I kā lākou hana, ʻike pinepine ka poʻe loea forensic i nā hihia inā pono e wehe koke i kahi kelepona. No ka laʻana, pono ka ʻikepili mai ke kelepona e ka hoʻokolokolo ʻana i mea e hoʻomaopopo ai i nā kumu o ka pepehi kanaka ʻana o kahi ʻōpio. Ma kahi hihia ʻē aʻe, e kōkua lākou i ka hele ʻana i ke ala o kahi hui lawehala e hoʻouka ana i nā mea hoʻokele kaʻa. Aia nō, ʻoiaʻiʻo, nā moʻolelo maikaʻi - poina nā mākua i ka ʻōlelo huna i ka gadget, a aia kahi wikiō me nā ʻanuʻu mua o kā lākou pēpē ma luna, akā naʻe, he kakaikahi wale nō o lākou. Akā, koi lākou i kahi ala ʻoihana i ka pilikia. Ma keia 'atikala ʻO Igor Mikhailov, ka loea o ka Group-IB Computer Forensics Laboratory, kamaʻilio e pili ana i nā ala e hiki ai i nā loea forensic ke kāʻalo i ka laka kelepona.
Mea nui: Ua kākau ʻia kēia ʻatikala e loiloi i ka palekana o nā ʻōlelo huna a me nā kiʻi kiʻi i hoʻohana ʻia e nā mea nona nā polokalamu kelepona. Inā hoʻoholo ʻoe e wehe i kahi polokalamu kelepona me ka hoʻohana ʻana i nā ʻano i wehewehe ʻia, e hoʻomanaʻo e hana ʻoe i nā hana āpau e wehe i nā polokalamu i kou pilikia a me ka pilikia. I ka hoʻopunipuni ʻana i nā polokalamu kelepona, hiki iā ʻoe ke laka i ka hāmeʻa, holoi i ka ʻikepili o ka mea hoʻohana, a i ʻole ka hana hewa ʻana o ka hāmeʻa. Hāʻawi pū ʻia nā manaʻo i nā mea hoʻohana e pili ana i ka hoʻonui ʻana i ke kiʻekiʻe o ka pale o kā lākou mau mea hana.
No laila, ʻo ke ala maʻamau o ka hoʻopaʻa ʻana i ka ʻike o ka mea hoʻohana i loko o ka hāmeʻa ʻo ia ka laka ʻana i ka pale o ke kelepona paʻalima. Ke komo nei kēlā ʻano mea i loko o ka hale hana forensic, paʻakikī ka hana ʻana me ia, no ka mea ʻaʻole hiki ke hoʻāla i ke ʻano debugging USB (no nā polokalamu Android), ʻaʻole hiki ke hōʻoia i ka ʻae no ka kamepiula o ka mea nānā e launa pū me kēia. mea (no nā polokalamu kelepona Apple), a ʻo ka hopena, ʻaʻole hiki ke komo i ka ʻikepili i mālama ʻia ma ka hoʻomanaʻo o ka mea.
ʻO ka ʻoiaʻiʻo o ka US FBI i uku nui i ka wehe ʻana i ka iPhone o ka mea hoʻoweliweli ʻo Syed Farouk, kekahi o nā mea i komo i ka hoʻouka kaua hoʻoweliweli ma ke kūlanakauhale ʻo Kaleponi o San Bernardino, e hōʻike ana i ka nui o ka laka maʻamau o kahi kelepona paʻa e pale ai i nā loea mai. ka unuhi ʻana i ka ʻikepili mai ia mea [1].
Nā ʻano wehe ʻana i ka pale o ka Mobile Device
E like me ke kānāwai, hoʻohana ʻia e laka i ka pale o kahi kelepona paʻa:
- ʻōlelo huna hōʻailona
- ʻŌlelo huna kiʻi
Eia kekahi, hiki ke hoʻohana ʻia nā ʻenehana ʻenehana SmartBlock e wehe i ka pale o kekahi mau polokalamu kelepona:
- Wehe manamana lima
- Wehe maka (ʻenehana FaceID)
- Wehe i ka mea hana ma ka ʻike iris
ʻO nā ala kaiapili no ka wehe ʻana i kahi polokalamu kelepona
Ma waho aʻe o nā mea ʻenehana maʻemaʻe, aia kekahi mau ala ʻē aʻe e ʻike ai a lanakila paha i ka code PIN a i ʻole ke code kiʻi (pahu) o ka laka pale. I kekahi mau hihia, hiki ke ʻoi aku ka maikaʻi o nā ʻano kaiapili ma mua o nā hoʻonā ʻenehana a kōkua i ka wehe ʻana i nā polokalamu i hāʻawi ʻia i nā hoʻomohala ʻenehana.
E wehewehe ana kēia ʻāpana i nā ʻano hana no ka wehe ʻana i ka pale o kahi hāmeʻa paʻa i koi ʻole (a i ʻole koi ʻia i ka hoʻohana ʻana i nā mea ʻenehana.
No ka hoʻokō ʻana i ka hoʻouka kaua ʻana, pono ia e aʻo i ka psychology o ka mea nona kahi paʻa paʻa i ka hohonu e like me ka hiki, e hoʻomaopopo i nā loina āna e hana ai a mālama i nā huaʻōlelo a i ʻole nā kiʻi kiʻi. Eia kekahi, pono ka mea noiʻi i kahi kulu o ka laki.
