{"id":40585,"date":"2020-02-02T10:38:22","date_gmt":"2020-02-02T07:38:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimosti-setej-5g"},"modified":"2020-02-02T10:38:22","modified_gmt":"2020-02-02T07:38:22","slug":"uyazvimosti-setej-5g","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/uyazvimosti-setej-5g","title":{"rendered":"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/656548e68c974d920250349994b24721.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<i>Mik\u00f6zben a lelkesed\u0151k izgalommal v\u00e1rj\u00e1k az \u00f6t\u00f6dik gener\u00e1ci\u00f3s h\u00e1l\u00f3zatok sz\u00e9lesk\u00f6r\u0171 bevezet\u00e9s\u00e9t, a kiberb\u0171n\u00f6z\u0151k m\u00e1r k\u00e9sz\u00fclnek az \u00faj lehet\u0151s\u00e9gekre, amelyek profitot hozhatnak sz\u00e1mukra. A fejleszt\u0151k minden er\u0151fesz\u00edt\u00e9se ellen\u00e9re a 5G technol\u00f3gia sebezhet\u0151s\u00e9geket tartalmaz, amelyek az \u00faj k\u00f6rnyezetekben val\u00f3 tapasztalat hi\u00e1nya miatt nehezen azonos\u00edthat\u00f3k. Egy kis 5G h\u00e1l\u00f3zatot vizsg\u00e1ltunk, \u00e9s h\u00e1romf\u00e9le sebezhet\u0151s\u00e9get tal\u00e1ltunk, amir\u0151l ebben a posztban besz\u00e9l\u00fcnk. <\/i><br \/>\n <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>A kutat\u00e1s t\u00e1rgya<\/h3>\n<p>\nVegy\u00fcnk egy egyszer\u0171 p\u00e9ld\u00e1t \u2013 egy nem nyilv\u00e1nos 5G h\u00e1l\u00f3zatot a di\u00e1klak\u00f3helyen (Non-Public Network, NPN), amely k\u00f6zszolg\u00e1ltat\u00e1si csatorn\u00e1kon kereszt\u00fcl csatlakozik a k\u00fclvil\u00e1ghoz. Az ilyen t\u00edpus\u00fa h\u00e1l\u00f3zatokat a k\u00f6zelj\u00f6v\u0151ben minden orsz\u00e1gban haszn\u00e1lni fogj\u00e1k, amelyek r\u00e9szt vesznek az 5G versenyben. Az ilyen konfigur\u00e1ci\u00f3j\u00fa h\u00e1l\u00f3zatok telep\u00edt\u00e9s\u00e9nek potenci\u00e1lis k\u00f6rnyezete a \u201eokos\u201d v\u00e1llalatok, \u201eokos\u201d v\u00e1rosok, nagyv\u00e1llalatok irod\u00e1i \u00e9s hasonl\u00f3, magas fokon ellen\u0151rz\u00f6tt helysz\u00ednek. <\/p>\n<p><img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/266e447d122674db9fc694ff86b4bcdd.