TEMPEST thiab EMSEC: puas tuaj yeem siv hluav taws xob nthwv dej hauv kev tawm tsam cyber?

TEMPEST thiab EMSEC: puas tuaj yeem siv hluav taws xob nthwv dej hauv kev tawm tsam cyber?

Venezuela tsis ntev los no tau ntsib series ntawm fais fab tuag, uas tshuav 11 lub xeev ntawm lub tebchaws no tsis muaj hluav taws xob. Txij thaum pib ntawm qhov xwm txheej no, tsoomfwv NicolΓ‘s Maduro tau lees tias nws yog kev ua ntawm sabotage, uas tau ua los ntawm electromagnetic thiab cyber attacks ntawm lub teb chaws hluav taws xob tuam txhab Corpoelec thiab nws cov fais fab nroj tsuag. Ntawm qhov tsis sib xws, tsoomfwv tus kheej tshaj tawm ntawm Juan GuaidΓ³ tsuas yog sau tawm qhov xwm txheej li "ineffectiveness [thiab] tsis ua hauj lwm ntawm tsoom fwv".

Yog tsis muaj kev tsom xam tsis ncaj ncees thiab qhov tob ntawm qhov xwm txheej, nws yog qhov nyuaj heev los txiav txim siab seb qhov kev puas tsuaj no yog tshwm sim los ntawm kev puas tsuaj lossis puas yog tshwm sim los ntawm qhov tsis muaj kev saib xyuas. Txawm li cas los xij, cov lus iab liam ntawm kev iab liam ua rau muaj ntau cov lus nug nthuav txog kev ruaj ntseg cov ntaub ntawv. Ntau qhov kev tswj hwm hauv cov txheej txheem tseem ceeb, xws li cov chaw tsim hluav taws xob, raug kaw thiab yog li tsis muaj kev sib txuas sab nraud rau Is Taws Nem. Yog li cov lus nug tshwm sim: cyber attackers puas tuaj yeem nkag mus rau kaw IT systems yam tsis tau txuas ncaj qha rau lawv lub computer? Cov lus teb yog yog. Hauv qhov no, electromagnetic nthwv dej tuaj yeem yog qhov kev tawm tsam vector.

Yuav ua li cas rau "catch" electromagnetic hluav taws xob


Tag nrho cov khoom siv hluav taws xob tsim hluav taws xob nyob rau hauv daim ntawv ntawm electromagnetic thiab acoustic signals. Nyob ntawm ntau yam, xws li kev ncua deb thiab muaj kev cuam tshuam, cov khoom siv eavesdropping tuaj yeem "nrhais" cov cim los ntawm cov khoom siv no siv cov kav hlau txais xov tshwj xeeb lossis cov microphones rhiab heev (hauv cov teeb liab acoustic) thiab ua lawv kom rho tawm cov ntaub ntawv tseem ceeb. Cov khoom siv no suav nrog cov saib xyuas thiab cov keyboards, thiab yog li lawv tuaj yeem siv los ntawm cyber criminals.

Yog tias peb tham txog kev saib xyuas, tom qab ntawd rov qab rau xyoo 1985, tus kws tshawb fawb Wim van Eyck luam tawm thawj cov ntaub ntawv tsis raug cais tawm hais txog kev nyab xeeb txaus ntshai los ntawm hluav taws xob los ntawm cov khoom siv li no. Raws li koj nco qab, rov qab saib xyuas siv cov kab hluav taws xob cathode (CRTs). Nws txoj kev tshawb fawb pom tau hais tias hluav taws xob los ntawm lub monitor tuaj yeem "nyeem" los ntawm qhov deb thiab siv los tsim kho cov duab pom ntawm lub monitor. Qhov tshwm sim no hu ua van Eyck cuam tshuam, thiab qhov tseeb nws yog ib qho ntawm cov laj thawj, yog vim li cas ntau lub teb chaws, suav nrog Brazil thiab Canada, xav txog kev pov npav hluav taws xob tsis zoo rau kev siv hauv kev xaiv tsa.

