{"id":40585,"date":"2020-02-02T10:38:22","date_gmt":"2020-02-02T07:38:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimosti-setej-5g"},"modified":"2020-02-02T10:38:22","modified_gmt":"2020-02-02T07:38:22","slug":"uyazvimosti-setej-5g","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/uyazvimosti-setej-5g","title":{"rendered":"Zranitelnosti s\u00edt\u00ed 5G","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/656548e68c974d920250349994b24721.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<i>Zat\u00edmco nad\u0161enci netrp\u011bliv\u011b o\u010dek\u00e1vaj\u00ed masov\u00e9 nasazen\u00ed s\u00edt\u00ed p\u00e1t\u00e9 generace, kyberzlo\u010dinci si mnou ruce a t\u011b\u0161\u00ed se na nov\u00e9 p\u0159\u00edle\u017eitosti k zisku. Navzdory ve\u0161ker\u00e9mu \u00fasil\u00ed v\u00fdvoj\u00e1\u0159\u016f technologie 5G obsahuje zranitelnosti, jejich\u017e odhalen\u00ed komplikuje nedostatek zku\u0161enost\u00ed v nov\u00fdch podm\u00ednk\u00e1ch. Prozkoumali jsme malou 5G s\u00ed\u0165 a odhalili t\u0159i typy zranitelnost\u00ed, o kter\u00fdch si pov\u00edme v tomto p\u0159\u00edsp\u011bvku. <\/i><br \/>\n <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>P\u0159edm\u011bt zkoum\u00e1n\u00ed<\/h3>\n<p>\nZva\u017eme nejjednodu\u0161\u0161\u00ed p\u0159\u00edklad \u2014 modelovou nepublikovanou 5G s\u00ed\u0165 vysoko\u0161kolsk\u00e9ho kampusu (Non-Public Network, NPN), p\u0159ipojenou k vn\u011bj\u0161\u00edmu sv\u011btu prost\u0159ednictv\u00edm ve\u0159ejn\u00fdch komunika\u010dn\u00edch kan\u00e1l\u016f. Takov\u00e9 s\u00edt\u011b budou v bl\u00edzk\u00e9 budoucnosti pou\u017e\u00edv\u00e1ny jako standardn\u00ed v v\u0161ech zem\u00edch, kter\u00e9 se zapojily do z\u00e1vodu o 5G. Potenci\u00e1ln\u00ed prost\u0159ed\u00ed nasazen\u00ed s\u00edt\u00ed takov\u00e9 konfigurace zahrnuje \"chytr\u00e9\" podniky, \"chytr\u00e9\" m\u011bsta, kancel\u00e1\u0159e velk\u00fdch firem a dal\u0161\u00ed podobn\u00e1 m\u00edsta s vysokou m\u00edrou kontrolovatelnosti. <\/p>\n<p><img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/266e447d122674db9fc694ff86b4bcdd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <i>Infrastruktura NPN: uzav\u0159en\u00e1 s\u00ed\u0165 podniku je p\u0159ipojena k glob\u00e1ln\u00ed 5G s\u00edti prost\u0159ednictv\u00edm ve\u0159ejn\u00fdch kan\u00e1l\u016f. Zdroj: Trend Micro<\/i><\/p>\n<p>Na rozd\u00edl od s\u00edt\u00ed \u010dtvrt\u00e9 generace, s\u00edt\u011b 5G jsou zam\u011b\u0159eny na zpracov\u00e1n\u00ed dat v re\u00e1ln\u00e9m \u010dase, proto jejich architektura p\u0159ipom\u00edn\u00e1 v\u00edcevrstv\u00fd dort. Rozd\u011blen\u00ed na \u00farovn\u011b umo\u017e\u0148uje zjednodu\u0161it interakci d\u00edky standardizaci API pro komunikaci mezi vrstvami.<\/p>\n<p><img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/4a6c70ab37b8a15ef32c14bba947bd65.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Srovn\u00e1n\u00ed architektur 4G a 5G. Zdroj: Trend Micro<\/i><\/p>\n<p>V\u00fdsledkem jsou zv\u00fd\u0161en\u00e9 mo\u017enosti automatizace a \u0161k\u00e1lov\u00e1n\u00ed, co\u017e je kriticky d\u016fle\u017eit\u00e9 pro zpracov\u00e1n\u00ed obrovsk\u00fdch objem\u016f informac\u00ed z internetu v\u011bc\u00ed (IoT).