{"id":30609,"date":"2019-10-31T21:36:28","date_gmt":"2019-10-31T18:36:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte\/"},"modified":"2019-10-31T21:36:28","modified_gmt":"2019-10-31T18:36:28","slug":"spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","title":{"rendered":"Spetsialistid tuvastasid 36 uut haavatavust 4G LTE protokollis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Iga kord, kui \u00fcleminek uuele mobiilside standardile toob endaga kaasa mitte ainult andmete edastamiskiirus, vaid ka parema usaldusv\u00e4\u00e4rsuse ning kaitse volitamata juurdep\u00e4\u00e4su eest. Selle saavutamiseks kasutatakse varasemates protokollides leitud haavatavusi ja uusi turvameetodeid. Sel eesm\u00e4rgil lubab 5G protokoll pakkuda usaldusv\u00e4\u00e4rsemat \u00fchendust kui 4G (LTE), kuigi ei saa v\u00e4listada, et ka 5G osas tuvastatakse tulevikus haavatavusi. Samuti ei vabastanud 4G aastatepikkune kasutamine seda protokolli paljude uute haavatavuste tuvastamisest. Uue n\u00e4itena selle v\u00e4ite kinnitamiseks on Korea turbadokumendid, kes tuvastasid 4G protokollis 36 uut ohtlikku haavatavust.<\/p>\n

\"Spetsialistid<\/p>\n

Korea Edasij\u00f5udnud Teaduste ja Tehnoloogia Institut (KAIST) rakendas LTE protokolli (v\u00f5rgus) haavatavuste otsimisel sama meetodi, mida kasutatakse probleemide lahendamisel personaalarvutite tarkvaras ja serverid<\/a>. Seda tuntakse nimena fuzzing meetod, kus s\u00fcsteemi r\u00fcnnatakse (koormatakse) vale, ootamatu v\u00f5i juhuslike andmete j\u00e4rjestusega. P\u00e4rast koormust uuritakse s\u00fcsteemi reageerimist ja luuakse kaitseskeeme v\u00f5i r\u00fcnnaku s\u00fcvendamise stsenaariume. Seda t\u00f6\u00f6d saab teostada poolautomaatre\u017eiimis, usaldades s\u00fcsteemile andmete edastamise protsessi ning r\u00fcnnakustsenaariumid ja saadud tulemuste anal\u00fc\u00fcs luuakse k\u00e4sitsi. N\u00e4iteks on KAIST v\u00e4lja t\u00f6\u00f6tanud LTE protokolli kaitsetestimise ja haavatavuste otsimise jaoks t\u00f6\u00f6riista LTEFuzz, kuid lubavad seda mitte avalikustada, vaid jagada ainult seadmete tootjatele ja teenusepakkujatele.<\/p>\n

\"Spetsialistid
\n<\/center><\/p>\n

LTEFuzzi abil avastati \u00fcle 50 haavatavuse, millest 36 olid t\u00e4iesti uusi. Meetod aitas tuvastada 15 juba tuttavat haavatavust, mis kinnitas valitud tehnoloogia \u00f5igsust (kui need on teada, miks nad siis mitte parandatud?). Testimine viidi l\u00e4bi kahe nimetuks j\u00e4\u00e4va operaatori v\u00f5rkudes koost\u00f6\u00f6s nendega, seega ei olnud tavalised kasutajad ohus. Palju huvitavat tuli p\u00e4evavalgele. Suudeti kuulata tellijaid, lugeda andmeid, mis vahetati baasjaamade ja seadmete vahel, saata vale SMS-s\u00f5numeid, blokeerida saabuvad k\u00f5ned, katkestada tellijaid v\u00f5rgust, hallata liiklust ja teha palju muud. K\u00f5ik avastatud haavatavused, sealhulgas baasjaamade seadmete haavatavused, on KAISTi spetsialistid teavitanud tarnijaid ning organisatsioone 3GPP ja GSMA.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0430\u0436\u0434\u044b\u0439 \u0440\u0430\u0437 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u044c \u0431\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u0435\u0440\u0443\u0442\u0441\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u043d\u0435 \u0441\u0432\u044f\u0437\u044c \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 5G \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0430\u0434\u0451\u0436\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22603,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30609","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spetsialistid avastasid 36 uut haavatavust 4G LTE protokollis | ProHoster","description":"Iga kord, kui liikuda uuele mobiilside standardile, t\u00e4hendab see mitte ainult andmeedastuskiiruset\u00f5usu, vaid ka sideteenuste usaldusv\u00e4\u00e4rsemaks ja ebaseadusliku juurdep\u00e4\u00e4su suhtes kaitstumaks muutumist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043d\u0430\u0448\u043b\u0438 36 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 4G LTE | ProHoster","og:description":"\u041a\u0430\u0436\u0434\u044b\u0439 \u0440\u0430\u0437 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u044c \u0431\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:36:28+00:00","article:modified_time":"2019-10-31T18:36:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30609","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:57:10","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:32:35","updated":"2026-02-09 16:57:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30609"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30609\/revisions"}],"predecessor-version":[{"id":158533,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30609\/revisions\/158533"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/22603"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}