{"id":38148,"date":"2019-10-31T22:21:56","date_gmt":"2019-10-31T19:21:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\/"},"modified":"2019-10-31T22:21:56","modified_gmt":"2019-10-31T19:21:56","slug":"obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","title":{"rendered":"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>U posljednjem desetlje\u0107u, osim metoda otkrivanja tajni ili izvo\u0111enja drugih neovla\u0161tenih radnji, napada\u010di su po\u010deli primjenjivati nenamjernu provalu podataka i manipulaciju procesom izvr\u0161avanja programa putem bo\u010dnih kanala. <\/p>\n<p>Tradicionalne metode napada mogu biti skupe s obzirom na znanje, vrijeme i ra\u010dunalnu snagu. Napadi putem bo\u010dnih kanala, s druge strane, mogu se lak\u0161e izvesti i nisu destruktivni, budu\u0107i da otkrivaju ili upravljaju fizi\u010dkim svojstvima dostupnim tijekom normalnog rada. <\/p>\n<p>Uz pomo\u0107 statisti\u010dkih metoda obrade mjerenja bo\u010dnog kanala, ili uvode\u0107i kvarove u zatvorene kanale mikro\u010dipa, napada\u010d mo\u017ee pristupiti njegovim tajnama unutar nekoliko sati.<\/p>\n<p><img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/5491f086b156ab016e65f4942f470680.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nSvake godine izlazi vi\u0161e od 5.000 milijuna pametnih kartica, na tr\u017ei\u0161tima se pojavljuju nove ugra\u0111ene kriptografske tehnologije, zbog \u010dega raste potreba za osiguravanjem sigurnosti i posla i privatnosti. <\/p>\n<p>U Nizozemskoj, tvrtka Riscure je stvorila sustav Inspector, koji nudi istra\u017eiva\u010dkim laboratorijima, kao i proizvo\u0111a\u010dima, nove visokou\u010dinkovite alate za otkrivanje prijetnji kako bi se osigurala sigurnost. <\/p>\n<p>Sustav Inspector Riscure podr\u017eava razli\u010dite metode analize bo\u010dnih kanala (SCA), poput analize potro\u0161nje energije (SPA\/DPA), sinkronizacije, radiovalova, kao i elektromagnetske analize (EMA) i napade ometanja (FI), poput napona kvara, kvara taktova i manipulacija pomo\u0107u lasera. Ugra\u0111ene funkcije sustava podr\u017eavaju brojne kriptografske algoritme, aplikacijske protokole, su\u010delja i mjera\u010de. <\/p>\n<p>Sustav vam omogu\u0107uje pro\u0161irivanje i implementaciju novih metoda i vlastitih aplikacija za otkrivanje ranjivosti.<\/p>\n<h5>U sustav analize bo\u010dnih kanala Inspector SCA uklju\u010deni su:<\/h5>\n<p><\/p>\n<ul>\n<li> tracer potro\u0161nje energije Power Tracer;<\/li>\n<li> postaja za elektromagnetsko ispitivanje EM Probe Station;<\/li>\n<li> trigera\u010d generatore icWaves;<\/li>\n<li> filter CleanWave;<\/li>\n<li> strujni sonda Current Probe.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Me\u0111u glavnim 'benefitima' mo\u017ee se istaknuti glavni:<\/h5>\n<p><\/p>\n<ul>\n<li>To je jedinstveni integrirani alat za analizu bo\u010dnih kanala i testiranje uno\u0161enjem kvarova.<\/li>\n<li>Inspector is compliant with EMVco and CMVP certification requirements for side-channel testing based on common criteria;<\/li>\n<li>It is an open environment that includes the source code of modules, thereby allowing the modification of existing methods and the inclusion of new testing methods that can be developed by the user for Inspector;<\/li>\n<li>The stable and integrated software and hardware includes high-speed data collection from millions of tracings;<\/li>\n<li>A six-month software release cycle allows users to stay updated on the latest side-channel testing methods in field conditions.