I ka hoʻohana ʻana i nā ʻano e pili ana i ka wānana ʻōlelo huna, pono e hoʻomanaʻo ʻia:
- ʻO ka hoʻokomo ʻana i ʻumi huaʻōlelo hewa ʻole ma nā polokalamu kelepona ʻo Apple hiki ke hoʻopau ʻia ka ʻikepili o ka mea hoʻohana. Pili kēia i nā hoʻonohonoho palekana i hoʻonohonoho ʻia e ka mea hoʻohana;
- ma nā polokalamu kelepona e holo ana i ka ʻōnaehana hana Android, hiki ke hoʻohana ʻia ka ʻenehana Root of Trust, kahi e alakaʻi ai i ka ʻoiaʻiʻo ma hope o ke komo ʻana i nā huaʻōlelo hewa ʻole 30, ʻike ʻole ʻia ka ʻikepili mea hoʻohana.
Hanana 1: e noi i kahi ʻōlelo huna
He mea ʻē paha ia, akā hiki iā ʻoe ke ʻike i ka ʻōlelo huna ma ka nīnau wale ʻana i ka mea nona ka hāmeʻa. Hōʻike nā ʻikepili ma kahi o 70% o nā mea nona nā polokalamu kelepona makemake e kaʻana like i kā lākou ʻōlelo huna. ʻOi loa inā hoʻopōkole ia i ka manawa noiʻi a, no laila, e hoʻihoʻi wikiwiki ka mea nona kāna hāmeʻa. Inā ʻaʻole hiki ke nīnau i ka mea nona ka ʻōlelo huna (no ka laʻana, ua make ka mea nona ka hāmeʻa) a hōʻole paha ʻo ia e hōʻike, hiki ke loaʻa ka ʻōlelo huna mai kona ʻohana pili. E like me ke kānāwai, ʻike nā ʻohana i ka ʻōlelo huna a i ʻole hiki ke hōʻike i nā koho hiki.
Manaʻo palekana: He kī nui kāu ʻōlelo huna no nā ʻikepili a pau, me ka ʻikepili uku. He manaʻo maikaʻi ʻole ke kamaʻilio ʻana, ka hoʻouna ʻana, ke kākau ʻana ma nā ʻelele koke.
Hana 2: e nānā i ka ʻōlelo huna
Hiki ke ʻike ʻia ka ʻōlelo huna i ka wā e hoʻohana ai ka mea nona ka hāmeʻa. ʻOiai inā ʻoe e hoʻomanaʻo i ka ʻōlelo huna (ʻano a i ʻole kiʻi) i kahi hapa wale nō, e hōʻemi nui kēia i ka helu o nā koho hiki, e hiki ai iā ʻoe ke koho wikiwiki.
ʻO kahi ʻano o kēia ʻano ka hoʻohana ʻana i nā kiʻi CCTV e hōʻike ana i ka mea nāna e wehe i ka hāmeʻa me ka hoʻohana ʻana i kahi ʻōlelo huna [2]. ʻO ka algorithm i wehewehe ʻia ma ka hana "Cracking Android Pattern Lock in Five Attempts" [2], ma ka nānā ʻana i nā wikiō wikiō, hiki iā ʻoe ke koho i nā koho no kahi huaʻōlelo kiʻi a wehe i ka hāmeʻa i nā hoʻāʻo he nui (ma ke ʻano he kānāwai, ʻaʻole pono kēia. ma mua o elima ho'āʻo). Wahi a nā mea kākau, "ʻoi aku ka paʻakikī o ka ʻōlelo huna, ʻoi aku ka maʻalahi o ke kiʻi ʻana."
Manaʻo palekana: ʻAʻole maikaʻi ka hoʻohana ʻana i kahi kī kiʻi. He paʻakikī loa ka ʻōlelo huna alphanumeric e nānā.
Kaʻina 3: huli i ka ʻōlelo huna
Hiki ke loaʻa ka ʻōlelo huna ma nā moʻolelo o ka mea nona ka mea (nā faila ma ke kamepiula, ma ka diary, ma nā ʻāpana pepa e waiho ana i nā palapala). Inā hoʻohana kekahi kanaka i nā mea kelepona like ʻole a loaʻa iā lākou nā ʻōlelo huna like ʻole, a laila i kekahi manawa i loko o ke keʻena pākaukau o kēia mau polokalamu a i ʻole ma waena o ka pahu kelepona a me ka hihia, hiki iā ʻoe ke loaʻa nā ʻāpana pepa me nā huaʻōlelo i kākau ʻia:
Manaʻo palekana: ʻAʻole pono e mālama i kahi "notebook" me nā ʻōlelo huna. He manaʻo maikaʻi ʻole kēia, ke ʻike ʻole ʻia kēia mau ʻōlelo huna a pau e hōʻemi i ka nui o nā hoʻāʻo wehe.
