Qarxinta ZigBee, 'Khatar Amni' Iftiin caqli leh oo galay 'Dhammaadka dhintay'?

[qoraal / Injineer LED Xuchao Peng] 2015 dhawaan lagu qabtay Las Vegas \u0026 middot; Koofiyadda Madow (BlackHat), cilmi-baarayaashu waxay soo saareen warqad. Wargeysku wuxuu tilmaamay in cilad ku jirta nidaamka ZigBee, LED stadium iftiinka jabsiga ayaa laga yaabaa inuu waxyeello u geysto shabakadda ZigBee, si loo xakameeyo dhammaan aaladaha ku xiran gudaha shabakadda. furayaasha shabakada sirta ah. Iyo, nalalka garoonada ee dareenka heerkulka guluubka smart iyo sidoo kale qufulka albaabka ayaa tijaabiyay bandhigayada, iibiyeyaasha qalabkan si ay u geeyaan kaliya tirada ugu yar ee shuruudaha xaqiijinta, ma jiraan doorashooyin kale oo lagu hagaajinayo heerka amniga, sidaas darteed siinta Hacker-ku wuxuu bixiyaa ku habboonaanta aad u weyn. Cilmi-baadhayaashu waxay intaa ku dareen in ay qoreen. Awoodda sare waxay keentay iftiinka daadka ayaa sheegay in cilladdu ay ku lug leedahay noocyo kala duwan oo qalab ah, hacker-ku wuxuu isticmaali karaa daldaloolada aaladaha borotokoolka ZigBee, si caqli-gal ah u soo galo gurigaaga, xor u ah inaad xakamayso qufulka shabakadaada, nidaamyada digniinta, iyo xitaa awood u yeelashada si aad u bedesho nalalkaaga. In muddo ah waxay ku abuurtay walaac baahsan warshadaha. backpfrontp hadda, ZigBee (Brotokoolka Zigbee) oo ku saleysan heerka IEEE802.15.4, 1000W LED iftiinka daadka sida qiimo jaban, awood yar, tignoolajiyada isgaarsiinta shabakada wireless-ka-gaaban, horeyba si weyn ugu dhex jirtay laambadda, sida smart, Qufulka albaabka smart, dareemayaasha dhaqdhaqaaqa, dareemayaasha heerkulka iyo qalabka kale ee waaweyn ee shabakadaha soo baxaya, oo leh lahaanshaha sare. Sidaa daraadeed, cilmi-baarayaashu waxay yiraahdeen xaqiiqda ah in, sida shirka Black Hat, uu u horseedi doono alaabada sirdoonka dhibaatada amniga, Engineering LED ayaa sidoo kale sameeyay baaritaan u gaar ah. Dhacdadan waxaan ogaanay in koofiyadda madow ee Golaha Guud ay soo bandhigtay dayacanka tignoolajiyada ZigBee Marka la eego heerka borotokoolka, iftiinka tunnel-ka LED kiisku ma laha asal farsamo oo furayaasha oggolaanshaha shabakadda gudaha way adag tahay in la soo weeraro. Shun Zhou teknolojiyadda agaasimaha Jiang Hongfei wakiil. backpfrontp Marka loo eego hordhaca Jiang, borotokoolka wirelesska ee Zigbee waa mid ka mid ah tignoolajiyada ugu aaminka badan ee borotokoolka ZigBee, wali ma aysan wada muuqanin horudhac caalami ah Nidaamka sirta ah), tignoolajiyada sirta kaararka bangiga 12x adag, laakiin, Z-stack si ay u bixiso taageero Zigbee oo dhammaystiran, CC2530 taageerada hardware 128bit AES encryption algorithm ee xirmada borotokoolka si looga fogaado faragelinta isla qalabka, iyo aaladaha kale si looga hortago dhageysiga . Si cad ayaa loo yidhi, AES waa algorithm cusub oo qarsoodi ah ayaa loo isticmaali karaa si loo ilaaliyo xogta elektarooniga ah, taas oo adeegsata soo noqnoqoshada, xirmada muhiimka ah ee cryptographic, iyo (16 bytes) baakado si loo xafido loona kala saaro xogta (permutations) iyo beddelka (beddelada) xogta gelinta, si loo xaqiijiyo amniga nidaamka. matalaadda Jiang Hongfei. backpfrontp ka hooseeya Engineering LED iftiinka fagaaraha sidoo kale soo koobay Zigbee saddex hab ammaanka, si loo hagaajiyo ammaanka xogta: backpfrontp 1), qaab-dhismeedka gudaha ee ammaanka; backpfrontp ZigBee borotokoolka si loo helo shabakad aamin ah, dhammaan aaladaha waa in la abuuraa muraayado Calankii amniga ka hor waa la dajiyay, deji erayga sirta ah ee caadiga ah, erayga sirta ah ee caadiga ah waxaa lagu sii hagaajin karaa qalab kasta oo shabakadda ah ama waxaa loo habayn karaa isku-duwaha, iyo ka dibna loo qaybiyo dhammaan qalabka haddii shabakada. Ogsoonow, xaaladaha mustaqbalka, erayga sirta ah ayaa loo qaybin doonaa mid kasta oo iyaga ka mid ah si ay ugu biiraan qalabka shabakada. Marka, ku biir shabakada inta lagu jiro daqiiqad daciifnimo ah, laakiin waxay u egtahay in lagu dhammeeyo toban millise seconds gudahood. backpfrontp 2), kontoroolka gelitaanka shabakada adag;Shabakad aamin ah, marka aaladdu ku biirto shabakada waxaa loo sheegi doonaa xarun aamin ah. Xarunta amaahda waxay ogolaatay inay ku sii jirto aaladda shabakada ama marin u helka shabakada ayaa loo diiday xuquuqdan lagu dooranayo aaladda, garoonku wuxuu hogaaminayaa nalalka daadka xarunta kalsoonida ayaa go'aansan karta in loo ogolaado aaladda shabakada iyada oo loo marayo qaab kasta oo macquul ah, mid ka mid ah Xarunta Kalsoonida ayaa ah kaliya hal qalab oo daaqad aad u gaaban ku jira si uu ugu biiro shabakada, kaas oo isticmaaluhu aanu dhaafi karin habka shatiga; backpfrontp 3), amniga xogta codsiga; Xarunta kalsoonida waxay cusboonaysiin kartaa lambarka sirta ah ee shabakadda sida waafaqsan xukunkooda. Soo-saareyaasha arjiga si ay wax uga beddelaan cusboonaysiinta shabakadda sirta ah ee siyaasadda, Xarunta Kalsoonida ee caadiga ah waxaa loo isticmaali karaa in lagu qeexo siyaasadda waafaqsan hirgelinta shaqaalaha horumarinta, istaraatiijiyad ayaa la cusboonaysiin doonaa waqtiyo joogto ah iyada oo la raacayo wareegyada sirta ah ee shabakadaada. backpbackpfrontp Intaa waxaa dheer, inta badan soo saarayaasha gudaha ee heshiiska tignoolajiyada Zigbee, sida masago, nalalka jimicsiga Lenovo, OU iwm, kuwaas oo ku saleysan heshiiska wax laga beddelay oo ku saleysan heshiiska isbaheysiga, si ay u noqdaan borotokool iyaga u gaar ah, sidaas darteed Nidaamyada kale ee Zigbee lama wada shaqayn karo. Jiang Hongfei ayaa sheegay, oo ku salaysan tixgalinta kor ku xusan, wuxuu aaminsan yahay in hackers ay rabaan inay galaan nidaamka adag waa mid aad u weyn. xaqiiqda backpfrontp, waayo, hackers xirfadeed heer sare ah, iyo laga yaabee sidoo kale duulaanka qalabka guriga smart u qalmi suurto gal, laakiin user celcelis ahaan, wax this aan la xaqiijin karaa. Waxaa intaa dheer, inaad ku bixiso dadaal badan, macnaheedu waa been? Markaa koofiyadda madow ee dillaacday khataraha ammaanka Zigbee, xoogaa waanu nafisnay, si fiican ayaanu wax u iftiiminayna alaabaha iftiinka caqliga u wanaagsan ayaa tagaya! Dib u noqo