰲ ﻛﺜﲑ ﻣﻦ ﺍﻷﺣﻴـﺎﻥ ﳐﺘﻠﻔـﺔ ﻋـﻦ ﺗﻠـﻚ ﺍﻟـﱵ‬ ‫ﻟﺪﻳﻬﺎ ﺃﻫﺪﺍﻑ ﺗﺪﻣﲑﻳﺔ‪ .‬ﻭﻫﺬﺍ ﻳﺰﻳﺪ ﻣﻦ ﳐﺎﻃﺮ ﺣـﺪﻭﺙ ﺗـﺼﻮﺭﺍﺕ ﺧﺎﻃﺌـﺔ ﺑـﺸﺄﻥ ﺍﺣﺘﻤـﺎﻝ ﻭﻗـﻮﻉ‬ ‫ﻫﺠﻤﺎﺕ ﻭﺍﺣﺘﻤﺎﻝ ﺍﻧﺘﻬﺎﻛﻬﺎ ﺍﳊﻈﺮ ﺍﳌﻔﺮﻭﺽ ﻋﻠﻰ ﺍﺳﺘﺨﺪﺍﻡ ﺍﻟﻘﻮﺓ ﰲ ﺍﻟﻌﻼﻗﺎﺕ ﺍﻟﺪﻭﻟﻴﺔ‪.‬‬ ‫ﻭﳑــﺎ ﻳﻮﻟــﺪ ﺣﺎﻟــﺔ ﺇﺿــﺎﻓﻴﺔ ﻣــﻦ ﻋــﺪﻡ ﺍﻟﻘــﺪﺭﺓ ﻋﻠــﻰ ﺍﻟﺘﻨﺒــﺆ ﺣــﺪﻭﺙ ﻏﻤــﻮﺽ ﺳــﺎﺋﺪ ﺑــﺸﺄﻥ‬ ‫ﻣﺎ ﻳﻨﻄﺒﻖ ﰲ ﻫﺬﺍ ﺍﻟﺼﺪﺩ ﻣﻦ ﻣﻌـﺎﻳﲑ ﰲ ﺍﻟﻔـﻀﺎﺀ ﺍﻹﻟﻜﺘـﺮﻭﱐ‪ .‬ﻭﻗـﺪ ﺃﺛﺒﺘـﺖ ﻧﻈـﻢ ﻣﺮﺍﻗﺒـﺔ ﺍﻟﻌﻤﻠﻴـﺎﺕ‬ ‫ﺍﳌﺘﻌﻠﻘــﺔ ﺑﺎﳍﻴﺎﻛــﻞ ﺍﻷﺳﺎﺳــﻴﺔ ﺃﻬﻧــﺎ ﻋﺮﺿــﺔ ﺑﻮﺟــﻪ ﺧــﺎﺹ ﻟﻌﻤﻠﻴــﺎﺕ ﺧﺒﻴﺜــﺔ ﰲ ﳎــﺎﻝ ﺗﻜﻨﻮﻟﻮﺟﻴــﺎ‬ ‫ﺍﳌﻌﻠﻮﻣﺎﺕ ﻭﺍﻻﺗﺼﺎﻻﺕ‪ .‬ﺃﻣﺎ ﺍﳌﺨﺎﻃﺮ ﺍﶈﺘﻤﻠﺔ ﻣﻦ ﺣﺪﻭﺙ ﺃﺿﺮﺍﺭ ﻻ ﳝﻜـﻦ ﺍﻟـﺴ���ﻄﺮﺓ ﻋﻠﻴﻬـﺎ ﻋﻠـﻰ‬ ‫ﺍﻟﻨﻄﺎﻕ ﺍﻟﻌﺎﳌﻲ‪ ،‬ﻓﻬﻲ ﻋﺎﻟﻴﺔ‪ ،‬ﻭﺗﺸﻤﻞ ﻫﺬﻩ ﺍﻷﺿـﺮﺍﺭ ﺇﺻـﺎﺑﺔ ﻧﻈـﻢ ﺍﳌﺮﺍﻗﺒـﺔ ﺍﻟـﺼﻨﺎﻋﻴﺔ‪ ،‬ﺣﻴـﺚ ﺗـﻨﺠﻢ‬ ‫ﺁﺛﺎﺭ ﻣﺎﺩﻳﺔ ﻣﺪﻣﺮﺓ‪ .‬ﻓﻮﻗﻮﻉ ﻫﺠﻮﻡ ﺇﻟﻜﺘﺮﻭﱐ ﻭﺍﺣﺪ ﻋﻠﻰ ﺍﳍﻴﺎﻛﻞ ﺍﻷﺳﺎﺳـﻴﺔ ﺍﻟﺮﺋﻴـﺴﻴﺔ ﻟﻼﺗـﺼﺎﻻﺕ‬ ‫ﺍﻟﺴﻠﻜﻴﺔ ﻭﺍﻟﻼﺳﻠﻜﻴﺔ ﳝﻜﻦ ﺃﻥ ﳛـﺪﺙ ﺍﺧـﺘﻼﻻﺕ ﻋﻠـﻰ ﺍﻟـﺼﻌﻴﺪ ﺍﻟﻌـﺎﳌﻲ ﺗﻔـﻮﻕ ﻣـﺎ ﳛﺪﺛـﻪ ﻫﺠـﻮﻡ‬ ‫ﻣﺎﺩﻱ ﻭﺍﺣﺪ‪.