<br \/>\nIzolace \u00farovn\u00ed, kter\u00e1 je zakotvena ve standardu 5G, p\u0159in\u00e1\u0161\u00ed nov\u00fd probl\u00e9m: bezpe\u010dnostn\u00ed syst\u00e9my, kter\u00e9 funguj\u00ed uvnit\u0159 s\u00edt\u011b NPN, chr\u00e1n\u00ed objekt a jeho priv\u00e1tn\u00ed cloud, bezpe\u010dnostn\u00ed syst\u00e9my extern\u00edch s\u00edt\u00ed \u2014 svou intern\u00ed infrastrukturu. Provoz mezi NPN a extern\u00edmi s\u00edt\u011bmi je pova\u017eov\u00e1n za bezpe\u010dn\u00fd, proto\u017ee poch\u00e1z\u00ed z chr\u00e1n\u011bn\u00fdch syst\u00e9m\u016f, av\u0161ak fakticky ho nikdo nechr\u00e1n\u00ed. <\/p>\n<p>V na\u0161em ned\u00e1vn\u00e9m v\u00fdzkumu <noindex><a rel=\"nofollow\" href=\"https:\/\/documents.trendmicro.com\/assets\/white_papers\/wp-securing-5g-through-cyber-telecom-identity-federation.pdf\">Zabezpe\u010den\u00ed 5G prost\u0159ednictv\u00edm kyber-telekomunika\u010dn\u00ed federace identity<\/a><\/noindex> uv\u00e1d\u00edme n\u011bkolik sc\u00e9n\u00e1\u0159\u016f kybernetick\u00fdch \u00fatok\u016f na s\u00edt\u011b 5G, kter\u00e9 vyu\u017e\u00edvaj\u00ed:<\/p>\n<ul>\n<li>zranitelnosti SIM karet,<\/li>\n<li>zranitelnosti s\u00edt\u011b,<\/li>\n<li>zranitelnosti syst\u00e9mu identifikace.<\/li>\n<\/ul>\n<p>\nPod\u00edvejme se na ka\u017edou zranitelnost podrobn\u011bji. <\/p>\n<h3>Zranitelnosti SIM karet<\/h3>\n<p>\nSIM karta je slo\u017eit\u00e9 za\u0159\u00edzen\u00ed, kter\u00e9 obsahuje dokonce cel\u00fd soubor integrovan\u00fdch aplikac\u00ed \u2013 SIM Toolkit, STK. Jedn\u00edm z t\u011bchto program\u016f je S@T Browser, kter\u00fd teoreticky m\u016f\u017ee b\u00fdt pou\u017eit pro prohl\u00ed\u017een\u00ed intern\u00edch str\u00e1nek oper\u00e1tora, ale v praxi je ji\u017e d\u00e1vno zapomenut a nebyl aktualizov\u00e1n od roku 2009, proto\u017ee tyto funkce nyn\u00ed pln\u00ed jin\u00e9 programy. <\/p>\n<p>Probl\u00e9m spo\u010d\u00edv\u00e1 v tom, \u017ee S@T Browser se uk\u00e1zal b\u00fdt zraniteln\u00fdm: speci\u00e1ln\u011b p\u0159ipraven\u00e1 slu\u017eebn\u00ed SMS prolom\u00ed SIM kartu a donut\u00ed ji vykonat p\u0159\u00edkazy hackera, p\u0159i\u010dem\u017e u\u017eivatel telefonu nebo za\u0159\u00edzen\u00ed si nev\u0161imne ni\u010deho zvl\u00e1\u0161tn\u00edho. \u00datok byl nazv\u00e1n <noindex><a rel=\"nofollow\" href=\"https:\/\/simjacker.com\/downloads\/technicalpapers\/AdaptiveMobile_Security_Simjacker_Technical_Paper_v1.01.pdf\">Simjaker<\/a><\/noindex> a poskytuje \u00fato\u010dn\u00edk\u016fm \u0159adu mo\u017enost\u00ed. <\/p>\n<p><img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/d23b7f7a77838d76a881a40d721eabb7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>\u00datok Simjacking v s\u00edti 5G. Zdroj: Trend Micro<\/i><\/p>\n<p>V\u017edy\u0165 umo\u017e\u0148uje \u00fato\u010dn\u00edkovi p\u0159en\u00e9st informace o poloze p\u0159edplatitele, identifik\u00e1tor jeho za\u0159\u00edzen\u00ed (IMEI) a mobiln\u00ed vys\u00edla\u010de (Cell ID), a dokonce donutit telefon vyto\u010dit \u010d\u00edslo, odeslat SMS, otev\u0159\u00edt odkaz v prohl\u00ed\u017ee\u010di a dokonce deaktivovat SIM kartu. <\/p>\n<p>V podm\u00ednk\u00e1ch 5G s\u00edt\u00ed se tato zranitelnost SIM karet st\u00e1v\u00e1 v\u00e1\u017en\u00fdm probl\u00e9mem, vzhledem