GhostNet (simplified Chinese: 幽灵网; traditional Chinese: 幽靈網; pinyin: YōuLíngWǎng) is the name given by researchers at the Information Warfare Monitor to a large-scale cyber spying operation discovered in March 2009. The operation is likely associated with an advanced persistent threat, or a network actor that spies undetected. Its command and control…
Use the mouse wheel or two fingers (on touchscreens) to zoom in and out of the map.
More settings
GhostNet topic overview
The analysis highlights Discovery, Origin and Technical functionality as prominent areas in the source structure around GhostNet.
Related topics
53
Source areas
4
Connected nodes
57
Extracted relationships
101
Concept neighborhoods
21
Bridge connections
57
What this topic covers Research coverage
Source areas are shown by the number of related topics found in each part of the analysis. Use smaller areas too: they can reveal specialized angles and content gaps.
Discovery · 35 topics
Overview · 10 topics
Origin · 5 topics
Technical functionality · 3 topics
Smaller areas are not necessarily less important. They contain fewer connections in this analysis and can be useful for finding specialized angles or coverage gaps.
Key facts & relationships
High-confidence facts extracted from structured source data. Use them as anchors for further research.
Explore all related topics Closing gaps
A structured outline of related entities, concepts and subtopics. Open any item to build a new map centered on it.
Browse the complete topic structure, not only the most central items. Less prominent entities and concepts can reveal missing angles, specialized context and useful research gaps. Each item opens a new analysis centered on that subject.
Deeper signals for content research, entity SEO and topical coverage. The plain-language headings explain what each technical view is useful for.
How GhostNet connects Entity context
Entity context groups extracted connections by relationship type. Counts show recurrence in the analyzed source; the examples are research signals, not claims about importance.
The extracted context around GhostNet shows recurring relationship patterns in the source. For example, GhostNet → Bangladesh, Barbados, Bhutan, Brunei, Cambridge's Computer Laboratory, Canadian, Chinese, Citizen Lab, Compromised, Cyprus, Dalai Lama's, Dharamshala, Geneva, Germany, Global Affairs, India, Indian, Indonesia, Information Infrastructure Protection, Infowar Monitor Another extracted example is GhostNet → April, Archived, Asia Times Online, Bodmer, Canada, Canada/Munk Centre, Carpenter, Cathal, Citizen Lab, Cyber Espionage Network, Cyber-skirmish, Cyberspies, F-Secure Mirror, Ghost Rat, Infowar Monitor Report, InfowarMonitorKelly, Investigating, ISBN, Jones, Kilger. Use these groups to spot repeated connection types before inspecting the individual relationships.
GhostNet
Top relations
related to Discovery· 48
GhostNet → Bangladesh, Barbados, Bhutan, Brunei, Cambridge's Computer Laboratory, Canadian, Chinese, Citizen Lab, Compromised, Cyprus, Dalai Lama's, Dharamshala, Geneva, Germany, Global Affairs, India, Indian, Indonesia, Information Infrastructure Protection, Infowar Monitor
related to External links· 39
GhostNet → April, Archived, Asia Times Online, Bodmer, Canada, Canada/Munk Centre, Carpenter, Cathal, Citizen Lab, Cyber Espionage Network, Cyber-skirmish, Cyberspies, F-Secure Mirror, Ghost Rat, Infowar Monitor Report, InfowarMonitorKelly, Investigating, ISBN, Jones, Kilger
related to Origin· 13
GhostNet → Cambridge, China, Chinese, Dalai Lama, However, IWM, Office, Researchers, Russia, The, The Chinese, United States, University
Important terminology
Frequent words and multi-word phrases across the lead, headings, infobox and body. Useful for terminology coverage.
Use these terms to understand the vocabulary surrounding the topic, not as a checklist for keyword stuffing.
Relationships are represented as Subject → Predicate → Object triples. Confidence describes extraction strength, not the real-world importance of a relationship; lower-confidence rows may be contextual rather than explicit.
TTTA extracted 101 structured relationships around GhostNet. Examples in this analysis include Russia or the United States → instance of → or created by intelligence agencies from other countries and GhostNet → related to Discovery → Infowar Monitor. The table shows each extracted connection, where it came from and its confidence.
Subject
Predicate
Object
Confidence
Src
Russia or the United States
instance of
or created by intelligence agencies from other countries
0.80
text
GhostNet
related to Discovery
Infowar Monitor
0.60
section
GhostNet
related to Discovery
IWM
0.60
section
GhostNet
related to Discovery
Dalai Lama's
0.60
section
GhostNet
related to Discovery
Geneva
0.60
section
GhostNet
related to Discovery
The IWM
0.60
section
GhostNet
related to Discovery
The SecDev Group
0.60
section
GhostNet
related to Discovery
Canadian
0.60
section
GhostNet
related to Discovery
Citizen Lab
0.60
section
GhostNet
related to Discovery
Munk School
0.60
section
GhostNet
related to Discovery
Global Affairs
0.60
section
GhostNet
related to Discovery
University
0.60
section
No triples extracted yet.
Related concept clusters Concept neighborhoods
Concept neighborhoods group terms that sit near one another in the extracted graph. They are useful for discovering adjacent language and context, but proximity does not by itself imply a factual relationship.
The concept neighborhoods around GhostNet bring nearby vocabulary together. In this analysis, examples include China, Cyber and Intelligence. Use the clusters to find adjacent concepts and terminology that may deserve separate research.
GhostNet
China
Cyber
Intelligence
Monitor
Operation
Researchers
Also
Government
Discovered
Discovery
Infiltrated
Infowar
ghostnet
China
Cyber
Intelligence
Monitor
Operation
Researchers
Also
Government
Discovered
Discovery
Infiltrated
Infowar
simplified chinese
Government
Researchers
Cyber
Report
Information
University
China
Ghostnet
March
Found
Intelligence
Monitor
traditional chinese
Government
Researchers
Cyber
Report
Information
University
China
Ghostnet
March
Found
Intelligence
Monitor
information warfare monitor
Infowar
March
Network
Operation
Toronto
Researchers
Dalai
Monitor
One
University
Iwm
Computer
people's republic of china
Ghostnet
Intelligence
Control
Located
Cyber
Operation
Report
Server
Also
University
Chinese
Government
dalai lama
Infowar
Government
Monitor
Network
One
Report
University
Ghostnet
Embassies
India
Researchers
Discovered
university of toronto
Infowar
Monitor
One
Report
Toronto
University
Researchers
Dalai
Information
Chinese
China
Government
Connections between topic areas Semantic bridges
Semantic bridges connect parts of the graph that would otherwise be more separate. A bridge is a structural signal in this analysis, not a claim that the two topic areas are equivalent.
For GhostNet, one of the stronger structural bridges in this analysis connects GhostNet with Discovery. Bridges highlight paths between different parts of the map and can reveal research angles that are easy to miss in a flat list.
Number of nodes, edges, triples, density and central hubs. Use it to gauge the size and connectivity of the map.
GhostNet
Nodes58
Edges57
Triples101
Avg. degree1.97
Density0.034483
Components1
Source & methodology
TTTA analyzes the structure around GhostNet to surface related topics, entities, relationships, concept neighborhoods and bridge connections. Use the map to explore areas such as Discovery, Origin & Technical functionality, including less central topics that may reveal useful research gaps. Automatically extracted connections are research leads rather than rewritten encyclopedia content.
