Ho phatloha ha ZigBee, 'Kotsi ea Tšireletseho' Ho khantša ka bohlale ho ba "Qetellong e shoeleng"?

[mongolo / Boenjiniere ba LED Xuchao Peng] 2015 e sa tsoa tšoaroa Las Vegas \u0026 middot; Black Hat (BlackHat), bafuputsi ba ile ba lokolla pampiri. Pampiri e ile ea bontša hore phoso ea protocol ea ZigBee, lebala la lipapali la LED le khantša mohatelli e ka 'na ea senya marang-rang a ZigBee, e le ho fumana taolo ea lisebelisoa tsohle tse hokahaneng ka har'a marang-rang. lekunutu la linotlolo tsa marang-rang. 'Me, mabone a lebaleng a tsoang ho sensor ea mocheso oa bulb e bohlale hammoho le senotlolo sa lemati a ile a leka pontšo ea rona, barekisi ba lisebelisoa tsena ho fana ka palo e fokolang feela ea litlhoko tsa ho netefatsa, ha ho na mekhoa e meng ea ho ntlafatsa boemo ba ts'ireletso, kahoo ho fana ka Hacker e fana ka bonolo haholo Great. Bafuputsi ba ile ba phaella ka ho ngola.Mabone a matla a phahameng a led moroallo o ile a tlaleha hore sekoli se kenyelletsa mefuta e sa tšoaneng ea lisebelisoa, mohatelli a ka sebelisa likheo tsa lisebelisoa tsa protocol tsa ZigBee, bohlale ba hlasela ntlo ea hau, ba lokolohile ho laola liloko tsa marang-rang, lisebelisoa tsa alamo, esita le ho khona. ho fetola mabone a hau. Ka nako e itseng e ile ea baka kameho e atileng indastering. backpfrontp e teng, ZigBee (Zigbee protocol) e thehiloeng ho IEEE802.15.4 standard, 1000W LED moroallo leseli e le theko e tlaase, matla a tlaase, theknoloji ea puisano ea marang-rang e se nang mohala, e seng e ntse e le teng ka bongata leboneng, joalo ka bohlale, liloko tse bohlale tsa mamati, lisensara tsa motsamao, lisensara tsa mocheso le lisebelisoa tse ling tse kholo tse hlahang tsa marang-rang, 'me li na le thepa e phahameng. Kahoo, bafuputsi ba boletse 'nete ea hore na, joalo ka seboka sa Black Hat, se tla lebisa ho ts'ireletso ea ts'ireletso lihlahisoa tsa bohlale, Engineering LED le eona e ile ea etsa lipatlisiso tsa eona.Ketsahalo ena re hlokometse hore katiba e ntšo ho Seboka se Akaretsang e behiloe ka bofokoli ba theknoloji ea ZigBee. maemong a protocol, khanya ea kotopo ea LED kesi ha e na nalane ea tekheniki mme ho thata ho hlasela linotlolo tsa tumello ea marang-rang. Motsamaisi oa lihlahisoa tsa theknoloji ea Shun Zhou, moemeli oa Jiang Hongfei. backpfrontp Ho latela selelekela sa Jiang, Zigbee wireless protocol ke e 'ngoe ea thekenoloji e sireletsehileng ka ho fetesisa ea ZigBee protocol, ha e so hlahe mmoho precedent ea lefats'e. Sistimi ea Encryption), tekhenoloji e thata ea karete ea banka ea 12x, empa, Z-stack ho fana ka ts'ehetso e felletseng ea Zigbee, CC2530 hardware e tšehetsa 128bit AES encryption algorithm ho protocol stack e le ho qoba ho kena-kenana le lisebelisoa tse tšoanang, le lisebelisoa tse ling ho thibela ho mamela. . Ho hlakile o ile a re, AES ke e ntjha taetsitshireletso algorithm e ka sebelisoa ho sireletsa ya data elektronike, e sebelisang iterative, symmetric key cryptographic pakete, le (16 bytes) lipakete ho encrypt le decrypt ya data 128. E sebelisa sebopeho