k mno\u017estv\u00ed p\u0159ipojen\u00fdch za\u0159\u00edzen\u00ed. A\u010dkoliv <noindex><a rel=\"nofollow\" href=\"https:\/\/venturebeat.com\/2018\/12\/14\/simalliance-a-new-5g-sim-card-is-necessary-to-beef-up-network-security\/\">SIMAlliance vyvinula nov\u00e9 standardy SIM karet pro 5G s vy\u0161\u0161\u00ed \u00farovn\u00ed zabezpe\u010den\u00ed<\/a><\/noindex>, v s\u00edt\u00edch p\u00e1t\u00e9 generace je st\u00e1le <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ericsson.com\/en\/blog\/2020\/1\/5g-security-sim-card\">mo\u017en\u00e9 pou\u017eit\u00ed \u201estar\u00fdch\u201c SIM karet<\/a><\/noindex>. A proto\u017ee v\u0161e funguje, nen\u00ed pravd\u011bpodobn\u00e9, \u017ee by rychl\u00e1 v\u00fdm\u011bna st\u00e1vaj\u00edc\u00edch SIM karet byla o\u010dek\u00e1van\u00e1. <\/p>\n<p><img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/208833a443e53b03c07f415476144a4b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Zneu\u017eit\u00ed roamingu. Zdroj: Trend Micro<\/i><\/p>\n<p>Pou\u017eit\u00ed Simjacking umo\u017e\u0148uje donutit SIM kartu p\u0159epnout do re\u017eimu roamingu a p\u0159ipojit se k mobiln\u00edmu vys\u00edla\u010di, kter\u00fd ovl\u00e1d\u00e1 \u00fato\u010dn\u00edk. \u00dato\u010dn\u00edk t\u00edmto z\u00edsk\u00e1 mo\u017enost upravit nastaven\u00ed SIM karty, aby odposlouch\u00e1val telefonn\u00ed hovory, vkl\u00e1dal malware a prov\u00e1d\u011bl r\u016fzn\u00e9 typy \u00fatok\u016f za pou\u017eit\u00ed za\u0159\u00edzen\u00ed obsahuj\u00edc\u00edho prolomenou SIM kartu. To mu umo\u017e\u0148uje skute\u010dnost, \u017ee interakce s za\u0159\u00edzen\u00edmi v roamingu prob\u00edh\u00e1 mimo bezpe\u010dnostn\u00ed procedury p\u0159ijat\u00e9 pro za\u0159\u00edzen\u00ed v \u201edom\u00e1c\u00ed\u201c s\u00edti. <\/p>\n<h3>Zranitelnosti s\u00edt\u011b <\/h3>\n<p>\n\u00dato\u010dn\u00edci mohou m\u011bnit nastaven\u00ed kompromitovan\u00e9 SIM karty k dosa\u017een\u00ed sv\u00fdch c\u00edl\u016f. Relativn\u00ed snadnost a diskr\u00e9tnost \u00fatoku Simjaking umo\u017e\u0148uj\u00ed jeho prov\u00e1d\u011bn\u00ed na st\u00e1l\u00e9 b\u00e1zi, p\u0159i\u010dem\u017e postupn\u011b p\u0159eb\u00edraj\u00ed kontrolu nad st\u00e1le nov\u00fdmi za\u0159\u00edzen\u00edmi, pomalu a trp\u011bliv\u011b (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflare.com\/learning\/ddos\/ddos-low-and-slow-attack\/\">n\u00edzko a pomalu \u00fatok<\/a><\/noindex>) odkraj\u00ed kousky s\u00edt\u011b podobn\u011b jako pl\u00e1tky sal\u00e1mu (<noindex><a rel=\"nofollow\" href=\"https:\/\/ajmaurya.wordpress.com\/2014\/03\/27\/what-is-a-salami-attack\/\">sal\u00e1mov\u00fd \u00fatok<\/a><\/noindex>). Sledov\u00e1n\u00ed takov\u00e9ho z\u00e1sahu je extr\u00e9mn\u011b obt\u00ed\u017en\u00e9, a ve slo\u017eit\u00e9 rozlo\u017een\u00e9 s\u00edti 5G \u2013 prakticky nemo\u017en\u00e9. <\/p>\n<p><img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/36e5f0da189c645567d97eeefa3643de.