A computer chip manufactured in China that is used in US military equipment contains a secret “backdoor” that could severely compromise security, a team of scientists from Cambridge University says.
In a recent report, Sergei Skorobogatov, a senior research associate at the University of Cambridge’s computer laboratory, wrote that his team had developed silicon chip scanning technology that allowed them to investigate claims by various intelligence services worldwide that silicon chips could be infected by malware, such as Stuxnet, that can allow a third party to gain access to or transmit confidential data.
Unlike software, no means currently exist to protect hardware against viruses or Trojan horses, a critical vulnerability for defense systems that are hardware-reliant.
For its research, Skorobogatov’s team selected a chip that was manufactured in China and is used by the US military. The chip, which is prevalent in many systems used in weapons, nuclear power plants and public transport, was considered highly secure and used sophisticated encryption standards.
After performing advanced code breaking, the team found a backdoor they say had been inserted by the manufacturer.
“This backdoor has a key, which we were able to extract,” Skorobogatov wrote on his Web site, discussing what he referred to as hardware assurance. “If you use this key you can disable the chip or reprogram it at will, even if locked by the user with their own key.”
The backdoor access could be turned into an advanced Stuxnet weapon to attack potentially millions of systems, he wrote, adding that the scale and range of the attacks that could be launched using it had huge implications for national security and public infrastructure.
The Cambridge team did not specify the Chinese manufacturer, nor did it mention whether this was an isolated case or signs of a wider trend, according to the online-based The Next Web.
Reports last year claimed that the US Navy had purchased 59,000 microchips in 2010 for use in missiles and transponders that turned out to be counterfeits from China. According to Wired magazine, the fake chips also contained “backdoors” that could have allowed a third party to remotely disable them at any time, severely compromising homing systems and friend-or-foe signals used by aircraft.
The discovery prompted the Intelligence Advanced Research Projects Agency to seek ways to scan hardware — including computer chips — for the presence of malware installed during the production process.
KEY INDUSTRY: The vice premier discussed a plan to create a non-red drone supply chain by next year, which has been allocated a budget of more than NT$7.2 billion The government has budgeted NT$44.2 billion (US$1.38 billion) to cultivate Taiwan’s uncrewed aerial vehicle (UAV) industry over the next five years, which would make the nation a major player in the industry’s democratic supply chain in the Asia-Pacific region, Premier Cho Jung-tai (卓榮泰) said yesterday. Cho made the remarks during a visit to the facilities of Cub Elecparts Inc (為升電裝). Democratic Progressive Party (DPP) Legislator Chen Su-yueh (陳素月) and Chinese Nationalist Party (KMT) Legislator Hsieh Yi-fong (謝依鳳) also participated in the trip. Cub Elecparts has transitioned from the automotive industry to the defense industry, which is the top priority among the nation’s
SOUTH KOREA DISPUTE: If Seoul continues to ignore its request, Taiwan would change South Korea’s designation on its arrival cards, the foreign ministry said If South Korea does not reply appropriately to a request to correct Taiwan’s name on its e-Arrival card system before March 31, the government would take corresponding measures to change how South Korea is labeled on the online Taiwan Arrival Card system, the Ministry of Foreign Affairs said yesterday. South Korea’s e-Arrival card system lists Taiwan as “China (Taiwan)” in the “point of departure” and “next destination” fields. Taipei has asked Seoul to change the wording. Since March 1, South Koreans who hold government-issued Alien Resident Certificates (ARC) have been identified as from “South Korea” rather than the “Republic of Korea,” the
SUFFICIENT: The president said Taiwan has enough oil for next month, with reserves covering more than 100 days and natural gas enough for 12 to 14 days A restart plan for the Guosheng Nuclear Power Plant in New Taipei City’s Wanli District (萬里) and the Ma-anshan Nuclear Power Plant in Pingtung County’s Hengchun Township (恆春) would be submitted to the Nuclear Safety Commission by the end of the month, President William Lai (賴清德) said yesterday, reversing the government’s policy to abolish nuclear energy. On May 17 last year, Taiwan shut down its last nuclear reactor and became the first non-nuclear nation in East Asia, fulfilling the Democratic Progressive Party (DPP) government’s pledge of a “nuclear-free homeland.” Even without nuclear power, Taiwan can maintain a stable electricity supply until 2032,
DEROGATORY: WTO host Cameroon’s designation of Taiwan as a ‘province of China’ seriously undermines the nation’s status and rights as a WTO member, MOFA said The Ministry of Foreign Affairs (MOFA) yesterday condemned Cameroon for listing Taiwan as “Taiwan, Province of China” in visa documents for an upcoming WTO ministerial conference, a move that led to Taiwan’s withdrawal from the event. The designation “seriously undermined” Taiwan’s status and rights as a WTO member, the ministry said in a statement. It is the first time since 2001 that Taiwan has declined to attend a WTO Ministerial Conference. The conference is scheduled to take place from Thursday to Sunday next week in Yaounde, the capital of Cameroon. Taiwan had planned to send a delegation led by Minister Without Portfolio