TEMPEST thiab EMSEC: puas tuaj yeem siv hluav taws xob nthwv dej hauv kev tawm tsam cyber?
Cov cuab yeej siv nkag mus rau lwm lub khoos phis tawj uas nyob hauv chav tom ntej. Qhov chaw: Tel Aviv University

Txawm hais tias LCD saib hnub no tsim hluav taws xob tsawg dua li CRT saib, kev kawm tsis ntev los no qhia tau tias lawv kuj yog cov neeg tsis muaj zog. Ntxiv mus, Cov kws kho mob tshwj xeeb los ntawm Tel Aviv University (Israel) tau qhia meej qhov no. Lawv tuaj yeem nkag mus rau cov ntsiab lus encrypted ntawm lub laptop nyob rau hauv chav tom ntej siv cov khoom siv yooj yim uas raug nqi ib ncig ntawm US $ 3000, suav nrog lub kav hlau txais xov, lub suab nrov thiab lub laptop nrog cov teeb liab tshwj xeeb ua software.

Ntawm qhov tod tes, cov keyboards lawv tus kheej tuaj yeem ua tau rhiab heev los cuam tshuam lawv cov hluav taws xob. Qhov no txhais tau tias muaj kev pheej hmoo ntawm cyber-attacks nyob rau hauv uas cov neeg tawm tsam tuaj yeem rov qab nkag mus rau cov ntaub ntawv pov thawj thiab cov passwords los ntawm kev txheeb xyuas cov yuam sij twg raug nias ntawm cov keyboard.

TEMPEST thiab EMSEC


Kev siv hluav taws xob los rho tawm cov ntaub ntawv muaj nws thawj daim ntawv thov thaum Tsov Rog Thoob Ntiaj Teb thib XNUMX, thiab nws tau cuam tshuam nrog cov xov tooj ntawm tes. Cov txheej txheem no tau siv dav thoob plaws hauv Tsov Rog Txias nrog cov cuab yeej siv siab dua. Piv txwv li, declassified NASA cov ntaub ntawv los ntawm 1973 piav qhia txog yuav ua li cas, xyoo 1962, ib tus neeg saib xyuas kev ruaj ntseg ntawm US Embassy hauv Nyij Pooj tau pom tias lub dipole muab tso rau hauv lub tsev kho mob nyob ze yog tsom rau lub tsev teev ntuj kom cuam tshuam nws cov cim.

Tab sis lub tswv yim ntawm TEMPEST xws li pib tshwm nyob rau hauv 70s nrog thawj hluav taws xob kev nyab xeeb cov lus qhia uas tau tshwm sim hauv Asmeskas . Lub npe code no yog hais txog kev tshawb fawb txog kev tsis txhob txwm tso tawm los ntawm cov khoom siv hluav taws xob uas tuaj yeem xau cov ntaub ntawv cais tawm. Tus qauv TEMPEST tau tsim US National Security Agency (NSA) thiab tau coj mus rau qhov tshwm sim ntawm cov qauv kev nyab xeeb uas kuj yog lees txais rau hauv NATO.

Lo lus no feem ntau siv sib hloov nrog lub sij hawm EMSEC (emissions security), uas yog ib feem ntawm cov qauv. COMSEC (kev sib txuas lus ruaj ntseg).

Kev tiv thaiv TEMPEST


TEMPEST thiab EMSEC: puas tuaj yeem siv hluav taws xob nthwv dej hauv kev tawm tsam cyber?
Liab / Dub cryptographic daim duab kos duab rau kev sib txuas lus. Qhov chaw: David Kleidermacher

Ua ntej, TEMPEST kev ruaj ntseg siv rau lub tswv yim cryptographic yooj yim hu ua Red/Black architecture. Lub tswv yim no faib cov tshuab rau hauv cov khoom siv "Liab", uas yog siv los ua cov ntaub ntawv tsis pub lwm tus paub, thiab cov khoom siv "Black", uas xa cov ntaub ntawv tsis muaj kev faib tawm kev ruaj ntseg. Ib lub hom phiaj ntawm kev tiv thaiv TEMPEST yog qhov kev sib cais no, uas cais tag nrho cov khoom, cais cov khoom siv "liab" los ntawm "dub" nrog cov ntxaij lim dej tshwj xeeb.