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Inspector is released in various versions on a single platform:<\/h5>\n<p><\/p>\n<ul>\n<li><b>Inspector SCA<\/b> provides all necessary options for conducting analysis on side-channel DPA and EMA.<\/li>\n<li><b>Inspector FI <\/b>offers full functionality for fault injection (attack perturbation) as well as differential fault analysis (DFA).<\/li>\n<li><b>Inspector Core and SP<\/b> (signal processing) offers core SCA functionality implemented as separate modules to provide an accessible software package for data collection or subsequent processing.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Inspector SCA<\/h2>\n<p>\nOnce measurement results are obtained, various signal processing methods become available to form numerous high-signal and low-noise tracings. Signal processing functions have been developed that consider subtle differences between the signal processing of electromagnetic tracings, power consumption tracings, and RF tracings. Powerful graphical tools in Inspector allow users to perform temporal analysis or tracing verification, for example, for SPA vulnerability. <\/p>\n<p><img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/5fe7724312eb8f2845228b30daa756fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Performing DPA in ECC implementation<br \/>\n<\/i><br \/>\nFor many security implementations considered resilient to SPA today, testing typically focuses on differential testing methods (i.e., DPA\/CPA). To this end, Inspector offers a wide range of configurable methods concerning a large number of cryptographic algorithms and widely used algorithms such as (3)DES, AES, RSA, and ECC.<\/p>\n<p><img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/1066b611152458069a115225e1fee9d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>EM radiation of the chip to find the best location for DEMA implementation<br \/>\n<\/i><\/p>\n<h5>Key features<\/h5>\n<p><\/p>\n<ul>\n<li>Ovo rje\u0161enje kombinira analizu potro\u0161nje energije (SPA\/DPA\/CPA), elektromagnetskih (SEMA\/DEMA\/EMA-RF) i be\u017ei\u010dnih testnih metoda (RFA).<\/li>\n<li>Brzina prikupljanja podataka zna\u010dajno se pove\u0107ava bliskom integracijom osciloskopa s Inspectorom.<\/li>\n<li>Kako bi se sprije\u010dila jittera taktnog impulsa i randomizacija, koriste se unaprije\u0111ene metode uskla\u0111ivanja.<\/li>\n<li>Korisnik mo\u017ee konfigurirati module kriptoanalize koji podr\u017eavaju primarne napade i napade visokog reda na sve glavne algoritme, poput (3)DES, AES, RSA i ECC.<\/li>\n<li>Koristi se pro\u0161irena podr\u0161ka za algoritme specifi\u010dne za razli\u010dita podru\u010dja, uklju\u010duju\u0107i SEED, MISTY1, DSA, uklju\u010duju\u0107i Camellia.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Hardverska sredstva<\/h5>\n<p>\nOsim radne stanice, PC Inspector koristi hardverska sredstva optimizirana za prikupljanje podataka iz bo\u010dnih kanala i signala:<\/p>\n<ul>\n<li> Tracer potro\u0161nje energije (Power Tracer) za SPA\/DPA\/CPA na pametnim karticama.<\/li>\n<li> EM probna stanica (EM Probe station) za SEMA\/DEMA\/EMA RF.<\/li>\n<li> Strujni sonda (Current Probe) za SPA\/DPA\/CPA na ugra\u0111enim ure\u0111ajima.<\/li>\n<li> CleanWave filter s Micropross MP300 TCL1\/2 za RFA i RF EMA.<\/li>\n<li> IVI-kompatibilni osciloskop.<\/li>\n<\/ul>\n<p>\nProcijenjena sredstva \u010desto zahtijevaju mjerenja, prebacivanja i upravljanje hardverskim sredstvima potrebnim za SCA. Fleksibilni upravitelj hardverskih sredstava alata Inspector, otvoreno razvojno okru\u017eenje i \u0161iroke opcije su\u010delja pru\u017eaju \u010dvrstu osnovu za visokokvalitetna mjerenja kori\u0161tenjem opreme korisnika.