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <i>NPN infrastrukt\u00fara: a v\u00e1llalat z\u00e1rt h\u00e1l\u00f3zata a glob\u00e1lis 5G h\u00e1l\u00f3zathoz kapcsol\u00f3dik nyilv\u00e1nos csatorn\u00e1kon kereszt\u00fcl. Forr\u00e1s: Trend Micro<\/i><\/p>\n<p>A negyedik gener\u00e1ci\u00f3s h\u00e1l\u00f3zatokhoz k\u00e9pest az 5G h\u00e1l\u00f3zatok az adatfeldolgoz\u00e1sra \u00f6sszpontos\u00edtanak val\u00f3s id\u0151ben, ez\u00e9rt architekt\u00far\u00e1juk t\u00f6bbr\u00e9teg\u0171 tort\u00e1ra hasonl\u00edt. A szintek k\u00f6z\u00f6tti elv\u00e1laszt\u00e1s lehet\u0151v\u00e9 teszi az interakci\u00f3 egyszer\u0171s\u00edt\u00e9s\u00e9t az API-k standardiz\u00e1l\u00e1sa r\u00e9v\u00e9n a r\u00e9tegek k\u00f6z\u00f6tti kommunik\u00e1ci\u00f3hoz.<\/p>\n<p><img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/4a6c70ab37b8a15ef32c14bba947bd65.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>A 4G \u00e9s 5G architekt\u00far\u00e1k \u00f6sszehasonl\u00edt\u00e1sa. Forr\u00e1s: Trend Micro<\/i><\/p>\n<p>Ez eredm\u00e9nyek\u00e9nt megn\u00f6vekedett automatiz\u00e1l\u00e1si \u00e9s sk\u00e1l\u00e1z\u00e1si lehet\u0151s\u00e9gek, ami alapvet\u0151en fontos az internetes dolgokb\u00f3l (IoT) sz\u00e1rmaz\u00f3 hatalmas adatmennyis\u00e9gek feldolgoz\u00e1s\u00e1hoz.<br \/>\nA 5G szabv\u00e1nyba be\u00e9p\u00edtett r\u00e9tegizol\u00e1ci\u00f3 \u00faj probl\u00e9m\u00e1t hoz l\u00e9tre: a biztons\u00e1gi rendszerek, amelyek az NPN h\u00e1l\u00f3zaton bel\u00fcl m\u0171k\u00f6dnek, v\u00e9dik az objektumot \u00e9s annak priv\u00e1t felh\u0151j\u00e9t, m\u00edg a k\u00fcls\u0151 h\u00e1l\u00f3zatok biztons\u00e1gi rendszerei a saj\u00e1t bels\u0151 infrastrukt\u00far\u00e1jukat. A forgalom az NPN \u00e9s a k\u00fcls\u0151 h\u00e1l\u00f3zatok k\u00f6z\u00f6tt biztons\u00e1gosnak sz\u00e1m\u00edt, mivel v\u00e9dett rendszerekb\u0151l sz\u00e1rmazik, azonban val\u00f3j\u00e1ban senki nem v\u00e9di. <\/p>\n<p>Friss kutat\u00e1sunkban <noindex><a rel=\"nofollow\" href=\"https:\/\/documents.trendmicro.com\/assets\/white_papers\/wp-securing-5g-through-cyber-telecom-identity-federation.pdf\">A 5G biztons\u00e1g\u00e1nak megold\u00e1sa kiber-t\u00e1vk\u00f6zl\u00e9si identit\u00e1sfeder\u00e1ci\u00f3 r\u00e9v\u00e9n<\/a><\/noindex> t\u00f6bb 5G h\u00e1l\u00f3zatra vonatkoz\u00f3 kiber t\u00e1mad\u00e1si forgat\u00f3k\u00f6nyvet mutatunk be, amelyek kihaszn\u00e1lj\u00e1k:<\/p>\n<ul>\n<li>SIM-k\u00e1rty\u00e1k sebezhet\u0151s\u00e9geit,<\/li>\n<li>h\u00e1l\u00f3zati sebezhet\u0151s\u00e9geket,<\/li>\n<li>azonos\u00edt\u00e1si rendszer sebezhet\u0151s\u00e9geit.