Hanana 4: nā manamana lima (Smudge attack)
Hāʻawi kēia ʻano hana iā ʻoe e ʻike i nā ʻāpana momona o nā lima ma ka hōʻike o ka hāmeʻa. Hiki iā ʻoe ke ʻike iā lākou ma ka mālama ʻana i ka pale o ka hāmeʻa me ka pauka manamana lima māmā (ma kahi o ka pauda forensic kūikawā, hiki iā ʻoe ke hoʻohana i ka pauda pēpē a i ʻole nā pauka keʻokeʻo ʻole ʻē aʻe o ke keʻokeʻo a i ʻole ke kala hina hina) a i ʻole ma ka nānā ʻana i ka pale o ka. mea i nā kukuna oblique o ka malamalama. Ke nānā nei i nā kūlana pili o nā paʻi lima a me ka loaʻa ʻana o ka ʻike hou e pili ana i ka mea nona ka hāmeʻa (no ka laʻana, ka ʻike ʻana i kona makahiki hānau), hiki iā ʻoe ke hoʻāʻo e kuhi i kahi kikokikona a i ʻole ka ʻōlelo huna. ʻO kēia ke ʻano o ka waiho ʻana i ka momona momona ma kahi hōʻike kelepona ma ke ʻano o kahi leka Z:
Manaʻo palekana: E like me kā mākou i ʻōlelo ai, ʻaʻole maikaʻi ka ʻōlelo huna, e like me nā aniani me kahi uhi oleophobic maikaʻi ʻole.
Hanana 5: manamana lima
Inā hiki ke wehe ʻia ka hāmeʻa me kahi manamana lima, a loaʻa i ka mea noiʻi nā laʻana paʻi lima o ka mea nona ka mea, a laila hiki ke hana ʻia kahi kope 3D o ka manamana lima o ka mea nona ka manamana lima a hoʻohana ʻia e wehe i ka hāmeʻa [3]:
No ka hoʻohālike piha ʻana o ka manamana lima o ke kanaka ola - no ka laʻana, ke ʻike mau ka mea ʻike manamana lima o ka atamai - ua kau ʻia ke kumu hoʻohālike 3D (leans) i ka manamana lima o ke kanaka ola.
ʻO ka mea nona ka hāmeʻa, ʻoiai e poina iā ia ka ʻōlelo huna laka pale, hiki iā ia ke wehe iā ia iho me ka hoʻohana ʻana i kona manamana lima. Hiki ke hoʻohana i kēia i kekahi mau hihia kahi hiki ʻole i ka mea nona ke hāʻawi i ka ʻōlelo huna akā makemake ʻo ia e kōkua i ka mea noiʻi e wehe i kā lākou hāmeʻa.
Pono ka mea noiʻi e hoʻomanaʻo i nā hanauna o nā mea ʻike i hoʻohana ʻia i nā hiʻohiʻona like ʻole o nā polokalamu kelepona. Hiki ke hoʻoulu ʻia nā hiʻohiʻona kahiko e nā manamana lima, ʻaʻole pono ka mea nona ka hāmeʻa. ʻO nā mea kani kani ultrasonic o kēia wā, ma kahi ʻē aʻe, e nānā hohonu a maopopo. Eia kekahi, ʻo ka nui o nā mea ʻike ma lalo o ka ʻaoʻao o kēia manawa he mau kāmele CMOS wale nō ʻaʻole hiki ke nānā i ka hohonu o ke kiʻi, kahi e maʻalahi ai ka hoʻopunipuni.
Manaʻo palekana: Inā he manamana lima, a laila he mea kani ultrasonic wale nō. Akā mai poina ʻoi aku ka maʻalahi o ka kau ʻana i kou manamana lima ma mua o ka maka.
Hanana 6: "jerk" (Mug attack)
Ua wehewehe ʻia kēia ʻano e ka mākaʻi Pelekania [4]. Aia i loko o ka nānā huna ʻana o ka mea i manaʻo ʻia. ʻO ka manawa e wehe ai ka mea hoʻopiʻi i kāna kelepona, kāʻili ka luna lole maʻemaʻe iā ia mai nā lima o ka mea nona a pale aku i ka paʻa ʻana a hiki i ka hāʻawi ʻia ʻana i nā loea.
Manaʻo palekana: Manaʻo wau inā e hoʻohana ʻia nā ʻano hana e kūʻē iā ʻoe, a laila hewa nā mea. Akā ma ʻaneʻi pono ʻoe e hoʻomaopopo i ka hoʻohaʻahaʻa ʻole ʻana i kēia ʻano hana. A, no ka laʻana, ke kaomi pinepine ʻana i ka pihi laka ma ka iPhone e hoʻomaka i ke ʻano SOS, kahi i hoʻohui i nā mea āpau e hoʻopau iā FaceID a koi i kahi passcode.
Kaʻina 7: nā hewa i nā algorithms kaohi ʻana i nā hāmeʻa
Ma nā nūhou nūhou o nā kumuwaiwai kūikawā, hiki iā ʻoe ke ʻike pinepine i nā memo e hōʻike ana i kekahi mau hana me ka hāmeʻa e wehe i kāna pale. No ka laʻana, hiki ke wehe ʻia ka pale laka o kekahi mau mea e ke kelepona komo. ʻO ka hemahema o kēia ʻano hana, ʻo nā mea nāwaliwali i ʻike ʻia, ma ke ʻano he kānāwai, e hoʻopau koke ʻia e nā mea hana.