<\/p>\n<p><img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/c23c919276492330cb3afbee753ed1d5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector SCA<br \/>\n<\/i><br \/>\nGlavni in\u017eenjer za unutra\u0161nju sigurnost Joh John Connor ovako se izja\u0161njava o sustavu:<br \/>\n\u201cInspector je temeljito promijenio na\u010din na koji procjenjujemo otpornost na\u0161ih proizvoda na diferencijalne <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D1%82%D0%B0%D0%BA%D0%B0_%D0%BF%D0%BE_%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%BE%D0%BF%D0%BE%D1%82%D1%80%D0%B5%D0%B1%D0%BB%D0%B5%D0%BD%D0%B8%D1%8E\">napade na potro\u0161nju energije. <\/a><\/noindex> DPA. Njegova snaga le\u017ei u integraciji procesa prikupljanja i analize, omogu\u0107uju\u0107i nam brzu procjenu u\u010dinkovitosti novih projekata kriptografskog hardvera. \u0160tovi\u0161e, njegov izvanredni grafi\u010dki su\u010delje omogu\u0107uje korisnicima vizualizaciju potpisa potro\u0161nje energije na temelju prikupljenih diskretnih podataka pojedina\u010dno ili simultano \u2014 \u0161to je neprocjenjivo prilikom pripreme podataka za DPA tijekom napada \u2013 dok njegove mo\u0107ne analiti\u010dke biblioteke podr\u017eavaju naj\u010de\u0161\u0107e kori\u0161tene komercijalne algoritme \u0161ifriranja. Pravovremna a\u017euriranja softvera i tehnologija koja podr\u017eava tvrtka Riscure poma\u017eu nam odr\u017eati sigurnost na\u0161ih proizvoda.<\/p>\n<h2>Inspector FI<\/h2>\n<p>\nInspector FI \u2013 uvo\u0111enje gre\u0161ke (Fault Injection) \u2013 nudi \u0161irok spektar funkcija za testiranje metodom uvo\u0111enja gre\u0161ke u tehnologije pametnih kartica i ugra\u0111enih ure\u0111aja. Podr\u017eane metode testiranja uklju\u010duju gre\u0161ke u taktima, gre\u0161ke u napajanju i opti\u010dke napade pomo\u0107u laserske opreme. Napadi uvo\u0111enjem gre\u0161ke \u2013 tako\u0111er poznati kao napadi uznemiravanjem \u2013 mijenjaju pona\u0161anje \u010dipa izazivaju\u0107i korisne kvarove. <\/p>\n<p>Pomo\u0107u Inspector FI korisnici mogu testirati mo\u017ee li se izvu\u0107i klju\u010d izazivanjem kvarova u kriptografskim operacijama \u010dipa, zaobi\u0107i provjere poput autentifikacije ili statusa \u017eivotnog ciklusa, ili promijeniti tijek izvr\u0161avanja programa na \u010dipu.<\/p>\n<h5>Opse\u017ene konfigurabilne opcije<\/h5>\n<p>\nInspector FI uklju\u010duje veliki broj korisni\u010dki prilagodljivih parametara za programsko upravljanje preklopnicima i uznemiravanjima, kao \u0161to su vr\u0161ni impulsi razli\u010ditih trajanja, ponavljanje impulsa i promjene razine napona. Softver prikazuje rezultate, pokazuju\u0107i o\u010dekivano pona\u0161anje, resetiranja kartice i neo\u010dekivano pona\u0161anje, zajedno s detaljnim zapisima. Moduli napada DFA dostupni su za glavne algoritme \u0161ifriranja. Koriste\u0107i \"majstora\", korisnici tako\u0111er mogu kreirati prilago\u0111eni program uznemiravanja putem API-ja.<\/p>\n<h5>Key features<\/h5>\n<p><\/p>\n<ul>\n<li> Neparellelna i lako reproducibilna to\u010dnost i sinkronizacija za sav hardver za uvo\u0111enje gre\u0161ke (glitching).<\/li>\n<li> Scenariji dizajniranja napada koriste\u0107i mo\u0107an sustav naredbi i integrirane IDE alate Inspector.<\/li>\n<li> Obimne opcije konfiguracije Inspectora za automatizirano testiranje putem gre\u0161aka.<\/li>\n<li> Laserska oprema za multiglit\u010danje s stra\u017enje i prednje strane plo\u010de, izra\u0111ena po narud\u017ebi korisnika za testiranje putem gre\u0161aka.<\/li>\n<li> DFA moduli za implementacije popularnih algoritama \u0161ifriranja, uklju\u010duju\u0107i RSA, AES i 3DES.