<\/li>\n<\/ul>\n<p>\nN\u00e9zz\u00fck meg r\u00e9szletesebben minden sebezhet\u0151s\u00e9get. <\/p>\n<h3>SIM-k\u00e1rty\u00e1k sebezhet\u0151s\u00e9gei<\/h3>\n<p>\nA SIM-k\u00e1r egy \u00f6sszetett eszk\u00f6z, amelyen m\u00e9g egy teljes k\u00e9szlet be\u00e9p\u00edtett alkalmaz\u00e1s tal\u00e1lhat\u00f3 \u2013 SIM Toolkit, STK. Az egyik ilyen program, a S@T B\u00f6ng\u00e9sz\u0151, elm\u00e9letileg bels\u0151 oper\u00e1tori oldalak megtekint\u00e9s\u00e9re haszn\u00e1lhat\u00f3, de a gyakorlatban r\u00e9g elavult, \u00e9s 2009 \u00f3ta nem friss\u00edtett\u00e9k, mivel ezeket a funkci\u00f3kat most m\u00e1r m\u00e1s programok v\u00e9gzik. <\/p>\n<p>A probl\u00e9ma az, hogy a S@T B\u00f6ng\u00e9sz\u0151 sebezhet\u0151v\u00e9 v\u00e1lt: egy gondosan elk\u00e9sz\u00edtett rendszer\u00fczenet (SMS) felt\u00f6ri a SIM-k\u00e1rty\u00e1t, \u00e9s arra k\u00e9nyszer\u00edti, hogy v\u00e9grehajtsa a hacker \u00e1ltal megadott parancsokat, r\u00e1ad\u00e1sul a telefon vagy eszk\u00f6z felhaszn\u00e1l\u00f3ja semmit nem \u00e9szlel a szokatlan jelekb\u0151l. Ezt a t\u00e1mad\u00e1st nevezt\u00e9k el <noindex><a rel=\"nofollow\" href=\"https:\/\/simjacker.com\/downloads\/technicalpapers\/AdaptiveMobile_Security_Simjacker_Technical_Paper_v1.01.pdf\">Simjaker<\/a><\/noindex> \u00e9s rengeteg lehet\u0151s\u00e9get ad a t\u00e1mad\u00f3knak. <\/p>\n<p><img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/d23b7f7a77838d76a881a40d721eabb7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Simjacking t\u00e1mad\u00e1s a 5G h\u00e1l\u00f3zatban. Forr\u00e1s: Trend Micro<\/i><\/p>\n<p>K\u00fcl\u00f6n\u00f6sen lehet\u0151v\u00e9 teszi a t\u00e1mad\u00f3 sz\u00e1m\u00e1ra, hogy \u00e1tadja a felhaszn\u00e1l\u00f3 helymeghat\u00e1roz\u00e1si adatait, a k\u00e9sz\u00fcl\u00e9k azonos\u00edt\u00f3j\u00e1t (IMEI) \u00e9s a mobil b\u00e1zist (Cell ID), valamint arra k\u00e9nyszer\u00edtse a telefont, hogy t\u00e1rcs\u00e1zzon egy sz\u00e1mot, k\u00fcldj\u00f6n SMS-t, nyisson meg egy linket a b\u00f6ng\u00e9sz\u0151ben, \u00e9s ak\u00e1r le is kapcsolja a SIM-k\u00e1rty\u00e1t. <\/p>\n<p>A 5G h\u00e1l\u00f3zatokban a SIM-k\u00e1rty\u00e1k sebezhet\u0151s\u00e9ge s\u00falyos probl\u00e9m\u00e1v\u00e1 v\u00e1lik, figyelembe v\u00e9ve a csatlakoztatott eszk\u00f6z\u00f6k sz\u00e1m\u00e1t. B\u00e1r <noindex><a rel=\"nofollow\" href=\"https:\/\/venturebeat.com\/2018\/12\/14\/simalliance-a-new-5g-sim-card-is-necessary-to-beef-up-network-security\/\">a SIMAlliance \u00faj, meger\u0151s\u00edtett biztons\u00e1g\u00fa SIM-k\u00e1rtya szabv\u00e1nyokat dolgozott ki a 5G-hez,<\/a><\/noindex>a leg\u00fajabb gener\u00e1ci\u00f3s h\u00e1l\u00f3zatokban tov\u00e1bbra is <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ericsson.com\/en\/blog\/2020\/1\/5g-security-sim-card\">lehets\u00e9ges a \"r\u00e9gi\" SIM-k\u00e1rty\u00e1k haszn\u00e1lata.