sekgoqetsane ka potoloho ena e pheta-pheta displacement. (litumello) le ho nkela sebaka (li-substitutes) data ea ho kenya, e le ho netefatsa ts'ireletso ea sistimi. Boemeli ba Jiang Hongfei. backpfrontp e ka tlase Boenjiniere ba Lebone la Lebala la LED le ile la akaretsa Zigbee mekhoa e meraro ea ts'ireletso, e le ho ntlafatsa ts'ireletso ea data: backpfrontp 1), mohaho oa ka hare oa tšireletso; Backpfrontp ZigBee protocol e le hore ho be le marang-rang a sireletsehileng, lisebelisoa tsohle li tlameha ho etsoa liipone Folakha ea pele ho ts'ireletso e nolofalitsoe, beha phasewete ea kamehla, password ea kamehla e ka lokisoa esale pele ho sesebelisoa se seng le se seng sa marang-rang kapa ho hlophisoa feela ho mohokahanyi, le ebe e ajoa ho lisebelisoa tsohle haeba marang-rang. Hlokomela hore, maemong a tlang, phasewete e tla abeloa e mong le e mong oa bona hore a kopanele thepa ea marang-rang. Kahoo, ikopanye le marang-rang nakong ea nako ea bofokoli e fetoha, empa e atisa ho phethoa ka har'a li-milliseconds tse leshome. backpfrontp 2), taolo e thata ea phihlello ea marang-rang;Ka marang-rang a sireletsehileng, ha sesebelisoa se kenella marang-rang se tla bolelloa hore setsi sa trust. Setsi sa mokoloto se lumelletse ho lula sesebelisoa sa marang-rang kapa phihlello ea marang-rang e haneloa tokelo ena ea ho khetha sesebelisoa, letoto la lebala la lipapali le mabone setsi sa trust se ka etsa qeto ea hore na ho lumella sesebelisoa ho kena marang-rang ka tsela efe kapa efe e utloahalang, e 'ngoe ea Setsi sa Tšepo ke feela. sesebelisoa se le seng ka nako e khuts'oane haholo ea fensetere ho kenella marang-rang, ao mosebelisi a ke keng a feta ts'ebetso ea laesense; backpfrontp 3), tshireletso ya data ya kopo; trust center e ka ntlafatsa phasewete ea marang-rang ho latela kahlolo ea bona. Basebelisi ba kopo ea ho fetola phasewete ea marang-rang ea ntlafatso, Setsi sa Ts'epo sa kamehla se ka sebelisoa ho totobatsa pholisi e tsamaellanang le ts'ebetsong ea basebetsi ba nts'etsopele, leano le tla ntlafatsoa nako le nako ho latela lipotoloho tsa password tsa marang-rang. backpbackpfrontp Ho phaella moo, boholo ba bahlahisi ba malapeng ba tumellano ea theknoloji ea Zigbee, joalo ka nyalothe, mabone a boikoetliso ba Lenovo, OU joalo-joalo, tse thehiloeng tumellanong e fetotsoeng motheong oa tumellano ea koporasi, hore e be protocol ea bona ea thepa, kahoo le Litsamaiso tse ling tsa Zigbee ha li sebelisane. Jiang Hongfei o boletse, ho latela lintlha tse kaholimo, o lumela hore barekisi ba batla ho kena tsamaisong ea mathata e kholo haholo. 'nete ea backpfrontp, bakeng sa linokoane tsa litsebi tse tsoetseng pele haholo, mohlomong le tlhaselo ea lisebelisoa tse bohlale tsa lapeng tse ka bang teng, empa ho mosebelisi ea tloaelehileng, ntho ena e ke ke ea phethahala. Ho feta moo, ho qeta boiteko bo bongata hakaale, ho bolela leshano? Kahoo bakeng sa "Black Hat" e phatlohileng likotsi tsa ts'ireletso ea Zigbee, re phomola hanyane, re etsa lihlahisoa tse bohlale tsa mabone hantle! Mokokotlo