<\/li>\n<li> Nadogradnja na vi\u0161epunktni laser omogu\u0107ava utjecaj na mikro\u010dip na vi\u0161e mjesta istovremeno.<\/li>\n<li> Operacijski ovisni sinkronizatori, koriste\u0107i okida\u010d generatore icWaves, mogu sprije\u010diti primjenu protumjera i izbje\u0107i gubitak uzorka.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Hardverska sredstva<\/h5>\n<p>\nInspector FI mo\u017ee se koristiti s sljede\u0107im hardverskim komponentama za izvo\u0111enje napada:<\/p>\n<ul>\n<li> VC Glitcher s dodatnim poja\u010diva\u010dem gre\u0161aka.<\/li>\n<li> Stacija s diodnim laserom s dodatnim vi\u0161epunktnim a\u017euriranjem.<\/li>\n<li> PicoScope 5203 ili IVI-kompatibilni osciloskop.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/8deff9e61e8127a8af08c580fa7bda92.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector FI s VC Glitcher generatorom gre\u0161aka, okida\u010dnim generatorom icWaves, poja\u010diva\u010dem gre\u0161aka Glitch Amplifier i laserskom stanicom Laser Station.<\/i><\/p>\n<p>VC Glitcher generator \u010dini jezgru arhitekture sustava Inspector za gre\u0161ke. Koriste\u0107i superbrzu FPGA tehnologiju, mogu\u0107e je generirati gre\u0161ke u trajanju od samo dvije nanosekunde. Hardver ima korisni\u010dko orijentirano su\u010delje za programiranje. Program s gre\u0161kom, koji je korisnik stvorio, u\u010ditava se u FPGA prije testnog prolaza. VC Glitcher uklju\u010duje integriranu shemu za unos gre\u0161aka putem napona i gre\u0161aka taktnog impulsa, kao i izlaznog kanala za upravljanje laserskom stanicom.<\/p>\n<p>Stacija s diodnim laserom sastoji se od posebnog seta sna\u017enih diodnih lasera s izra\u0111enom optikom, koja se brzo i fleksibilno upravlja VC Glitcher. Oprema podi\u017ee opti\u010dko testiranje na novu razinu, osiguravaju\u0107i u\u010dinkovite brojne gre\u0161ke, preciznu kontrolu potro\u0161nje energije i brzu i predvidljivu reakciju za prebacivanje impulsa. <\/p>\n<p>Zahvaljuju\u0107i nadogradnji stacije s diodnim laserom na vi\u0161epunktnu verziju, mogu\u0107e je testirati vi\u0161e podru\u010dja na mikro\u010dipu koriste\u0107i razli\u010dite parametre sinkronizacije i naponske opskrbe.<\/p>\n<h5>Pokretanje na temelju signala koriste\u0107i okida\u010d impulsnog generatora icWaves<\/h5>\n<p>\nJitter taktosnih impulsa, nasumi\u010dna prekidanja procesa i trajanje procesa ovisno o podacima zahtijevaju fleksibilno prebacivanje gre\u0161aka i prikupljanje podataka pomo\u0107u sporednog kanala. Generator icWaves sustava Inspector stvara okida\u010dki impuls kao odgovor na otkrivanje u stvarnom vremenu odstupanja od zadanog modela prema napajanju \u010dipa ili EM signalu. Ure\u0111aj uklju\u010duje poseban uskopojasni filtar kako bi omogu\u0107io otkrivanje uskla\u0111enosti modela \u010dak i pri zagu\u0161enom signalu. <\/p>\n<p>Referentno traganje kori\u0161teno za uskla\u0111ivanje s modelom unutar ure\u0111aja temeljenog na FPGA mo\u017ee biti modificirano koriste\u0107i funkcije obrade signala Inspektora. Pametna kartica koja je otkrila uvo\u0111enje gre\u0161ke mo\u017ee inicirati mehanizam za\u0161tite kako bi uklonila tajne podatke ili blokirala karticu. Komponenta icWaves tako\u0111er se mo\u017ee koristiti za iniciranje isklju\u010divanja kartice svaki put kada potro\u0161nja energije ili EM profil odstupaju od standardnog rada.