{"id":3010,"date":"2016-07-30T04:37:41","date_gmt":"2016-07-30T08:37:41","guid":{"rendered":"https:\/\/jeremy-wu.info\/?p=3010"},"modified":"2016-07-30T04:46:11","modified_gmt":"2016-07-30T08:46:11","slug":"doj201606-002","status":"publish","type":"post","link":"https:\/\/jeremy-wu.info\/?p=3010","title":{"rendered":"DOJ201606-002"},"content":{"rendered":"
\n
\n
\n
\n<\/p>\n
\n

Theft Of Valuable Source Code<\/span><\/h4>

On June 14, 2016, Jiaqiang Xu was charged in the Southern District of New York in a six-count superseding indictment with economic espionage and theft of trade secrets, in connection with Xu\u2019s theft of proprietary source code from his former employer, with the intent to benefit the National Health and Family Planning Commission of the People\u2019s Republic of China. Xu was initially arrested by the FBI on Dec. 7, 2015, and was previously charged on Jan. 6, 2016 by indictment with one count of theft of trade secrets. According to court documents, from November 2010 to May 2014, Xu worked as a developer for a particular U.S. company (the \u201cVictim Company\u201d). As a developer, Xu enjoyed access to certain proprietary software (the \u201cProprietary Software\u201d), as well as that software\u2019s underlying source code (the \u201cProprietary Source Code\u201d). The Proprietary Software is a clustered file system developed and marketed by the Victim Company in the U.S. and other countries. A clustered file system facilitates faster computer performance by coordinating work among multiple servers. The Victim Company takes significant precautions to protect the Proprietary Source Code as a trade secret. Among other things, the Proprietary Source Code is stored behind a company firewall and can only be accessed by a small subset of the Victim Company\u2019s employees. Before receiving Proprietary Source Code access, Victim Company employees must first request and receive approval from a particular Victim Company official. Victim Company employees must also agree in writing at both the outset and the conclusion of their employment that they will maintain the confidentiality of any proprietary information. The Victim Company takes these and other precautions in part because the Proprietary Software and the Proprietary Source Code are economically valuable, which value depends in part on the Proprietary Source Code\u2019s secrecy. In May 2014, Xu voluntarily resigned from the Victim Company. Xu subsequently communicated with one undercover law enforcement officer (\u201cUC-1\u201d), who posed as a financial investor aiming to start a large-data storage technology company, and another undercover law enforcement officer (\u201cUC-2\u201d), who posed as a project manager, working for UC-1. In these communications, Xu\u00a0discussed his past experience with the Victim Company and indicated that he had experience with the Proprietary Software and the Proprietary Source Code. On March 6, 2015, Xu sent UC-1 and UC-2 a code, which Xu stated was a sample of Xu\u2019s prior work with the Victim Company. A Victim Company employee (\u201cEmployee-1\u201d) later confirmed that the code sent by Xu included proprietary Victim Company material that related to the Proprietary Source Code. Xu subsequently informed UC-2 that Xu was willing to consider providing UC-2\u2019s company with the Proprietary Source Code as a platform for UC-2\u2019s company to facilitate the development of UC-2\u2019s company\u2019s own data storage system. Xu informed UC-2 that if UC-2 set up several computers as a small network, then Xu would remotely install the Proprietary Software so that UC-1 and UC-2 could test it and confirm its functionality. In or around early August 2015, the FBI arranged for a computer network to be set up, consistent with Xu\u2019s specifications. Files were then remotely uploaded to the FBI-arranged computer network (the \u201cXu Upload\u201d). Thereafter, on or about August 26, 2015, Xu and UC-2 confirmed that UC-2 had received the Xu Upload. In September 2015, the FBI made the Xu Upload available to a Victim Company employee who has expertise regarding the Proprietary Software and the Proprietary Source Code (\u201cEmployee-2\u201d). Based on Employee-2\u2019s analysis of technical features of the Xu Upload, it appeared to Employee-2 that the Xu Upload contained a functioning copy of the Proprietary Software. It further appeared to Employee-2 that the Xu Upload had been built by someone with access to the Proprietary Source Code who was not working within the Victim Company or otherwise at the Victim Company\u2019s direction. On December 7, 2015, Xu met with UC-2 at a hotel in White Plains, New York (the \u201cHotel\u201d). Xu stated, in sum and substance, that Xu had used the Proprietary Source Code to make software to sell to customers, that Xu knew the Proprietary Source Code to be the product of decades of work on the part of the Victim Company, and that Xu had used the Proprietary Source Code to build a copy of the Proprietary Software, which Xu had uploaded and installed on the UC Network (i.e., the Xu Upload). Xu also indicated that Xu knew the copy of the Proprietary Software that Xu had installed on the UC Network contained information identifying the Proprietary Software as the Victim Company\u2019s property, which could reveal the fact that the Proprietary Software had been built with the Proprietary Source Code without the Victim Company\u2019s authorization. Xu told UC-2 that Xu could take steps to prevent detection of the Proprietary Software\u2019s origins \u2013 i.e., that it had been built with stolen Proprietary Source Code \u2013 including writing computer scripts that would modify the Proprietary Source Code to conceal its origins. Later on December 7, 2015, Xu met with UC-1 and UC-2 at the Hotel. During that meeting, Xu showed UC-2 a copy of what Xu represented to be the Proprietary Source Code on Xu\u2019s laptop. Xu noted to UC-2 a portion of the code that indicated it originated with the Victim Company as well as the date on which it had been copyrighted. Xu also stated that Xu had previously modified the Proprietary Source Code\u2019s command interface to conceal the fact that the Proprietary Source Code originated with the Victim Company and identified multiple specific customers to whom Xu had previously provided the Proprietary Software using Xu\u2019s stolen copy of the Proprietary Source Code. This case was investigated by the FBI.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Theft Of Valuable Source CodeOn June 14, 2016, Jiaqiang Xu was charged in the Southern District of New York in a six-count superseding indictment with economic espionage and theft of […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[106],"tags":[],"class_list":["post-3010","post","type-post","status-publish","format-standard","hentry","category-nsd201606"],"_links":{"self":[{"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=\/wp\/v2\/posts\/3010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3010"}],"version-history":[{"count":4,"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=\/wp\/v2\/posts\/3010\/revisions"}],"predecessor-version":[{"id":3016,"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=\/wp\/v2\/posts\/3010\/revisions\/3016"}],"wp:attachment":[{"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3010"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3010"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jeremy-wu.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}