{"id":147923,"date":"2025-11-10T23:11:54","date_gmt":"2025-11-10T21:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-whisper-leak-po-opredeleniyu-tematiki-obshheniya-s-ai-chatbotami-cherez-analiz-tls-trafika"},"modified":"2025-11-10T23:11:54","modified_gmt":"2025-11-10T21:11:56","slug":"ataka-whisper-leak-po-opredeleniyu-tematiki-obshheniya-s-ai-chatbotami-cherez-analiz-tls-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-whisper-leak-po-opredeleniyu-tematiki-obshheniya-s-ai-chatbotami-cherez-analiz-tls-trafika","title":{"rendered":"Whisper Leak-angrebet til bestemmelse af emnet for kommunikation med AI-chatbots gennem analyse af TLS-trafikken","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sikkerhedsforskere fra Microsoft har udviklet en angrebsteknik ved hj\u00e6lp af sidekanaler kaldet Whisper Leak, som g\u00f8r det muligt at klassificere emner i foresp\u00f8rgsler til services baseret p\u00e5 store sprogmodeller ved passiv analyse af den krypterede trafik, der sendes via TLS-forbindelser. Information om st\u00f8rrelsen af netv\u00e6rkspakker og forsinkelserne mellem deres transmissioner var tilstr\u00e6kkelig til at bestemme emnerne i foresp\u00f8rgsler til AI-chatbotter med en n\u00f8jagtighed p\u00e5 over 98 %. I praksis kan den foresl\u00e5ede metode anvendes til at identificere bestemte emner i brugerens transit trafik, eksempelvis fors\u00f8g p\u00e5 at opn\u00e5 information om ulovlige aktiviteter, uden at indholdet dekrypteres. <\/p>\n

V\u00e6rkt\u00f8jet til udtr\u00e6kning af data fra trafikdump, tr\u00e6ning af modellen og test af metodens funktionalitet er offentliggjort p\u00e5 GitHub. Muligheden for at udf\u00f8re angreb er demonstreret for 28 popul\u00e6re store sprogmodeller fra de st\u00f8rste producenter. For eksempel var n\u00f8jagtigheden af bestemmelserne om emnet \"hvidvaskning af penge\" for mange AI-tjenester 100%, n\u00e5r der i den analyserede trafik var 1 \u00f8nsket foresp\u00f8rgsel og 10000 foresp\u00f8rgsler, der ikke var relateret til det \u00f8nskede emne.

\"Whisper<\/center> <\/p>\n

\u00c5rsagen til informationsl\u00e6kagen er, at modellerne genererer svar p\u00e5 foresp\u00f8rgsler trin for trin, \u00e9t token ad gangen, og ved hvert trin bruger det forrige token som kontekst til at bestemme det n\u00e6ste mest sandsynlige ord eller frase. Derfor sendes der et s\u00e6rskilt netv\u00e6rkspakke for hvert token, og forsinkelsen mellem pakkerne svarer til forsinkelsen mellem modelens bestemmelse af det n\u00e6ste token. <\/p>\n

I TLS, hvis der ikke anvendes datakomprimering, er st\u00f8rrelsen af chifferteksten lig med st\u00f8rrelsen af den ukrypterede tekst plus en konstant. Ved at skabe en model, der korrelerer de \u00f8nskede s\u00e6t af tokens med st\u00f8rrelsen af pakkerne og forsinkelserne mellem deres transmissioner, kan man ret pr\u00e6cist bestemme tilstedev\u00e6relsen af \u00f8nskede emner i trafikken. I l\u00f8bet af unders\u00f8gelsen er der udviklet tre varianter af s\u00e5danne maskinl\u00e6ringsmodeller baseret p\u00e5 neurale netv\u00e6rksarkitekturer som LightGBM, Bi-LSTM og BERT. For hver model er der udf\u00f8rt eksperimenter for at bestemme det \u00f8nskede emne ved kun at analysere st\u00f8rrelsen af pakkerne, kun forsinkelserne mellem pakkerne og begge kriterier.

\"Whisper<\/center> <\/p>\n

For at reducere effektiviteten af passiv analyse af foresp\u00f8rgsels-tematikker har udviklerne af AI-tjenester foresl\u00e5et at vedh\u00e6fte tilf\u00e6ldigt efterfyld, buffered transmittere token eller udf\u00f8re substitution af falske pakker.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c Whisper Leak, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u043c\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430\u0445 \u043c\u0435\u0436\u0434\u0443 \u0438\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u0435\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a AI-\u0447\u0430\u0442\u0431\u043e\u0442\u0430\u043c \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u043e\u043b\u0435\u0435 98%. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":147924,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-147923","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Whisper Leak-angreb til bestemmelse af kommunikationstemaer med AI-chatbots gennem analyse af TLS-trafik | ProHoster","description":"Sikkerhedsresearchere fra Microsoft har udviklet en metode til angreb gennem sidekanaler kaldet Whisper Leak, der muligg\u00f8r passiv analyse af krypteret trafik, der sendes over en TLS-forbindelse.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-whisper-leak-po-opredeleniyu-tematiki-obshheniya-s-ai-chatbotami-cherez-analiz-tls-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 Whisper Leak \u043f\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044e \u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0438 \u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 AI-\u0447\u0430\u0442\u0431\u043e\u0442\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 TLS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c Whisper Leak, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-whisper-leak-po-opredeleniyu-tematiki-obshheniya-s-ai-chatbotami-cherez-analiz-tls-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-10T21:11:56+00:00","article:modified_time":"2025-11-10T21:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"147923","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 15:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:52:19","updated":"2026-01-23 15:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/147923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=147923"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/147923\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/147924"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=147923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=147923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=147923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}