<\/a><\/noindex>Ha minden \u00edgy m\u0171k\u00f6dik, akkor nem v\u00e1rhat\u00f3 gyors csere a megl\u00e9v\u0151 SIM-k\u00e1rty\u00e1kra. <\/p>\n<p><img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/208833a443e53b03c07f415476144a4b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>K\u00e1ros helykihaszn\u00e1l\u00e1s. Forr\u00e1s: Trend Micro<\/i><\/p>\n<p>A Simjacking haszn\u00e1lat\u00e1val a SIM-k\u00e1rty\u00e1t k\u00e9nyszer\u00edteni lehet a roaming \u00fczemm\u00f3dba v\u00e1lt\u00e1sra, \u00e9s az elk\u00f6vet\u0151 \u00e1ltal ir\u00e1ny\u00edtott mobil b\u00e1zishoz val\u00f3 csatlakoz\u00e1sra. Ezzel a t\u00e1mad\u00f3 m\u00f3dos\u00edthatja a SIM-k\u00e1rtya be\u00e1ll\u00edt\u00e1sait, lehet\u0151v\u00e9 t\u00e9ve telefonh\u00edv\u00e1sok lehallgat\u00e1s\u00e1t, rosszindulat\u00fa szoftver bevezet\u00e9s\u00e9t, valamint k\u00fcl\u00f6nf\u00e9le t\u00e1mad\u00e1sok v\u00e9grehajt\u00e1s\u00e1t egy felt\u00f6rt SIM-k\u00e1rty\u00e1t tartalmaz\u00f3 eszk\u00f6z seg\u00edts\u00e9g\u00e9vel. Ezt lehet\u0151v\u00e9 teszi, hogy a roaming eszk\u00f6z\u00f6kkel val\u00f3 interakci\u00f3k megker\u00fclik azokat a biztons\u00e1gi elj\u00e1r\u00e1sokat, amelyeket a \"haza\" h\u00e1l\u00f3zaton haszn\u00e1lt eszk\u00f6z\u00f6k sz\u00e1m\u00e1ra fogadtak el. <\/p>\n<h3>A h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei <\/h3>\n<p>\nA t\u00e1mad\u00f3k megv\u00e1ltoztathatj\u00e1k a kompromitt\u00e1lt SIM-k\u00e1rtya be\u00e1ll\u00edt\u00e1sait, hogy el\u00e9rj\u00e9k c\u00e9ljaikat. A Simjaking t\u00e1mad\u00e1s viszonylagos egyszer\u0171s\u00e9ge \u00e9s rejtekez\u00e9se lehet\u0151v\u00e9 teszi a folyamatos v\u00e9grehajt\u00e1s\u00e1t, fokozatosan ellen\u0151rizve egyre t\u00f6bb eszk\u00f6zt, lassan \u00e9s t\u00fcrelmesen (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflare.com\/learning\/ddos\/ddos-low-and-slow-attack\/\">low and slow attack<\/a><\/noindex>) a h\u00e1l\u00f3zat darabokra v\u00e1g\u00e1s\u00e1val, mint a sal\u00e1mit (<noindex><a rel=\"nofollow\" href=\"https:\/\/ajmaurya.wordpress.com\/2014\/03\/27\/what-is-a-salami-attack\/\">salami attack<\/a><\/noindex>). Az ilyen beavatkoz\u00e1s nyomon k\u00f6vet\u00e9se rendk\u00edv\u00fcl neh\u00e9z, a bonyolult, elosztott 5G h\u00e1l\u00f3zatok k\u00f6rnyezet\u00e9ben pedig gyakorlatilag lehetetlen. <\/p>\n<p><img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/36e5f0da189c645567d97eeefa3643de.