ZigBee Guturika, 'Umutekano Wumutekano' Kumurika Ubwenge muri 'Iherezo ryapfuye'?

[inyandiko / Ubwubatsi LED Xuchao Peng] 2015 iherutse kubera i Las Vegas \ u0026 middot; Black Hat (BlackHat), abashakashatsi basohoye impapuro. Uru rupapuro rwerekanye ko inenge iri muri protocole ya ZigBee, sitade ya LED yaka umuhigi bishobora kwangiza umuyoboro wa ZigBee, kugirango ubashe kugenzura ibikoresho byose bihujwe murusobe.Iyi ntege nke irakomeye, kuko umutekano wigisubizo uterwa rwose kumurongo urufunguzo rwibanga. Kandi, amatara ya stade avuye kumashanyarazi yubushyuhe bwubwenge kimwe no gufunga urugi byagerageje kwerekana, abacuruza ibyo bikoresho kugirango bakoreshe gusa umubare muto wibisabwa kugirango hemezwe, ntayindi nzira yo kuzamura urwego rwumutekano, bityo bigatanga hacker itanga ibintu byiza cyane. Abashakashatsi bongeyeho banditse. guhindura amatara yawe. Mu gihe runaka byateje impungenge mu nganda. backpfrontp ihari, ZigBee (protocole ya Zigbee) ishingiye kuri IEEE802.15.4 isanzwe, 1000W LED itara ryumwuzure nkigiciro gito, gifite ingufu nkeya, imiyoboro mito mito itumanaho rya terefone, isanzwe igaragara mumatara, nkubwenge, urugi rwubwenge rufunga, ibyuma byerekana, ibyuma byubushyuhe nibindi bikoresho binini bigenda bigaragara, kandi bifite nyirubwite. Abashakashatsi rero bavuze ko kuba niba, nk'inama ya Black Hat, bizatera ibicuruzwa by’ubutasi by’umutekano, Engineering LED nayo yakoze iperereza ryayo bwite. Iki gikorwa twabonye ko ingofero y’umukara ku Nteko rusange yagaragazaga intege nke z’ikoranabuhanga rya ZigBee. murwego rwa protocole, urumuri rwa LED urumuri urubanza ntirufite tekiniki ya tekiniki kandi urufunguzo rwimbere rwimbere urufunguzo rutoroshye. Shun Zhou umuyobozi wibicuruzwa byikoranabuhanga Jiang Hongfei uhagarariye. backpfrontp Nkuko byatangajwe na Jiang, protocole ya Zigbee nimwe mu buhanga bwizewe kuri protokole ya ZigBee, ntabwo iragaragara hamwe hamwe n’icyitegererezo cy’isi yose. Gutanga urumuri rwa LED bay yamenyeshejwe, umutekano wa Zigbee kubera igishushanyo mbonera cyacyo, ukoresha ibanga rya AES (Advanced Encryption Sisitemu), ikorana buhanga rya 12x ikarita yububiko bwa banki, ariko, Z-stack kugirango itange inkunga yuzuye ya Zigbee, ibyuma bya CC2530 bishyigikira 128bit AES encryption algorithm muri protocole murwego rwo kwirinda kwivanga mubikoresho bimwe, nibindi bikoresho kugirango birinde gutega amatwi . Byumvikane neza, AES ni uburyo bushya bwo gushishoza algorithm irashobora gukoreshwa mukurinda amakuru ya elegitoroniki, ikoresha itera, ifatanyiriza hamwe urufunguzo rwibanga, hamwe na (16 bytes) paki kugirango uhishe kandi uhishure amakuru 128. Ikoresha imiterere yumuzingi muriyi nzitizi isubirwamo kenshi. (permutations) no gusimbuza (insimburangingo) amakuru yinjiza, kugirango tumenye umutekano wa sisitemu. Guhagararira Jiang Hongfei. backpfrontp munsi yubuhanga LED arena urumuri rwanagaragaje muri make Zigbee uburyo butatu bwumutekano, murwego rwo kunoza umutekano wamakuru: backpfrontp 1), imiterere yimbere yumutekano; backpfrontp ZigBee protocole kugirango ugire umuyoboro utekanye, ibikoresho byose bigomba kuremwa indorerwamo Ibendera ryumutekano mbere yumutekano rirashoboka, shiraho ijambo ryibanga risanzwe, ijambo ryibanga risanzwe rishobora kubanzirizwa kuri buri gikoresho kuri neti cyangwa kugashyirwaho gusa nu muhuzabikorwa, kandi hanyuma ikwirakwizwa mubikoresho byose niba umuyoboro. Menya ko, mugihe kizaza, ijambo ryibanga rizagabanywa buriwese kugirango yinjire mubikoresho byurusobe. Noneho, shyira kumurongo mugihe gito cyintege nke ziba, ariko ikunda kurangira muri milisegonda icumi. backpfrontp 2), kugenzura imiyoboro igoye; Mumuyoboro utekanye, mugihe igikoresho cyinjiye murusobe bazabwirwa ko ikigo cyizere. Ikigo cy’inguzanyo cyemereye kuguma mu gikoresho cy’urusobe cyangwa kwinjira mu muyoboro byangiwe ubwo burenganzira bwo guhitamo igikoresho, amatara ayobowe na stade yerekana amatara ikigo cyizera gishobora guhitamo niba kwemerera igikoresho mu muyoboro binyuze mu buryo ubwo ari bwo bwose bwumvikana, kimwe mu Kigo cyiringirwa ni gusa igikoresho kimwe mugihe gito cyane cyamadirishya kugirango yinjire murusobe, uyikoresha ntashobora kurenga inzira yimpushya; backpfrontp 3), umutekano wamakuru wo gusaba; ikigo cyizere gishobora kuvugurura ijambo ryibanga ukurikije uko babibona. Abategura porogaramu kugirango bahindure ijambo ryibanga ryibanga rya enterineti, isanzwe yiringirwa irashobora gukoreshwa mugusobanura politiki ijyanye nishyirwa mubikorwa ryabakozi bashinzwe iterambere, ingamba zizajya zivugururwa mugihe gisanzwe ukurikije ijambo ryibanga ryurusobe. inyuma ubundi buryo bwa Zigbee ntibushobora gukorana. Jiang Hongfei yavuze, ashingiye ku bitekerezo byavuzwe haruguru, yizera ko ba hackers bashaka kwinjira muri sisitemu igoye ari nini cyane. backpfrontp fact, kubantu bafite ubuhanga buhanitse ba hackers, kandi birashoboka ko no gutera ibikoresho byurugo byubwenge bidashoboka, ariko kubakoresha bisanzwe, iki kintu ntigishobora kugerwaho. Byongeye, gukoresha imbaraga nyinshi, bisobanura kubeshya? Kuri Black Hat rero yaturika Zigbee ibyago byumutekano, turaruhuka gato, nibyiza gukora ibicuruzwa byiza byo kumurika ubwenge bigenda! Inyuma