關鍵安全是物聯網應用安全的基礎

2453872 2017-05-12 | rar | 0.73 MB | 次下載 | 免費

資料介紹

關鍵安全是物聯網應用安全的基礎

　　物聯網設備是一種非常脆弱的目標不好的演員因為物理安全–最安全的政策–關鍵一般是不可能實現的物聯網應用。由于工程師們希望鎖定物聯網設計，安全機制，如加密和身份驗證通常得到的關注。然而，沒有強大的密鑰安全，即使是最全面的安全策略可能會成為妥協。使用設計技術和專用集成電路的安全密鑰管理相結合，設計人員可以建立更大的安全為物聯網應用程序的基礎。

　　物聯網設備甚至缺乏可疑的保護，得到傳統的互聯網應用。雖然基于Web的應用程序的資產可以依賴于與生產數據中心相關的物理安全的一些措施，物聯網應用程序依賴于大量的物理設備的分散，往往在易訪問的，未受保護的位置。因此，壞演員可以輕松地獲得這些設備和工作在他們的休閑。

　　In fact， successful attacks on conventional connected applications are less likely to come from direct penetration and more likely to arise from social hacking or zero-day exploits such as Heartbleed. In contrast， IoT devices are less exposed to social-based exploits than traditional Web-based applications， but their physical exposure offers opportunities for more direct attacks.

　　Silicon manufacturers can protect devices from sophisticated attacks such as differential power analysis. In addition， manufacturers can implement hardware-based security measures that make the cost in time and resources of successful penetration outweigh the likely benefit. For the IoT， a greater threat vector lies in breakdowns in protection of cryptography keys arising from storing keys in unsecured memory， transferring key values across easily accessible hardware interfaces， or even deriving key values created using “random” number generators with predictable patterns.