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>A 5G h\u00e1l\u00f3zatba val\u00f3 fokozatos behatol\u00e1s a Low and Slow + Salami t\u00e1mad\u00e1sok r\u00e9v\u00e9n. Forr\u00e1s: Trend Micro<\/i><\/p>\n<p>Mivel az 5G h\u00e1l\u00f3zatok nem rendelkeznek be\u00e9p\u00edtett SIM-k\u00e1rtya biztons\u00e1gi ellen\u0151rz\u00e9si mechanizmusokkal, a t\u00e1mad\u00f3k fokozatosan k\u00e9pesek lesznek saj\u00e1t szab\u00e1lyaikat bevezetni az 5G kommunik\u00e1ci\u00f3s domainen bel\u00fcl, ellopva a p\u00e9nzeszk\u00f6z\u00f6ket, enged\u00e9lyezve a h\u00e1l\u00f3zati szint\u0171 hozz\u00e1f\u00e9r\u00e9st, rosszindulat\u00fa programokat telep\u00edtve \u00e9s m\u00e1s illeg\u00e1lis tev\u00e9kenys\u00e9geket folytatva a megszerzett SIM-k\u00e1rty\u00e1k seg\u00edts\u00e9g\u00e9vel. <\/p>\n<p>K\u00fcl\u00f6n\u00f6sen aggaszt\u00f3 a hacker f\u00f3rumokon megjelen\u0151 eszk\u00f6z\u00f6k l\u00e9tez\u00e9se, amelyek automatiz\u00e1lj\u00e1k a SIM-k\u00e1rty\u00e1k Simjaking \u00e1ltali megszerz\u00e9s\u00e9t, mivel az ilyen eszk\u00f6z\u00f6k alkalmaz\u00e1sa az \u00f6t\u00f6dik gener\u00e1ci\u00f3s h\u00e1l\u00f3zatokban gyakorlatilag korl\u00e1tlan lehet\u0151s\u00e9geket biztos\u00edt a t\u00e1mad\u00e1sok sk\u00e1l\u00e1z\u00e1s\u00e1ra \u00e9s a megb\u00edzhat\u00f3 forgalom m\u00f3dos\u00edt\u00e1s\u00e1ra. <\/p>\n<p><b><\/p>\n<h3>Az azonos\u00edt\u00e1si sebezhet\u0151s\u00e9gek<\/h3>\n<p><\/b><br \/>\nA SIM-k\u00e1rtya az eszk\u00f6z azonos\u00edt\u00e1s\u00e1ra szolg\u00e1l a h\u00e1l\u00f3zatban. Ha a SIM-k\u00e1rtya akt\u00edv \u00e9s pozit\u00edv egyenleggel rendelkezik, az eszk\u00f6z automatikusan legitimnak sz\u00e1m\u00edt, \u00e9s nem kelt gyan\u00fat a felfedez\u0151 rendszerek szintj\u00e9n. Mindek\u00f6zben a SIM-k\u00e1rtya sebezhet\u0151s\u00e9ge sebezhet\u0151v\u00e9 teszi az eg\u00e9sz azonos\u00edt\u00e1si rendszert. Az IT-biztons\u00e1gi rendszerek egyszer\u0171en nem tudj\u00e1k nyomon k\u00f6vetni a jogellenesen csatlakoztatott eszk\u00f6zt, ha az a Simjaking \u00e1ltal megszerzett azonos\u00edt\u00f3 adatokkal bejelentkezik a h\u00e1l\u00f3zatba. <\/p>\n<p>\u00cdgy a h\u00e1l\u00f3zatra csatlakoz\u00f3 hacker, aki felt\u00f6rt SIM-k\u00e1rty\u00e1t haszn\u00e1l, val\u00f3di tulajdonos szintj\u00e9n f\u00e9r hozz\u00e1 az inform\u00e1ci\u00f3khoz, mivel az IT-rendszerek m\u00e1r nem