ʻO kahi laʻana o kahi ala wehe no nā polokalamu kelepona i hoʻokuʻu ʻia ma mua o 2016 ʻo ia ka hoʻoheheʻe pākaukau. Ke haʻahaʻa ka pākaukau, e wehe ka hāmeʻa a koi iā ʻoe e hoʻololi i nā hoʻonohonoho mana. I kēia hihia, pono ʻoe e hele wikiwiki i ka ʻaoʻao me nā hoʻonohonoho palekana a hoʻopau i ka laka pale [5].
Manaʻo palekana: mai poina e hoʻohou i ka OS o kāu kelepona i ka manawa kūpono, a inā ʻaʻole kākoʻo hou ʻia, e hoʻololi i kāu kelepona.
Ka Papa Hana 8: Nā pilikia ma nā polokalamu ʻaoʻao ʻekolu
Hiki ke hāʻawi piha a ʻāpana paha i ka ʻikepili o kahi hāmeʻa i laka ʻia nā nāwaliwali i loaʻa i nā noi ʻaoʻao ʻekolu i hoʻokomo ʻia ma ka hāmeʻa.
ʻO kahi hiʻohiʻona o ia ʻano nāwaliwali ka ʻaihue o ka ʻikepili mai ka iPhone o Jeff Bezos, ka mea nona ka Amazon. ʻO ka nāwaliwali o ka ʻelele WhatsApp, i hoʻohana ʻia e ka poʻe ʻike ʻole, alakaʻi i ka ʻaihue o ka ʻikepili huna i mālama ʻia i ka hoʻomanaʻo o ka hāmeʻa [6].
Hiki ke hoʻohana ʻia ia mau haʻahaʻa e nā mea noiʻi e hoʻokō i kā lākou mau pahuhopu - e unuhi i ka ʻikepili mai nā mea laka a i ʻole e wehe iā lākou.
Manaʻo palekana: Pono ʻoe e hoʻonui i ka OS wale nō, akā i nā noi āu e hoʻohana ai.
Hanana 9: kelepona hui
Hiki ke wehe ʻia nā polokalamu kelepona ʻoihana e nā luna ʻōnaehana ʻoihana. No ka laʻana, hoʻopili ʻia nā polokalamu kelepona Windows hui i ka moʻokāki Microsoft Exchange o kahi hui a hiki ke wehe ʻia e nā luna hoʻomalu. No nā polokalamu Apple hui, aia kahi lawelawe Mobile Device Management e like me Microsoft Exchange. Hiki i nā luna hoʻomalu ke wehe i kahi polokalamu iOS hui. Eia kekahi, hiki ke hoʻopili wale ʻia nā polokalamu kelepona hui me kekahi mau kamepiula i kuhikuhi ʻia e ka luna hoʻonohonoho i nā hoʻonohonoho kelepona. No laila, me ka ʻole o ka launa pū ʻana me nā luna ʻōnaehana o ka ʻoihana, ʻaʻole hiki ke hoʻopili ʻia kēlā ʻano mea i ke kamepiula o ka mea noiʻi (a i ʻole ka polokalamu a me ka ʻōnaehana lako no ka ʻohi ʻikepili forensic).
Manaʻo palekana: He ʻino a maikaʻi ʻo MDM ma ke ʻano o ka pale. Hiki i ka luna hoʻomalu MDM ke hoʻonohonoho hou i kahi mea hana. I kēlā me kēia hihia, ʻaʻole pono ʻoe e mālama i ka ʻikepili pilikino koʻikoʻi ma kahi ʻoihana hui.
Hana 10: ʻike mai nā mea ʻike
Ke nānā nei i ka ʻike i loaʻa mai nā mea ʻike o ka hāmeʻa, hiki iā ʻoe ke koho i ka ʻōlelo huna i ka hāmeʻa me ka hoʻohana ʻana i kahi algorithm kūikawā. Ua hōʻike ʻo Adam J. Aviv i ka hiki ke hoʻouka ʻia me ka hoʻohana ʻana i ka ʻikepili i loaʻa mai ka accelerometer o ka atamai. I ka papa o ka noiʻi, ua hoʻokō ka ʻepekema e hoʻoholo pololei i ka ʻōlelo huna symbolic ma 43% o nā hihia, a me ka password kiʻi - ma 73% [7].
Manaʻo palekana: E makaʻala i nā polokalamu āu e ʻae ai e hahai i nā mea ʻike like ʻole.