‬‬ ‫ﻭﺑﺼﺮﻑ ﺍﻟﻨﻈﺮ ﻋﻦ ﺗﻔﺎﻭﺕ ﺩﺭﺟﺎﺕ ﻣـﺎ ﲢﻈـﻰ ﺑـﻪ ﺗﻜﻨﻮﻟﻮﺟﻴـﺎ ﺍﳌﻌﻠﻮﻣـﺎﺕ ﻭﺍﻻﺗـﺼﺎﻻﺕ‬ ‫ﻣﻦ ﻗﺪﺭﺍﺕ ﻭﺃﻣﻦ ﻟﺪﻯ ﳐﺘﻠﻒ ﺍﻟﺪﻭﻝ‪ ،‬ﳚﺮﻱ ﰲ ﻛﺜﲑ ﻣﻦ ﺍﳊـﺎﻻﺕ ﺇﺭﺟـﺎﺀ ﻣـﺎ ﻳـﺘﻌﲔ ﺍﲣـﺎﺫﻩ ﻣـﻦ‬ ‫ﺧﻄــﻮﺍﺕ ﻣﻠﻤﻮﺳــﺔ ﻣــﻦ ﺃﺟــﻞ ﺗﻌﺰﻳــﺰ ﺍﻟﻘــﺪﺭﺓ ﻋﻠــﻰ ﺍﻟﺘــﺼﺪﻱ‪ ،‬ﺃﻭ ﺗﺒﻘــﻰ ﻏﺎﺋﺒــﺔ ﲤﺎﻣــﺎ ﻋــﻦ ﺑﺮﻧــﺎﻣﺞ‬ ‫ﺍﻟﺘﺼﺪﻱ‪ ،‬ﻭﺫﻟـﻚ ﺟـﺮﺍﺀ ﺣﺎﻟـﺔ ﻋـﺪﻡ ﺍﻟـﻴﻘﲔ ﺍﻟـﱵ ﺗﻜﺘﻨـﻒ ﺍﳌﺨـﺎﻃﺮ ﺍﻟـﱵ ﻳﺘﻌـﺮﺽ ﳍـﺎ ﺃﻣـﻦ ﺍﻟﻔـﻀﺎﺀ‬ ‫ﺍﻹﻟﻜﺘﺮﻭﱐ ﻭﺳﺒﻞ ﺍﻟﺘـﺼﺪﻱ ﳍـﺎ ﺑﻔﻌﺎﻟﻴـﺔ‪ ،‬ﻭﻣـﺎ ﺗﺘـﺴﻢ ﺑـﻪ ﺍﳍﺠﻤـﺎﺕ ﺍﻟﺮﻗﻤﻴـﺔ ﻣـﻦ ﺗﻌﻘﻴـﺪ ﻭﺍﺑﺘﻜـﺎﺭ‪،‬‬ ‫ﻭﻃﺎﺑﻊ ﺍﻟﺴﺮﻳﺔ ﺍﻟﺬﻱ ﻳﻀﻔﻲ ﺗﻌﺘﻴﻤﺎ ﻋﻠﻰ ﻃﺒﻴﻌﺔ ﺍﳊﻮﺍﺩﺙ ﺍﻟﻔﺮﺩﻳﺔ‪.‬‬ ‫ﺍﳉﻬﻮﺩ ﺍﳌﺒﺬﻭﻟﺔ ﻋﻠﻰ ﺍﻟﺼﻌﻴﺪ ﺍﻟﻮﻃﲏ‬ ‫ﺍﳌﻌﻠﻮﻣـﺎﺕ )‪Bundesamt fur Sicherheit‬‬ ‫ﰲ ﻋﺎﻡ ‪ ،١٩٩١‬ﺃﹸﻧﺸﺊ ﺍﳌﻜﺘﺐ ﺍﻻﲢﺎﺩﻱ ﻷﻣـﻦ‬ ‫‪ (in der Informationstechnik, BSI‬ﻟﻴﻜـــﻮﻥ ﺃﻭﻝ ﻭﺃﻫـــﻢ ﻣﻘـــﺪﻡ ﳋـــﺪﻣﺎﺕ ﺃﻣـــﻦ ﺗﻜﻨﻮﻟﻮﺟﻴـــﺎ‬ ‫ﺍﳌﻌﻠﻮﻣﺎﺕ ﺍﳌﺮﻛﺰﻳﺔ ﻟﺪﻯ ﺍﳊﻜﻮﻣﺔ ﺍﻻﲢﺎﺩﻳﺔ‪ .‬ﻭﰲ ﻫـﺬﻩ ﺍﳌﻬﻤـﺔ‪ ،‬ﻳﻘـﻮﻡ ﺍﳌﻜﺘـﺐ ﺑﻨـﺸﺮ ﺍﳊـﺪ ﺍﻷﺩﱏ‬ ‫‪8/34‬‬ ‫‪13-47543‬‬