{"id":30609,"date":"2019-10-31T21:36:28","date_gmt":"2019-10-31T18:36:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte\/"},"modified":"2019-10-31T21:36:28","modified_gmt":"2019-10-31T18:36:28","slug":"spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","title":{"rendered":"Des sp\u00e9cialistes ont d\u00e9couvert 36 nouvelles vuln\u00e9rabilit\u00e9s dans le protocole 4G LTE","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Chaque transition vers une norme de t\u00e9l\u00e9phonie mobile plus r\u00e9cente signifie non seulement une augmentation de la vitesse de transmission des donn\u00e9es, mais elle permet \u00e9galement de rendre la communication plus fiable et prot\u00e9g\u00e9e contre les acc\u00e8s non autoris\u00e9s. Pour cela, les vuln\u00e9rabilit\u00e9s identifi\u00e9es dans les protocoles pr\u00e9c\u00e9dents sont examin\u00e9es et de nouvelles m\u00e9thodes de v\u00e9rification de la s\u00e9curit\u00e9 sont mises en \u0153uvre. Dans ce sens, la communication via le protocole 5G promet d'\u00eatre plus fiable que celle utilisant le protocole 4G (LTE), ce qui n'exclut pas toutefois la possibilit\u00e9 de d\u00e9couvrir \u00e0 l'avenir des vuln\u00e9rabilit\u00e9s dans le \u00ab 5G \u00bb. De la m\u00eame mani\u00e8re, des ann\u00e9es d'exploitation du 4G n'ont pas exempt\u00e9 ce protocole de nombreuses nouvelles vuln\u00e9rabilit\u00e9s d\u00e9couvertes. Un exemple r\u00e9cent confirmant cette assertion est une \u00e9tude r\u00e9alis\u00e9e par des sp\u00e9cialistes en s\u00e9curit\u00e9 sud-cor\u00e9ens, qui ont identifi\u00e9 36 nouvelles vuln\u00e9rabilit\u00e9s dangereuses dans le protocole 4G.<\/p>\n

\"Des<\/p>\n

Les sp\u00e9cialistes de l'institut Korea Advanced Institute of Science and Technology (KAIST) ont appliqu\u00e9 la m\u00eame m\u00e9thode de recherche de vuln\u00e9rabilit\u00e9s dans le protocole (en r\u00e9seau) LTE que celle utilis\u00e9e pour identifier les solutions probl\u00e9matiques dans les logiciels pour PC et serveurs<\/a>. C'est ce qu'on appelle la m\u00e9thode de fuzzing, o\u00f9 le syst\u00e8me est attaqu\u00e9 (surcharg\u00e9) par une s\u00e9rie de donn\u00e9es incorrectes, inattendues ou al\u00e9atoires. Apr\u00e8s la charge, la r\u00e9ponse du syst\u00e8me est \u00e9tudi\u00e9e et des sc\u00e9narios de protection ou d'approfondissement de l'attaque sont \u00e9labor\u00e9s. Ce travail peut \u00eatre effectu\u00e9 en mode semi-automatique, en confiant au syst\u00e8me l'injection du processus de transmission et de r\u00e9ception des donn\u00e9es, tandis que les sc\u00e9narios d'attaque et l'analyse des donn\u00e9es obtenues sont construits manuellement. Par exemple, les sp\u00e9cialistes de KAIST ont d\u00e9velopp\u00e9 un utilitaire nomm\u00e9 LTEFuzz pour tester la s\u00e9curit\u00e9 du protocole LTE et rechercher des vuln\u00e9rabilit\u00e9s, mais promettent de ne pas le rendre public, le transmettant uniquement aux fabricants d'\u00e9quipements et aux op\u00e9rateurs de communication.<\/p>\n

\"Des
\n<\/center><\/p>\n

Avec l'aide de LTEFuzz, plus de 50 vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes, dont 36 \u00e9taient totalement nouvelles. Cette m\u00e9thode a permis de d\u00e9tecter 15 vuln\u00e9rabilit\u00e9s d\u00e9j\u00e0 connues, ce qui a confirm\u00e9 la validit\u00e9 de la technologie choisie (si elles sont connues, pourquoi n'ont-elles pas \u00e9t\u00e9 corrig\u00e9es ?). Les tests ont \u00e9t\u00e9 effectu\u00e9s dans les r\u00e9seaux de deux op\u00e9rateurs non nomm\u00e9s et en collaboration avec eux, donc les utilisateurs ordinaires n'ont pas \u00e9t\u00e9 affect\u00e9s. Beaucoup de choses int\u00e9ressantes ont \u00e9t\u00e9 d\u00e9couvertes. Il a \u00e9t\u00e9 possible d'\u00e9couter les abonn\u00e9s, de collecter des donn\u00e9es lors des \u00e9changes entre les stations de base et les appareils, d'envoyer des SMS frauduleux, de bloquer les appels entrants, de d\u00e9connecter les abonn\u00e9s du r\u00e9seau, de contr\u00f4ler le trafic et de faire bien d'autres choses. Tous les vuln\u00e9rabilit\u00e9s d\u00e9couvertes, y compris les \u00ab failles \u00bb dans l'\u00e9quipement des stations de base de t\u00e9l\u00e9phonie mobile, ont \u00e9t\u00e9 signal\u00e9es par les experts de KAIST aux fournisseurs et aux organisations 3GPP et GSMA.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Source : 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0430\u0436\u0434\u044b\u0439 \u0440\u0430\u0437 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u044c \u0431\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u0435\u0440\u0443\u0442\u0441\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u043d\u0435 \u0441\u0432\u044f\u0437\u044c \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 5G \u043e\u0431\u0435\u0449\u0430\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0430\u0434\u0451\u0436\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22603,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30609","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Des experts ont d\u00e9couvert 36 nouvelles vuln\u00e9rabilit\u00e9s dans le protocole 4G LTE | ProHoster","description":"Chaque transition vers une nouvelle norme de t\u00e9l\u00e9phonie mobile signifie non seulement une augmentation de la vitesse de transmission des donn\u00e9es, mais permet \u00e9galement de rendre la communication plus fiable et prot\u00e9g\u00e9e contre les acc\u00e8s non autoris\u00e9s.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043d\u0430\u0448\u043b\u0438 36 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 4G LTE | ProHoster","og:description":"\u041a\u0430\u0436\u0434\u044b\u0439 \u0440\u0430\u0437 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u044c \u0431\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/spetsialisty-nashli-36-novyh-uyazvimostej-v-protokole-4g-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:36:28+00:00","article:modified_time":"2019-10-31T18:36:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30609","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:57:10","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:32:35","updated":"2026-02-09 16:57:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/30609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=30609"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/30609\/revisions"}],"predecessor-version":[{"id":158533,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/30609\/revisions\/158533"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/22603"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=30609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=30609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=30609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}