Qhov thib ob, nws yog ib qho tseem ceeb kom nco ntsoov qhov tseeb tias tag nrho cov khoom siv emit ib theem ntawm hluav taws xob. Qhov no txhais tau hais tias qhov kev tiv thaiv siab tshaj plaws yuav yog kev tiv thaiv tag nrho ntawm qhov chaw, suav nrog cov khoos phis tawj, tshuab thiab cov khoom siv. Txawm li cas los xij, qhov no yuav kim heev thiab siv tsis tau rau ntau lub koom haum. Vim li no, ntau hom phiaj xwm siv tau:

β€’ Kev soj ntsuam zoning: Siv los tshuaj xyuas qib TEMPEST kev ruaj ntseg rau qhov chaw, kev teeb tsa, thiab khoos phis tawj. Tom qab qhov kev ntsuam xyuas no, cov peev txheej tuaj yeem raug coj mus rau cov khoom siv thiab cov khoos phis tawj uas muaj cov ntaub ntawv tseem ceeb tshaj plaws lossis cov ntaub ntawv tsis tau nkag. Ntau lub koom haum tswj hwm kev ruaj ntseg kev sib txuas lus, xws li NSA hauv Asmeskas lossis CCN hauv Spain, lees paub cov txuj ci zoo li no.

β€’ Tiv thaiv thaj chaw: Kev ntsuam xyuas zoning yuav qhia tau tias qee qhov chaw uas muaj cov khoos phis tawj tsis ua raws li tag nrho cov kev cai nyab xeeb. Hauv cov xwm txheej zoo li no, ib qho kev xaiv yog los tiv thaiv qhov chaw tag nrho lossis siv cov khoom siv tiv thaiv rau cov khoos phis tawj. Cov txee no yog tsim los ntawm cov khoom tshwj xeeb uas tiv thaiv kev sib kis ntawm hluav taws xob.

β€’ Cov khoos phis tawj nrog lawv tus kheej daim ntawv pov thawj TEMPEST: Qee zaum lub khoos phis tawj yuav nyob hauv qhov chaw ruaj ntseg tab sis tsis muaj kev ruaj ntseg txaus. Txhawm rau txhim kho qib kev ruaj ntseg uas twb muaj lawm, muaj cov khoos phis tawj thiab kev sib txuas lus uas muaj lawv tus kheej TEMPEST ntawv pov thawj, lees paub kev ruaj ntseg ntawm lawv cov khoom siv kho vajtse thiab lwm yam khoom siv.

TEMPEST qhia tau hais tias txawm tias cov tuam txhab lag luam muaj qhov chaw ruaj ntseg ntawm lub cev lossis tsis tau txuas nrog kev sib txuas lus sab nraud, tseem tsis tau lees paub tias lawv muaj kev nyab xeeb tag nrho. Txawm li cas los xij, feem ntau qhov tsis zoo hauv cov txheej txheem tseem ceeb feem ntau yuav cuam tshuam nrog kev tawm tsam ib txwm (piv txwv li, ransomware), uas yog qhov peb. tsis ntev los no qhia. Hauv cov xwm txheej no, nws yooj yim heev kom tsis txhob muaj kev tawm tsam zoo li no los ntawm kev siv cov kev ntsuas tsim nyog thiab cov ntaub ntawv kev ruaj ntseg zoo tshaj nrog kev tiv thaiv siab heev. Kev sib koom ua ke tag nrho cov kev tiv thaiv no yog tib txoj hauv kev los ua kom muaj kev ruaj ntseg ntawm cov tshuab tseem ceeb rau yav tom ntej ntawm lub tuam txhab lossis txawm tias tag nrho lub tebchaws.

Tau qhov twg los: www.hab.com

Ntxiv ib saib