Hanana 11: wehe maka
E like me ke ʻano o kahi manamana lima, ʻo ka kūleʻa o ka wehe ʻana i kahi hāmeʻa me ka hoʻohana ʻana i ka ʻenehana FaceID e pili ana i nā mea ʻike a me nā mea hana makemakika i hoʻohana ʻia i kahi polokalamu kelepona. No laila, ma ka hana "Gezichtsherkenning op smartphone niet altijd veilig" [8], ua hōʻike nā mea noiʻi ua wehe ʻia kekahi o nā smartphones i aʻo ʻia ma ka hōʻike ʻana i ke kiʻi o ka mea nona ke kiʻi paʻi kiʻi. Hiki kēia ke hoʻohana ʻia hoʻokahi pahupaʻi kiʻi mua no ka wehe ʻana, ʻaʻohe hiki ke nānā i ka ʻikepili hohonu kiʻi. Ua koi ʻia ʻo Samsung, ma hope o ke ʻano o nā paʻi kiʻekiʻe a me nā wikiō ma YouTube, e hoʻohui i kahi ʻōlelo aʻo i ka firmware o kāna mau kelepona. Wehe maka maka Samsung:
Hiki ke wehe ʻia nā hiʻohiʻona ʻoi aku ka maikaʻi me ka hoʻohana ʻana i ka mask a i ʻole ke aʻo ʻana iā ia iho. No ka laʻana, hoʻohana ka iPhone X i kahi ʻenehana TrueDepth kūikawā [9]: ʻo ka projector o ka hāmeʻa, me ka hoʻohana ʻana i ʻelua kāmela a me kahi emitter infrared, e hoʻolālā i kahi mākia i ʻoi aku ma mua o 30 mau helu ma ka maka o ka mea nona. Hiki ke wehe ʻia ia mea me ka hoʻohana ʻana i kahi mask nona nā contours e like me nā contours o ka maka o ka mea hoʻohana. iPhone wehe i ka mask [000]:
No ka mea paʻakikī loa kēia ʻōnaehana a ʻaʻole hana ma lalo o nā kūlana kūpono (ʻo ka ʻelemakule kūlohelohe o ka mea nona ka mea, hoʻololi i ka hoʻonohonoho helehelena ma muli o ka hōʻike ʻana o nā manaʻo, luhi, kūlana olakino, a me nā mea ʻē aʻe), koi ʻia e aʻo mau iā ia iho. No laila, inā paʻa kekahi kanaka i ka hāmeʻa i wehe ʻole ʻia i mua ona, e hoʻomanaʻo ʻia kona maka e like me ka maka o ka mea nona ka hāmeʻa a i ka wā e hiki mai ana e hiki iā ia ke wehe i ke kelepona me ka hoʻohana ʻana i ka ʻenehana FaceID.
Manaʻo palekana: mai hoʻohana i ka wehe ʻana e ka "kiʻi" - nā ʻōnaehana wale nō me nā mea nānā maka piha piha (FaceID mai Apple a me nā analogues ma nā polokalamu Android).
ʻO ka manaʻo nui ʻaʻole e nānā i ke kāmela, e nānā wale aku. ʻOiai ʻoe e pani i ka maka hoʻokahi, hāʻule nui ka manawa e wehe ai, e like me ke alo o nā lima ma ka maka. Eia kekahi, hāʻawi ʻia nā hoʻāʻo 5 wale nō e wehe i ka maka (FaceID), a laila pono ʻoe e komo i kahi passcode.
Ka Papa Hana 12: Hoʻohana i nā Leaks
He ala maikaʻi loa nā waihona ʻōlelo huna huna e hoʻomaopopo ai i ka noʻonoʻo o ka mea nona ka mea hana (me ka manaʻo e loaʻa i ka mea noiʻi ka ʻike e pili ana i nā leka uila o ka mea nona ka polokalamu). Ma ka laʻana ma luna, ua hoʻihoʻi ʻia kahi hulina no kahi leka uila i ʻelua mau ʻōlelo huna like i hoʻohana ʻia e ka mea nona. Hiki ke manaʻo ʻia hiki ke hoʻohana ʻia ka ʻōlelo huna 21454162 a i ʻole nā mea hoʻopukapuka (e laʻa, 2145 a i ʻole 4162) ma ke ʻano he code laka paʻa. (Ma ka huli ʻana i ka leka uila o ka mea nona nā waihona leak e hōʻike ana i nā huaʻōlelo i hoʻohana ʻia e ka mea nona, me ka laka ʻana i kāna kelepona paʻalima.)
Manaʻo palekana: e hana me ka wikiwiki, e hahai i ka ʻikepili e pili ana i nā leaks a hoʻololi i nā ʻōlelo huna i ʻike ʻia i nā leaks i ka manawa kūpono!
Ka Papa Hana 13: Nā ʻōlelo huna laka paʻa maʻamau
Ma ke ʻano he kānāwai, ʻaʻole lawe ʻia hoʻokahi kelepona paʻa mai ka mea nona, akā he nui. ʻO ka manawa pinepine he mau haneli o ia mau mea hana. I kēia hihia, hiki iā ʻoe ke koho i ka ʻōlelo huna no kahi mea palupalu a hoʻāʻo e hoʻopili iā ia i nā kelepona ʻē aʻe a me nā papa i hopu ʻia mai ka mea nona hoʻokahi.
Ke kālailai ʻana i ka ʻikepili i lawe ʻia mai nā polokalamu kelepona, hōʻike ʻia ia ʻikepili i nā papahana forensic (pinepine ʻoiai ke unuhi ʻana i ka ʻikepili mai nā mea paʻa i ka hoʻohana ʻana i nā ʻano nāwaliwali).
E like me kāu e ʻike ai ma ke kiʻi kiʻi o kahi ʻāpana o ka puka makani hana o ka papahana UFED Physical Analyzer, ua laka ʻia ka hāmeʻa me kahi code PIN fgkl maʻamau.