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Postupn\u00e9 za\u010dle\u0148ov\u00e1n\u00ed do s\u00edt\u011b 5G s vyu\u017eit\u00edm \u00fatok\u016f Low and Slow + Salami. Zdroj: Trend Micro<\/i><\/p>\n<p>A proto\u017ee s\u00edt\u011b 5G nemaj\u00ed zabudovan\u00e9 mechanismy pro kontrolu bezpe\u010dnosti SIM karet, \u00fato\u010dn\u00edci postupn\u011b z\u00edskaj\u00ed mo\u017enost vytv\u00e1\u0159et ve sv\u00e9m komunika\u010dn\u00edm dom\u00e9n\u011b 5G sv\u00e1 pravidla, vyu\u017e\u00edvaj\u00edc ukraden\u00e9 SIM karty k odcizen\u00ed prost\u0159edk\u016f, autorizaci na s\u00ed\u0165ov\u00e9 \u00farovni, instalaci malware a dal\u0161\u00ed neleg\u00e1ln\u00ed aktivity. <\/p>\n<p>Zvl\u00e1\u0161tn\u00ed obavy vzbuzuje v\u00fdskyt n\u00e1stroj\u016f na hackersk\u00fdch f\u00f3rech, kter\u00e9 automatizuj\u00ed zachyfov\u00e1n\u00ed SIM karet pomoc\u00ed Simjaking, jeliko\u017e vyu\u017eit\u00ed takov\u00fdch prost\u0159edk\u016f v s\u00edt\u00edch p\u00e1t\u00e9 generace d\u00e1v\u00e1 \u00fato\u010dn\u00edk\u016fm prakticky neomezen\u00e9 mo\u017enosti pro \u0161k\u00e1lov\u00e1n\u00ed \u00fatok\u016f a modifikaci d\u016fv\u011bryhodn\u00e9ho provozu. <\/p>\n<p><b><\/p>\n<h3>Zranitelnosti identifikace<\/h3>\n<p><\/b><br \/>\nSIM karta se pou\u017e\u00edv\u00e1 k identifikaci za\u0159\u00edzen\u00ed v s\u00edti. Pokud je SIM karta aktivn\u00ed a m\u00e1 kladn\u00fd z\u016fstatek, za\u0159\u00edzen\u00ed je automaticky pova\u017eov\u00e1no za legitimn\u00ed a nevzbuzuje podez\u0159en\u00ed na \u00farovni detek\u010dn\u00edch syst\u00e9m\u016f. Mezit\u00edm zranitelnost samotn\u00e9 SIM karty \u010din\u00ed zraniteln\u00fdm cel\u00fd identifika\u010dn\u00ed syst\u00e9m. IT bezpe\u010dnostn\u00ed syst\u00e9my jednodu\u0161e nebudou schopny sledovat neleg\u00e1ln\u011b p\u0159ipojen\u00e9 za\u0159\u00edzen\u00ed, pokud se zaregistruje v s\u00edti pomoc\u00ed ukraden\u00fdch identifika\u010dn\u00edch \u00fadaj\u016f z\u00edskan\u00fdch prost\u0159ednictv\u00edm Simjaking. <\/p>\n<p>To znamen\u00e1, \u017ee hacker p\u0159ipojen\u00fd k s\u00edti prost\u0159ednictv\u00edm hacked SIM karty z\u00edsk\u00e1 p\u0159\u00edstup na \u00farovni skute\u010dn\u00e9ho vlastn\u00edka, proto\u017ee IT syst\u00e9my ji\u017e nekontroluj\u00ed za\u0159\u00edzen\u00ed, kter\u00e1 pro\u0161la identifikac\u00ed na s\u00ed\u0165ov\u00e9 \u00farovni. <\/p>\n<p>Zaru\u010den\u00e1 identifikace mezi softwarovou a s\u00ed\u0165ovou \u00farovn\u00ed p\u0159id\u00e1v\u00e1 dal\u0161\u00ed probl\u00e9m: zlo\u010dinci mohou \u00famysln\u011b vytv\u00e1\u0159et \"\u0161um\" pro syst\u00e9my detekce naru\u0161en\u00ed, neust\u00e1le prov\u00e1d\u011bj\u00edce r\u016fzn\u00e9 podez\u0159el\u00e9 \u010dinnosti jm\u00e9nem zachycen\u00fdch legitimn\u00edch za\u0159\u00edzen\u00ed. Vzhledem k tomu, \u017ee automatick\u00e9 detek\u010dn\u00ed syst\u00e9my funguj\u00ed na z\u00e1klad\u011b anal\u00fdzy statistik, prahy pro sign\u00e1l poplachu se postupn\u011b zv\u00fd\u0161\u00ed, co\u017e zajist\u00ed nep\u0159\u00edtomnost reakce na skute\u010dn\u00e9 \u00fatoky. Dlouhodob\u00fd vliv tohoto druhu m\u016f\u017ee zm\u011bnit fungov\u00e1n\u00ed cel\u00e9 s\u00edt\u011b a vytvo\u0159it statistick\u00e9 \"slep\u00e9 z\u00f3ny\" pro detek\u010dn\u00ed syst\u00e9my. Zlo\u010dinci, kte\u0159\u00ed kontroluj\u00ed takov\u00e9 z\u00f3ny, mohou prov\u00e1d\u011bt \u00fatoky na data uvnit\u0159 s\u00edt\u011b a na fyzick\u00e1 za\u0159\u00edzen\u00ed, organizovat \u00fatok na dostupnost a zp\u016fsobit dal\u0161\u00ed \u0161kody. <\/p>\n<p><b><\/p>\n<h3>\u0158e\u0161en\u00ed: jednotn\u00e1 kontrola identity<\/h3>\n<p><\/b><br \/>\nZranitelnosti zkouman\u00e9 NPN s\u00edt\u011b 5G jsou d\u016fsledkem rozpt\u00fdlenosti bezpe\u010dnostn\u00edch procedur na komunika\u010dn\u00ed \u00farovni, \u00farovni SIM karet a za\u0159\u00edzen\u00ed, stejn\u011b jako na \u00farovni roamingov\u00e9 interakce s\u00edt\u00ed. Aby se tento probl\u00e9m vy\u0159e\u0161il, je t\u0159eba podle principu nulov\u00e9ho d\u016fv\u011bry (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.paloaltonetworks.com\/cyberpedia\/what-is-a-zero-trust-architecture\">Zero-Trust Architecture, ZTA<\/a><\/noindex>) zajistit ov\u011b\u0159en\u00ed pravosti p\u0159ipojuj\u00edc\u00edch se za\u0159\u00edzen\u00ed na ka\u017ed\u00e9m stupni, zaveden\u00edm federativn\u00edho modelu identifikace a \u0159\u00edzen\u00ed p\u0159\u00edstupu (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.securityforum.org\/uploads\/2015\/03\/isf_fiam_es.pdf\">Federated Identity and Access Management, FIdAM<\/a><\/noindex>).<\/p>\n<p>Princip ZTA spo\u010d\u00edv\u00e1 v udr\u017eov\u00e1n\u00ed bezpe\u010dnosti i v p\u0159\u00edpad\u011b, \u017ee za\u0159\u00edzen\u00ed je ne\u0159\u00edzen\u00e9, pohybuje se nebo se nach\u00e1z\u00ed za hranic\u00ed s\u00ed\u0165ov\u00e9ho perimetru. Federativn\u00ed model identifikace je p\u0159\u00edstup k bezpe\u010dnosti 5G, kter\u00fd zabezpe\u010duje jednotnou soudr\u017enou architekturu pro ov\u011b\u0159ov\u00e1n\u00ed, pr\u00e1va p\u0159\u00edstupu, integritu dat a dal\u0161\u00ed komponenty a technologie v s\u00edt\u00edch 5G.<\/p>\n<p>Tento p\u0159\u00edstup vylu\u010duje mo\u017enost implantace do s\u00edt\u011b \"roamingov\u00e9\" v\u011b\u017ee a p\u0159esm\u011brov\u00e1n\u00ed na ni zachycen\u00e9 SIM karty. IT syst\u00e9my budou moci pln\u011b identifikovat p\u0159ipojen\u00ed ciz\u00edch za\u0159\u00edzen\u00ed a blokovat parazitn\u00ed provoz vytv\u00e1\u0159ej\u00edc\u00ed statistick\u00fd \u0161um. <\/p>\n<p>Pro ochranu SIM karty p\u0159ed modifikac\u00ed je nutn\u00e9 implementovat do n\u00ed dodate\u010dn\u00e9 prost\u0159edky ov\u011b\u0159ov\u00e1n\u00ed integrity, kter\u00e9 mohou b\u00fdt realizov\u00e1ny jako SIM aplikace zalo\u017een\u00e1 na blockchainu. Aplikace m\u016f\u017ee b\u00fdt pou\u017eita pro autentizaci za\u0159\u00edzen\u00ed a u\u017eivatel\u016f, stejn\u011b jako pro ov\u011b\u0159en\u00ed integrity firmware a nastaven\u00ed SIM karty jak v roamingu, tak p\u0159i pr\u00e1ci v dom\u00e1c\u00ed s\u00edti. <br \/>\n<img decoding=\"async\" alt=\"Zranitelnosti s\u00edt\u00ed 5G\" src=\"\/wp-content\/uploads\/2020\/02\/47b5019c69ea78b1db54e0971681b6f4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\n<b><\/p>\n<h3>Shr\u0148me to<\/h3>\n<p><\/b><br \/>\n \u0158e\u0161en\u00ed zji\u0161t\u011bn\u00fdch bezpe\u010dnostn\u00edch probl\u00e9m\u016f 5G lze p\u0159edstavit jako kombinaci t\u0159\u00ed p\u0159\u00edstup\u016f: <\/p>\n<ul>\n<li>implementace federativn\u00edho modelu identifikace a spr\u00e1vy p\u0159\u00edstupu, kter\u00fd zajist\u00ed integritu dat v s\u00edti;<\/li>\n<li>zaji\u0161t\u011bn\u00ed pln\u00e9 viditelnosti hrozeb prost\u0159ednictv\u00edm realizace