{"id":73923,"date":"2020-03-12T20:42:15","date_gmt":"2020-03-12T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva"},"modified":"2020-03-12T20:42:15","modified_gmt":"2020-03-12T17:42:15","slug":"google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","title":{"rendered":"Google a pr\u00e9sent\u00e9 un bloqueur de substitution d'entr\u00e9e via des p\u00e9riph\u00e9riques USB malveillants","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 Google a publi\u00e9<\/a><\/noindex> outil ukip<\/a><\/noindex>, permettant de suivre et de bloquer les attaques<\/a><\/noindex>, r\u00e9alis\u00e9es \u00e0 l'aide de dispositifs USB malveillants, simulant un clavier USB pour masquer des frappes de touches fictives (par exemple, lors d'une attaque, il peut \u00eatre simul\u00e9<\/a><\/noindex> une s\u00e9quence de frappes aboutissant \u00e0 l'ouverture d'un terminal et \u00e0 l'ex\u00e9cution de commandes arbitraires). Le code est \u00e9crit en Python et est distribu\u00e9<\/a><\/noindex> sous licence Apache 2.0. <\/p>\n

L'outil s'ex\u00e9cute sous la forme d'un service systemd et peut fonctionner en modes de surveillance et de pr\u00e9vention des attaques. En mode de surveillance, il d\u00e9tecte d'\u00e9ventuelles attaques et enregistre dans un journal les activit\u00e9s li\u00e9es aux tentatives d'utilisation non autoris\u00e9e des dispositifs USB pour masquer des entr\u00e9es. En mode protection, lors de la d\u00e9tection d'un dispositif potentiellement malveillant, il est d\u00e9connect\u00e9 du syst\u00e8me au niveau du pilote. <\/p>\n

L'activit\u00e9 malveillante est d\u00e9tect\u00e9e sur la base d'une analyse heuristique de la nature des saisies et des d\u00e9lais entre les frappes - l'attaque est g\u00e9n\u00e9ralement men\u00e9e en pr\u00e9sence de l'utilisateur et, pour rester inaper\u00e7ue, les frappes simul\u00e9es sont envoy\u00e9es avec des d\u00e9lais atypiques pour une saisie normale. Pour modifier la logique de d\u00e9tection des attaques, deux param\u00e8tres ont \u00e9t\u00e9 propos\u00e9s : KEYSTROKE_WINDOW et ABNORMAL_TYPING (le premier d\u00e9finit le nombre de frappes \u00e0 analyser, et le second le seuil d'intervalle entre les frappes).<\/p>\n

L'attaque peut \u00eatre effectu\u00e9e \u00e0 l'aide d'un dispositif apparemment inoffensif avec un firmware modifi\u00e9, par exemple, un clavier peut \u00eatre simul\u00e9 dans une cl\u00e9 USB<\/a><\/noindex>, un hub USB<\/a><\/noindex>, une webcam<\/a><\/noindex> ou un smartphone<\/a><\/noindex> (dans Kali NetHunter<\/a><\/noindex> une utilitaire sp\u00e9cial est propos\u00e9 pour masquer des entr\u00e9es \u00e0 partir d'un smartphone connect\u00e9 au port USB fonctionnant sous Android). Pour compliquer les attaques via USB, en plus de ukip, le paquet USBGuard<\/a><\/noindex>, qui permet de connecter uniquement des dispositifs de la liste blanche ou bloque la possibilit\u00e9 de connecter des dispositifs USB non autoris\u00e9s pendant le verrouillage de l'\u00e9cran et emp\u00eache l'utilisation de tels dispositifs apr\u00e8s le retour de l'utilisateur.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 ukip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u0438\u043c\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 USB-\u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0438\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u0439, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044e \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432 \u043d\u0451\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434). \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-73923","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google a pr\u00e9sent\u00e9 un bloqueur de saisie masqu\u00e9e via des dispositifs USB malveillants | ProHoster","description":"La soci\u00e9t\u00e9 Google a publi\u00e9 un outil","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0432\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0443","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-12T17:42:15+00:00","article:modified_time":"2020-03-12T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"73923","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:24:24","updated":"2022-10-08 12:19:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/73923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=73923"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/73923\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=73923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=73923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=73923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}