Impressions: Tiger Trap

I just finished reading Tiger Trap by David Wise. I read the whole book (so my "impressions" label isn't really accurate, because I use that for books I didn't fully read). I don't feel like writing an entire review but I wanted to capture a few thoughts.

First, if you know nothing about Chinese espionage against the United States, read Tiger Trap. I didn't think Tiger Trap was the easiest book to read about the subject, but I haven't seen any other source cover so much history in one volume.

Second, it seems the Chinese prefer to use human resources to steal classified information, mainly because accessing classified networks is tougher than accessing unclassified networks. Still, there are plenty of cases where humans physically stole unclassified but sensitive information. Most of these predate the Web however.

Third, the Chinese like to "get good people to do bad things," as I Tweeted last week (citing page 16). In other words, China appeals to its overseas ethnic community to steal information because China "is a poor country," and it "needs to develop." (Oddly enough I have read these exact words in articles by various people who brush off reports of espionage.) While some spies act out of greed or revenge or a need to feel important, it seems plenty of other spies think they are really doing the right thing, leveling the playing field, or even helping both sides!

If anyone can provide the names of other resources describing Chinese espionage, I would appreciate the comment.

Comments

Chinadolle said…
http://www.amazon.com/Chinese-Intelligence-Operations-Nicholas-Eftimiades/dp/1557502145
Nicholas Eftimiades - Chinese Intelligence Operations

Dated, but good read, short & sweet.

http://www.amazon.com/exec/obidos/ASIN/0895262819/thegertzfile
http://www.amazon.com/Enemies-Americas-Steal-Secrets-Happen/dp/0307338061/ref=pd_sim_b2

Bill Gertz, The China Threat. And his: Enemies: How America's Foes Steal Our Vital Secrets...
1:58 AM
Anonymous said…
Not 100% sure China is the actor but motive was present : http://www.scribd.com/doc/13731776/Tracking-GhostNet-Investigating-a-Cyber-Espionage-Network
7:04 AM
Jerry said…
Jane's Sentinel Country Risk Assessments - China and Northeast Asia has a few pages on Information Warfare under the Armed Forces section.
Amazon has used copies slightly out of date:
http://www.amazon.com/Janes-Sentinel-Country-Assessments-Northeast/dp/B002W5940I/ref=sr_1_8?s=books&ie=UTF8&qid=1316779440&sr=1-8

Page 111

Jerry
8:06 AM
Anonymous said…
Nest of Spies is about foreign operatives operating in Canada, which is apparently quite common since the government has their heads in the sand. This book may complement Tiger Trap because it talks a lot about Chinese activity. It discusses Chinese patience, such as planting people out of college and then calling on them decades later when they have climbed the ranks, and the concept of "soft influence" to position themselves to benefit in subtle ways. They will also file away anything they can get their hands on for future reference, no matter how innocuous. Also mentioned is the pressure they place on transplanted immigrants to spy, and the risks to travelers to China doing business with that country.

This book was withdrawn from the market due to alleged complaints by the Chinese government and the second ed. had about a page removed.


At one time this Canadian book was only available at the Canadian Amazon, but you may want to pick up a used copy since one can now get an inexpensive used copy on the US side. Strangely enough, all the descriptive text has disappeared.


http://www.amazon.com/Spies-Michel-Juneau-Katsuya-Fabrice-Depierrebourg/dp/1554684501/ref=sr_1_13?s=books&ie=UTF8&qid=1317340076&sr=1-13
8:07 PM
Anonymous said…
Hi,
I really enjoy reading your blog posts.....nice one..
2:58 AM
Post a Comment

Popular posts from this blog

Zeek in Action Videos

Image
This is a quick note to point blog readers to my Zeek in Action YouTube video series for the Zeek network security monitoring project .  Each video addresses a topic that I think might be of interest to people trying to understand their network using Zeek and adjacent tools and approaches, like Suricata, Wireshark, and so on.  I am especially pleased with Video 6 on monitoring wireless networks . It took me several weeks to research material for this video. I had to buy new hardware and experiment with a Linux distro that I had not used before -- Parrot .  Please like and subscribe, and let me know if there is a topic you think might make a good video.
Read more

MITRE ATT&CK Tactics Are Not Tactics

Image
Just what are "tactics"? Introduction MITRE ATT&CK  is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Read more

New Book! The Best of TaoSecurity Blog, Volume 4

Image
  I've completed the TaoSecurity Blog book series . The new book is  The Best of TaoSecurity Blog, Volume 4: Beyond the Blog with Articles, Testimony, and Scholarship .  It's available now for Kindle , and I'm working on the print edition.  I'm running a 50% off promo on Volumes 1-3 on Kindle through midnight 20 April. Take advantage before the prices go back up. I described the new title thus: Go beyond TaoSecurity Blog with this new volume from author Richard Bejtlich. In the first three volumes of the series, Mr. Bejtlich selected and republished the very best entries from 18 years of writing and over 18 million blog views, along with commentaries and additional material.  In this title, Mr. Bejtlich collects material that has not been published elsewhere, including articles that are no longer available or are stored in assorted digital or physical archives. Volume 4 offers early white papers that Mr. Bejtlich wrote as a network defender, either for technica...
Read more