distribuovan\u00e9ho registru pro ov\u011b\u0159en\u00ed legitimity a integrity SIM karet;<\/li>\n<li>vytvo\u0159en\u00ed distribuovan\u00e9ho bezpe\u010dnostn\u00edho syst\u00e9mu bez hranic, kter\u00fd \u0159e\u0161\u00ed probl\u00e9my interakce s za\u0159\u00edzen\u00edmi v roamingu. <\/li>\n<\/ul>\n<p>\nPraktick\u00e1 realizace t\u011bchto opat\u0159en\u00ed vy\u017eaduje \u010das a zna\u010dn\u00e9 n\u00e1klady, av\u0161ak nasazen\u00ed s\u00edt\u00ed 5G pokra\u010duje v\u0161ude, a proto je nutn\u00e9 za\u010d\u00edt pracovat na odstran\u011bn\u00ed zranitelnost\u00ed hned te\u010f.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/trendmicro\/blog\/486262\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043f\u043e\u0442\u0438\u0440\u0430\u044e\u0442 \u0440\u0443\u043a\u0438, \u043f\u0440\u0435\u0434\u0432\u043a\u0443\u0448\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0430\u0436\u0438\u0432\u044b. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u0441\u0435 \u0441\u0442\u0430\u0440\u0430\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f 5G \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u043f\u044b\u0442\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043d\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041c\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e 5G-\u0441\u0435\u0442\u044c \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435. \u041e\u0431\u044a\u0435\u043a\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u0435\u0439\u0448\u0438\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":40586,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-40585","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/uyazvimosti-setej-5g\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439 5G | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/uyazvimosti-setej-5g\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-02T07:38:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-02T07:38:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnosti s\u00edt\u00ed 5G | ProHoster","description":"Zat\u00edmco nad\u0161enci s nap\u011bt\u00edm o\u010dek\u00e1vaj\u00ed masov\u00e9 nasazen\u00ed s\u00edt\u00ed p\u00e1t\u00e9 generace.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/uyazvimosti-setej-5g","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439 5G | ProHoster","og:description":"\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e.","og:url":"https:\/\/prohoster.info\/cs\/blog\/uyazvimosti-setej-5g","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T07:38:22+00:00","article:modified_time":"2020-02-02T07:38:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"40585","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:34:25","updated":"2022-09-30 08:28:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/40585","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=40585"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/40585\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/40586"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=40585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=40585"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=40585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}