Mai haʻalele i nā mea hoʻohana ʻē aʻe. No ka laʻana, ma ke kālailai ʻana i nā ʻōlelo huna i mālama ʻia i loko o ka huna huna pūnaewele o ka lolouila o ka mea nona ka polokalamu kelepona, hiki i kekahi ke hoʻomaopopo i nā loina hana huaʻōlelo i mālama ʻia e ka mea nona. Hiki iā ʻoe ke nānā i nā ʻōlelo huna i mālama ʻia ma kāu kamepiula me ka hoʻohana ʻana i ka pono NirSoft [11].
Eia kekahi, ma ke kamepiula (laptop) o ka mea nona ka polokalamu kelepona, aia paha nā faila Lockdown e hiki ke kōkua i ka loaʻa ʻana i kahi polokalamu kelepona paʻa Apple. E kūkākūkā hou ʻia kēia ʻano hana.
Manaʻo palekana: hoʻohana i nā ʻōlelo huna ʻokoʻa, ʻokoʻa ma nā wahi āpau.
Hanana 14: Nā PIN maʻamau
E like me ka mea i hōʻike mua ʻia, hoʻohana pinepine nā mea hoʻohana i nā huaʻōlelo maʻamau: nā helu kelepona, kāleka kāleka, nā code PIN. Hiki ke hoʻohana ʻia ia ʻike e wehe i ka mea i hāʻawi ʻia.
Inā pau nā mea ʻē aʻe, hiki iā ʻoe ke hoʻohana i kēia ʻike: ua hana nā mea noiʻi i kahi kānana a loaʻa nā code PIN kaulana loa (ua uhi ʻia nā code PIN i hāʻawi ʻia i ka 26,83% o nā ʻōlelo huna a pau) [12]:
PIN
Ka pinepine, %
1234
10,713
1111
6,016
0000
1,881
1212
1,197
7777
0,745
1004
0,616
2000
0,613
4444
0,526
2222
0,516
6969
0,512
9999
0,451
3333
0,419
5555
0,395
6666
0,391
1122
0,366
1313
0,304
8888
0,303
4321
0,293
2001
0,290
1010
0,285
ʻO ka hoʻohana ʻana i kēia papa inoa o nā code PIN i kahi hāmeʻa i paʻa e wehe iā ia me ~26% paha.
Manaʻo palekana: E nānā i kāu PIN e like me ka papa ma luna a inā ʻaʻole like ia, e hoʻololi nō, no ka mea, liʻiliʻi loa nā helu 4 e nā maʻamau o 2020.
Hanana 15: Nā huaʻōlelo kiʻi maʻamau
E like me ka mea i hōʻike ʻia ma luna nei, loaʻa ka ʻikepili mai nā kāmela kiaʻi kahi e hoʻāʻo ai ka mea nona ka hāmeʻa e wehe iā ia, hiki iā ʻoe ke kiʻi i kahi kumu wehe i nā hoʻāʻo ʻelima. Eia kekahi, e like me ka loaʻa ʻana o nā code PIN maʻamau, aia nā ʻano maʻamau e hiki ke hoʻohana ʻia e wehe i nā polokalamu kelepona paʻa [13, 14].
Nā hiʻohiʻona maʻalahi [14]:
Nā hiʻohiʻona o ka paʻakikī waena [14]:
Nā hiʻohiʻona paʻakikī [14]:
ʻO ka papa inoa o nā papa kiʻi kaulana loa e like me ka mea noiʻi ʻo Jeremy Kirby [15].
3>2>5>8>7
1>4>5>6>9
1>4>7>8>9
3>2>1>4>5>6>9>8>7
1>4>7>8>9>6>3
1>2>3>5>7>8>9
3>5>6>8
1>5>4>2
2>6>5>3
4>8>7>5
5>9>8>6
7>4>1>2>3>5>9
1>4>7>5>3>6>9
1>2>3>5>7
3>2>1>4>7>8>9
3>2>1>4>7>8>9>6>5
3>2>1>5>9>8>7
1>4>7>5>9>6>3
7>4>1>5>9>6>3
3>6>9>5>1>4>7
7>4>1>5>3>6>9
5>6>3>2>1>4>7>8>9
5>8>9>6>3>2>1>4>7
7>4>1>2>3>6>9
1>4>8>6>3
1>5>4>6
2>4>1>5
7>4>1>2>3>6>5
Ma kekahi mau polokalamu kelepona, ma waho aʻe o ke code kiʻi, hiki ke hoʻonohonoho ʻia kahi code PIN hou. I kēia hihia, inā ʻaʻole hiki ke loaʻa kahi code kiʻi, hiki i ka mea noiʻi ke kaomi i ke pihi PIN code hou (PIN lua) ma hope o ke komo ʻana i ke kiʻi kiʻi hewa a hoʻāʻo e ʻimi i kahi PIN hou.
Manaʻo palekana: ʻOi aku ka maikaʻi ʻaʻole e hoʻohana i nā kī kiʻi.