<\/p>\n<p><img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/48b5bb15548de5517a20a80e8ce237b0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Laserska stanica Laser Station (LS) s opcijom vi\u0161epointnog pristupa,<br \/>\ns mikroskopom i koordinatnim stolom<\/i><\/p>\n<h2>Integrirano razvojno okru\u017eenje (IDE)<\/h2>\n<p>\nRazvojno okru\u017eenje Inspector dizajnirano je kako bi pru\u017eilo maksimalnu fleksibilnost korisniku koji primjenjuje SCA i FI u bilo koje svrhe.<\/p>\n<ul>\n<li> Otvoreni API: olak\u0161ava implementaciju novih modula<\/li>\n<li> Izvorni kod: svaki modul dolazi s vlastitim izvorni kodom, tako da se moduli mogu prilagoditi \u017eeljama korisnika ili koristiti kao osnova za razvoj novih modula<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/f6468dc30cccfeb3897ac3e1511fd744.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector FI<\/i><\/p>\n<p>Inspector kombinira uvo\u0111enje gre\u0161aka i metode analize sporednog kanala u jednom visokou\u010dinkovitom paketu.<\/p>\n<p>Primjer analize pona\u0161anja gre\u0161ke:<\/p>\n<p><img decoding=\"async\" alt=\"Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kripto procesora s ugra\u0111enom za\u0161titom\" src=\"\/wp-content\/uploads\/2019\/09\/6e150558b3905cdd5c24e4a7d73b44f5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPodru\u010dje napada putem sporednih kanala brzo se razvija, a novi rezultati istra\u017eivanja objavljuju se svake godine, postaju javni ili \u010dine obaveznu certifikaciju shema i standarda. Inspector omogu\u0107ava korisnicima da budu u toku s novim razvojem i redovitim a\u017euriranjima softvera koja uvode nove metode.<br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/467449\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430 \u0441\u0447\u0435\u0442 \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0445 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u043c\u0438 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u043d\u0430\u043d\u0438\u0439, \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0438. \u0410\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u044b\u043c\u0438 \u0438 \u043d\u0435\u0440\u0430\u0437\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u043c\u0438, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28637,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38148","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u0438 \u043a \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Otkrivanje ranjivosti i procjena otpornosti na hakiranje pametnih kartica i kriptoprocesora s ugra\u0111enom za\u0161titom | ProHoster","description":"U posljednjem desetlje\u0107u, osim metoda otkrivanja tajni ili izvr\u0161avanja drugih neovla\u0161tenih radnji, napada\u010di su tako\u0111er po\u010deli primjenjivati nenamjernu provalu podataka i manipulaciju izvr\u0161avanjem programa.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u0438 \u043a \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 | ProHoster","og:description":"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:56+00:00","article:modified_time":"2019-10-31T19:21:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38148","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:38:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:22","updated":"2026-01-23 20:38:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/38148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=38148"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/38148\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/28637"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=38148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=38148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=38148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}