{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"ReVoLTE r\u00fcnnak, mis v\u00f5imaldab h\u00f5ivata kr\u00fcpteeritud k\u00f5nesid LTE-s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ruur'i \u00fclikooli teadlaste grupp Bochumist (Saksamaa) esitles r\u00fcnnetehnikaid Re­VoL­TE<\/a><\/noindex> (PDF<\/a><\/noindex>), mis v\u00f5imaldavad tabada kr\u00fcpteeritud h\u00e4\u00e4lk\u00f5nesid 4G\/LTE mobiilsides, mis kasutavad h\u00e4\u00e4let\u00f5hise tehnoloogiat VoLTE (Voice over LTE<\/a><\/noindex>).
\n.<\/p>\n

H\u00e4\u00e4lk\u00f5nede kaitsmiseks VoLTE-s peavad kliendi ja operaatori vahel rakendama kr\u00fcpteerimist, mis p\u00f5hineb voogudel p\u00f5hineval kr\u00fcpteerimisel<\/a><\/noindex>. Spetsifikatsioon n\u00f5uab, et iga sessiooni jaoks genereeritakse ainulaadne v\u00f5tmevoog, kuid nagu uuringud n\u00e4itasid, ei t\u00e4ida 12 15 testitud baasjaamast seda tingimust ning kasutavad sama v\u00f5tmevoogu kahe j\u00e4rjestikuse k\u00f5ne jaoks \u00fche raadiosignaali kaudu v\u00f5i rakendavad ettearvatavaid meetodeid uue j\u00e4rjestuse genereerimiseks.<\/p>\n

Kliendi voogude taaskasutamine v\u00f5imaldab r\u00fcndajal dekr\u00fcpteerida salvestatud kr\u00fcpteeritud liiklust k\u00f5ne k\u00e4igus. K\u00f5ne sisu dekr\u00fcpteerimiseks peab r\u00fcndaja alguses tabama ja salvestama kr\u00fcpteeritud raadiosignaalide vahepeal ohvriga ja haavatava baasjaama vahel. K\u00f5ne l\u00f5ppedes helistab r\u00fcndaja ohvrile tagasi ja p\u00fc\u00fcab vestlust v\u00f5imalikult kaua j\u00e4tkata, takistades ohvril toru \u00fcles panna. Selle vestluse k\u00e4igus salvestatakse lisaks kr\u00fcpteeritud raadiosignaalide salvestamisele ka dekr\u00fcpteerimata algne helisignaal.<\/p>\n

Kuna dekr\u00fcptida esimese telefoni k\u00f5ne ohvrist, saab r\u00fcndaja teise k\u00f5ne ajal peidetud liiklust ja r\u00fcndaja salvestatud h\u00e4\u00e4landmeid kasutades arvutada v\u00f5tmevoo v\u00e4\u00e4rtuse, mis m\u00e4\u00e4ratakse XOR-operatsiooni abil avatud ja kr\u00fcptitud andmete vahel. Kuna v\u00f5tmevool kasutatakse uuesti, saab r\u00fcndaja rakendada teise k\u00f5ne jaoks arvutatud v\u00f5tmevoogu esimese k\u00f5ne kr\u00fcptitud andmetele, et p\u00e4\u00e4seda ligi nende algsele sisule. Mida kauem kestis teine k\u00f5ne r\u00fcndaja ja ohvri vahel, seda rohkem teavet saab dekr\u00fcpteerida esimesest k\u00f5nest. N\u00e4iteks, kui r\u00fcndaja suutis vestlust venitada 5 minutiks, siis suudab ta ka 5 minuti sisu dekr\u00fcpteerida.<\/p>\n

LTE-v\u00f5rkudes kr\u00fcptitud liikluse salvestamiseks kasutasid teadlased signaalianal\u00fcsaatorit AirScope<\/a><\/noindex>, samas kui r\u00fcndaja h\u00e4\u00e4lest \u00f5ige allika voolu saamiseks helistamise ajal kasutati Android-smartfone, mida juhtis ADB ja SCAT<\/a><\/noindex>. R\u00fcnnaku l\u00e4biviimiseks vajaliku varustuse maksumus on hinnanguliselt 7000 dollarit. <\/p>\n


\n
\r\n \"Vaata\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Baasi jaamade tootjad olid probleemist teavitamise saanud m\u00f6\u00f6dunud aasta detsembris ning enamus on juba v\u00e4lja andnud plaastrid haavatavuse k\u00f5rvaldamiseks. Siiski on m\u00f5ned operaatorid v\u00f5inud v\u00e4rskendusi ignoreerida. LTE- ja 5G-v\u00f5rkude m\u00f5jutatuse kontrollimiseks valmis<\/a><\/noindex> spetsiaalne mobiilirakendus Android 9 platvormile (t\u00f6\u00f6ks on vajalik root-juurdep\u00e4\u00e4s ning Qualcommi kiibiga nutitelefon, nagu Xiaomi Mi A3, One Plus 6T ja Xiaomi Mix 3 5G). Lisaks haavatavuse olemasolu m\u00e4\u00e4ramisele saab rakendust kasutada ka liikluse j\u00e4lgimiseks ja teenuse s\u00f5numite vaatamiseks. J\u00e4lgitud liiklus salvestatakse PCAP formaadis ning saadetakse m\u00e4\u00e4ratud HTTP-serverisse edasiseks anal\u00fc\u00fcsiks tavap\u00e4raste t\u00f6\u00f6riistadega. <\/p>\n

\"ReVoLTE<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ReVoLTE r\u00fcnnak, mis v\u00f5imaldab tabada kr\u00fcpteeritud k\u00f5nesid LTE v\u00f5rgus | ProHoster","description":"Ruhris \u00fclikooli teadlaste grupp Saksamaal esitles ReVoLTE (PDF) r\u00fcnnakutehnikat, mis v\u00f5imaldab tabada kr\u00fcpteeritud h\u00e4\u00e4lek\u00f5nesid 4G\/LTE mobiiliv\u00f5rkudes, mis kasutavad h\u00e4\u00e4letu trafik edastamiseks VoLTE (Voice over LTE) tehnoloogiat. VoLTE k\u00f5nede kaitsmiseks peetakse kliendi ja operaatori vahelises kanalid voolu\u0161ifri p\u00f5hjal \u0161ifreerimist. Spetsifikatsioon","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}