Ka Papa Hana 16: Nā ʻōlelo huna huahelu
Inā hiki ke hoʻohana ʻia kahi huaʻōlelo alphanumeric ma ka hāmeʻa, a laila hiki i ka mea nona ke hoʻohana i kēia mau ʻōlelo huna kaulana e like me ke code laka [16]:
- 123456
- hua huna
- 123456789
- 12345678
- 12345
- 111111
- 1234567
- maikaʻi
- qwerty
- aloha wau iā 'oe
- Alii
- Keʻena Luna
- Welina
- 666666
- abc123
- pôpeku
- 123123
- Keko
- 654321
- ! @ # $% ^ & *
- Kehaulani
- Aa123456
- Donald.
- password1
- qwerty123
Manaʻo palekana: e hoʻohana wale i nā huaʻōlelo paʻakikī, ʻokoʻa me nā huaʻōlelo kūikawā a me nā hihia like ʻole. E nānā inā hoʻohana ʻoe i kekahi o nā ʻōlelo huna ma luna. Inā hoʻohana ʻoe - e hoʻololi iā ia i kahi mea hilinaʻi.
Kaʻina 17: kapuaʻi a i ʻole mālama kūloko
Inā ʻaʻole hiki ke wehe i ka ʻikepili mai kahi mea paʻa, hiki i ka poʻe lawehala ke ʻimi i kāna mau kope kope ma nā kamepiula o ka mea nona ka hāmeʻa a i ʻole i nā waihona kapuaʻi e pili ana.
ʻO ka manawa pinepine, ʻo nā mea nona nā kelepona Apple, i ka wā e hoʻopili ai iā lākou i kā lākou kamepiula, ʻaʻole ʻike e hiki ke hana ʻia kahi kope kope kūloko a i ʻole ke ao o ka hāmeʻa i kēia manawa.
ʻAʻole hiki i ka Google a me Apple cloud storage ke mālama i nā ʻikepili mai nā polokalamu wale nō, akā i nā huaʻōlelo i mālama ʻia e ka hāmeʻa. Hiki i ka unuhi ʻana i kēia mau ʻōlelo huna ke kōkua i ke koho ʻana i ke code laka o ka polokalamu kelepona.
Mai ka Keychain i mālama ʻia ma iCloud, hiki iā ʻoe ke unuhi i ka ʻōlelo huna huna huna i hoʻonohonoho ʻia e ka mea nona ka mea nona, e like paha me ka PIN laka pale.
Inā huli ka hoʻokō kānāwai iā Google a me Apple, hiki i nā hui ke hoʻololi i ka ʻikepili i loaʻa, e hōʻemi nui ana i ka pono e wehe i ka hāmeʻa, no ka mea, ua loaʻa i nā luna kānāwai ka ʻikepili.
No ka laʻana, ma hope o ka hoʻouka kaua ʻana ma Pensocon, ua hāʻawi ʻia nā kope o ka ʻikepili i mālama ʻia ma iCloud i ka FBI. Mai ka ʻōlelo a Apple:
"I loko o nā hola o ka noi mua a ka FBI, ma Dekemaba 6, 2019, hāʻawi mākou i kahi ākea o ka ʻike e pili ana i ka hoʻokolokolo. Mai ka lā 7 o Kekemapa a hiki i ka lā 14 o Kekemapa, ua loaʻa iā mākou ʻeono mau noi kānāwai hou a hāʻawi i ka ʻike i ka pane ʻana, me ka iCloud backups, ka ʻike moʻokāki, a me nā kālepa no nā moʻokāki he nui.
Ua pane koke mākou i kēlā me kēia noi, pinepine i loko o nā hola, e hoʻololi i ka ʻike me nā keʻena FBI ma Jacksonville, Pensacola, a me New York. Ma ke noi o ka hoʻokolokolo, ua loaʻa nā gigabytes o ka ʻike, a hāʻawi mākou i nā mea noiʻi. " [17, 18, 19]
Manaʻo palekana: ʻO nā mea a pau āu e hoʻouna ai i hoʻopili ʻole ʻia i ke ao hiki ke hoʻohana ʻia e kūʻē iā ʻoe.
Hanana 18: moʻokāki Google
He kūpono kēia ʻano no ka wehe ʻana i kahi huaʻōlelo kiʻi e laka ana i ka pale o kahi polokalamu kelepona e holo ana i ka ʻōnaehana hana Android. No ka hoʻohana ʻana i kēia ʻano, pono ʻoe e ʻike i ka inoa inoa a me ka ʻōlelo huna o ka moʻokāki Google o ka mea nona ka polokalamu. ʻO ke kūlana ʻelua: pono e hoʻopili ʻia ka hāmeʻa i ka Pūnaewele.
Inā ʻoe e hoʻokomo i ka ʻōlelo huna kiʻi hewa i nā manawa he nui i ka lālani, e hāʻawi ka hāmeʻa e hoʻonohonoho hou i ka ʻōlelo huna. Ma hope o kēlā, pono ʻoe e hoʻopaʻa inoa i ka moʻokāki mea hoʻohana, e wehe i ka pale o ka hāmeʻa [5].
Ma muli o ka ʻokoʻa o nā hāmeʻa hāmeʻa, nā ʻōnaehana hana Android, a me nā hoʻonohonoho palekana hou aʻe, pili kēia ʻano i nā mea he nui.
