Great Cannon Explained

The Great Cannon of China is an Internet attack tool that is used by the Chinese government to launch distributed denial-of-service attacks on websites by performing a man-in-the-middle attack on large amounts of web traffic and injecting code which causes the end-user's web browsers to flood traffic to targeted websites.[1] According to the researchers at the Citizen Lab, the International Computer Science Institute, and Princeton University's Center for Information Technology Policy, who coined the term, the Great Cannon hijacks foreign web traffic intended for Chinese websites and re-purposes them to flood targeted web servers with enormous amounts of traffic in an attempt to disrupt their operations. While it is co-located with the Great Firewall, the Great Cannon is "a separate offensive system, with different capabilities and design."[2]

Besides launching denial-of-service attacks, the tool is also capable of monitoring web traffic[3] and distributing malware in targeted attacks in ways that are similar to the Quantum Insert system used by the U.S. National Security Agency.[4]

Mechanism

The Great Cannon hijacks insecure traffic inbound to servers within the Great Firewall, and injects JavaScript that redirects that traffic to the target.[5] These attacks fail when websites have HTTPS encryption.[6]

Known uses

The first known targets of the Great Cannon (in late March 2015) were websites hosting censorship-evading tools, including GitHub, a web-based code hosting service, and GreatFire, a service monitoring blocked websites in China.[7]

In 2017, the Great Cannon was used to attack the Mingjing News website.

, the Great Cannon was being used to attempt to take down the Hong Kong-based LIHKG online forum, even though the Basic Law of Hong Kong clearly states that Hong Kong's internet is the affairs of Hong Kong and Hong Kong only.[8]

Reaction

Quartz reported that the 2015 GitHub attack caused "severe" political problems for China, including the United States Department of State viewing it as "an attack against US infrastructure".[9]

See also

Notes and References

  1. Web site: China Is Said to Use Powerful New Weapon to Censor Internet . The New York Times . April 10, 2015 . April 10, 2015 . Perlroth . Nicole . https://web.archive.org/web/20150411005836/http://www.nytimes.com/2015/04/11/technology/china-is-said-to-use-powerful-new-weapon-to-censor-internet.html . April 11, 2015 . live .
  2. China's Great Cannon . Munk School of Global Affairs, University of Toronto, Canada . The Citizen Lab . April 10, 2015 . April 10, 2015 . Marczak . Bill . Weaver . Nicolas . Dalek . Jakub . Ensafi . Roya . Fifield . David . McKune . Sarah . Rey . Arn . Scott-Railton . John . Deibert . Ronald . Paxson . Vern . https://web.archive.org/web/20150410155140/https://citizenlab.org/2015/04/chinas-great-cannon/ . April 10, 2015 . live .
  3. Web site: The 'Great Cannon' is China's Powerful New Hacking Weapon . Vice Media LLC . Motherboard - Vice . April 10, 2015 . April 10, 2015 . Franceschi-Bicchierai . Lorenzo . https://web.archive.org/web/20150412184817/http://motherboard.vice.com/read/the-great-cannon-is-chinas-powerful-new-hacking-weapon . April 12, 2015 . live .
  4. Web site: China's 'Great Cannon' Lets Internet Censors Hack Sites Abroad – Just Ask GitHub . IBT Media Inc. . International Business Times . April 10, 2015 . April 10, 2015 . Stone . Jeff . https://web.archive.org/web/20150410220214/http://www.ibtimes.com/chinas-great-cannon-lets-internet-censors-hack-sites-abroad-just-ask-github-1877180 . April 10, 2015 . live .
  5. 2015-04-10. China's Great Cannon. 2020-06-30. The Citizen Lab. en-US. Marczak . Bill . Weaver . Nicholas . Dalek . Jakub . Ensafi . Roya . Fifield . David . McKune . Sarah . Rey . Arn . Scott-Railton . John . Deibert . Ron . Paxson . Vern .
  6. Web site: Don't Be Fodder for China's 'Great Cannon' — Krebs on Security. 10 April 2015 . 2020-06-30. en-US.
  7. News: China deploys new weapon for online censorship in form of 'Great Cannon' . The Washington Post . April 10, 2015 . April 10, 2015 . Peterson . Andrea . https://web.archive.org/web/20150417191136/http://www.washingtonpost.com/blogs/the-switch/wp/2015/04/10/china-escalates-censorship-efforts-with-debut-of-offensive-cyber-weapon-researchers-say/ . April 17, 2015 . live .
  8. Web site: The "Great Cannon" has been deployed again. Doman. Chris. 2019-12-04. AT&T Cybersecurty blog. live. https://web.archive.org/web/20191206074255/https://cybersecurity.att.com/blogs/labs-research/the-great-cannon-has-been-deployed-again. 2019-12-06. 2019-12-06.
  9. Web site: China's fierce censors try a new tactic with GitHub—asking nicely. 28 June 2016 .

This article is licensed under the GNU Free Documentation License. It uses material from the Wikipedia article "Great Cannon".

Except where otherwise indicated, Everything.Explained.Today is © Copyright 2009-2024, A B Cryer, All Rights Reserved. Cookie policy.