Inā ʻaʻohe ʻōlelo huna a ka mea noiʻi no ka moʻokāki Google o ka mea nona ka hāmeʻa, hiki iā lākou ke hoʻāʻo e hoʻihoʻi hou me ka hoʻohana ʻana i nā ʻano hoʻihoʻi ʻōlelo huna maʻamau no ia mau moʻokāki.
Inā ʻaʻole pili ka hāmeʻa i ka Pūnaewele i ka manawa o ke aʻo ʻana (no ka laʻana, paʻa ʻia ke kāleka SIM a ʻaʻole lawa ke kālā ma luna), a laila hiki ke hoʻopili ʻia ia mea me Wi-Fi me ka hoʻohana ʻana i nā ʻōlelo aʻe:
- e kaomi i ka ikona "Emergency Call".
- Kāhea *#*#7378423#*#*
- koho i ka ho'āʻo lawelawe - Wlan
- hoʻohui i kahi pūnaewele Wi-Fi i loaʻa [5]
Manaʻo palekana: Mai poina e hoʻohana i ka hōʻoia ʻelua-factor inā hiki, a i kēia hihia, ʻoi aku ka maikaʻi o ka loulou i ka noi, ʻaʻole i ke code ma o SMS.
Hanana 19: mooolelo malihini
Hiki ke loaʻa nā moʻokāki he nui nā polokalamu kelepona e holo ana i ka Android 5 a i luna. ʻAʻole hiki ke laka ʻia nā ʻike moʻokāki hou me kahi PIN a i ʻole ke kumu. No ka hoʻololi, pono ʻoe e kaomi i ka ikona moʻokāki ma ke kihi ʻākau i luna a koho i kahi moʻokāki ʻē aʻe:
No kekahi moʻokāki hou, hiki ke kaohi ʻia ke komo ʻana i kekahi ʻikepili a i ʻole nā noi.
Manaʻo palekana: he mea nui e hoʻonui i ka OS. I nā mana hou o Android (9 a piʻi aʻe me Iulai 2020 mau pale palekana), ʻaʻole hāʻawi ka moʻokāki malihini i nā koho.
Keʻano 20: nā lawelawe kūikawā
ʻO nā hui e hoʻomohala ana i nā papahana forensic kūikawā, ma waena o nā mea ʻē aʻe, hāʻawi i nā lawelawe no ka wehe ʻana i nā polokalamu kelepona a me ka lawe ʻana i ka ʻikepili mai ia mau mea [20, 21]. ʻO nā hiki o ia mau lawelawe he nani wale. Hiki iā lākou ke hoʻohana no ka wehe ʻana i nā hiʻohiʻona kiʻekiʻe o nā polokalamu Android a me iOS, a me nā mea hana i ke ʻano hoʻihoʻi (kahi i komo ai ka hāmeʻa ma hope o ka nui o nā hoʻāʻo ʻana i ka ʻōlelo huna). ʻO ka hemahema o kēia ʻano ʻo ke kumukūʻai kiʻekiʻe.
He ʻāpana mai kahi ʻaoʻao pūnaewele ma ka pūnaewele o Cellebrite e wehewehe ana i nā mea hana e hiki ai iā lākou ke kiʻi i ka ʻikepili mai. Hiki ke wehe ʻia ka hāmeʻa ma ka hale hana o ka mea hoʻomohala (Cellebrite Advanced Service (CAS)) [20]:
No ia lawelawe, pono e hāʻawi ʻia ka hāmeʻa i ke keʻena kūloko (a i ʻole poʻo) o ka hui. Hiki ke haʻalele i ka mea akamai i ka mea kūʻai aku. E like me ke kānāwai, hoʻokahi lā ka haki ʻana i ke code laka pale.
Manaʻo palekana: ʻaneʻane hiki ʻole ke pale iā ʻoe iho, koe wale nō ka hoʻohana ʻana i kahi huaʻōlelo alphanumeric ikaika a me ka hoʻololi makahiki o nā polokalamu.
Kūkākūkā nā poʻe loea PS Group-IB Laboratory e pili ana i kēia mau hihia, nā mea hana a me nā hiʻohiʻona pono ʻē aʻe he nui i ka hana a kahi loea forensic computer ma ke ʻano he papa aʻo. . Ma hope o ka hoʻopau ʻana i kahi papa 5-lā a i ʻole 7 mau lā, hiki i nā haumāna puka ke hana pono i ka noiʻi forensic a pale i nā hanana cyber i kā lākou hui.
Hana PPS e pili ana i ka palekana ʻike, nā hacker, APT, cyber attacks, scammers a me nā pōā. Nā noiʻi ʻanuʻu, nā hihia kūpono e hoʻohana ana i nā ʻenehana Group-IB a me nā ʻōlelo aʻoaʻo e pili ana i ka lilo ʻole ʻana i mea pōʻino. Hoʻohui!
Pūnaewele
- ʻO Guixin Yey, Zhanyong Tang, Dingyi Fangy, Xiaojiang Cheny, Kwang Kimz, Ben Taylorx, Zheng Wang.
- Dominic Casciani, Gaetan Portal.
- Anatoly Alizar.
- Maria Nefedova.
- Anton Makarov. Kāohi i ka ʻōlelo huna ma nā polokalamu Android
- Jeremy Kirby.
- Andrey Smirnov.
- Maria Nefedova.
Source: www.habr.com