ellen\u0151rzik azokat az eszk\u00f6z\u00f6ket, amelyek a h\u00e1l\u00f3zati szinten t\u00f6rt\u00e9n\u0151 azonos\u00edt\u00e1son \u00e1tmentek. <\/p>\n<p>A garant\u00e1lt azonos\u00edt\u00e1s a szoftveres \u00e9s h\u00e1l\u00f3zati szint k\u00f6z\u00f6tt egy \u00fajabb probl\u00e9m\u00e1t jelent: a b\u0171n\u00f6z\u0151k sz\u00e1nd\u00e9kosan \u201ezajt\u201d gener\u00e1lhatnak a behatol\u00e1s\u00e9rz\u00e9kel\u0151 rendszerek sz\u00e1m\u00e1ra, folyamatosan v\u00e9grehajtva k\u00fcl\u00f6nf\u00e9le gyan\u00fas tev\u00e9kenys\u00e9geket, val\u00f3dinak t\u0171n\u0151 eszk\u00f6z\u00f6k nev\u00e9ben. Mivel az automatikus felfedez\u00e9si rendszerek m\u0171k\u00f6d\u00e9se statisztikai elemz\u00e9sen alapul, fokozatosan n\u00f6vekedni fog a riaszt\u00e1si k\u00fcsz\u00f6b\u00e9rt\u00e9k, ami azt jelenti, hogy nem reag\u00e1lnak a val\u00f3s t\u00e1mad\u00e1sokra. Az ilyen t\u00edpus\u00fa hossz\u00fa t\u00e1v\u00fa hat\u00e1sok teljes m\u00e9rt\u00e9kben k\u00e9pesek megv\u00e1ltoztatni az eg\u00e9sz h\u00e1l\u00f3zat m\u0171k\u00f6d\u00e9s\u00e9t, \u00e9s statisztikai \u201evakfoltokat\u201d hozhatnak l\u00e9tre a felfedez\u0151 rendszerek sz\u00e1m\u00e1ra. A b\u0171n\u00f6z\u0151k, akik ir\u00e1ny\u00edtj\u00e1k ezeket a ter\u00fcleteket, adatokat t\u00e1madhatnak meg a h\u00e1l\u00f3zaton bel\u00fcl \u00e9s a fizikai eszk\u00f6z\u00f6k\u00f6n, szolg\u00e1ltat\u00e1smegtagad\u00e1si t\u00e1mad\u00e1sokat v\u00e9gezhetnek, \u00e9s m\u00e1s k\u00e1rt is okozhatnak. <\/p>\n<p><b><\/p>\n<h3>Megold\u00e1s: egys\u00e9ges\u00edtett azonos\u00edt\u00e1s ellen\u0151rz\u00e9se<\/h3>\n<p><\/b><br \/>\nA vizsg\u00e1lt NPN 5G h\u00e1l\u00f3zat sebezhet\u0151s\u00e9gei a biztons\u00e1gi elj\u00e1r\u00e1sok sz\u00e9ttagolts\u00e1g\u00e1nak k\u00f6vetkezm\u00e9nyei a kommunik\u00e1ci\u00f3s szinten, a SIM-k\u00e1rty\u00e1k \u00e9s az eszk\u00f6z\u00f6k szintj\u00e9n, valamint a h\u00e1l\u00f3zatok k\u00f6z\u00f6tti roaming interakci\u00f3 szintj\u00e9n. E probl\u00e9ma megold\u00e1s\u00e1hoz a null\u00e1s bizalom (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.paloaltonetworks.com\/cyberpedia\/what-is-a-zero-trust-architecture\">Zero-Trust Architecture, ZTA<\/a><\/noindex>) elv\u00e9nek megfelel\u0151en kell biztos\u00edtani a h\u00e1l\u00f3zathoz csatlakoz\u00f3 eszk\u00f6z\u00f6k hiteles\u00edt\u00e9s\u00e9t minden l\u00e9p\u00e9sn\u00e9l, bevezetve a sz\u00f6vets\u00e9gi azonos\u00edt\u00e1si \u00e9s hozz\u00e1f\u00e9r\u00e9s-kezel\u00e9si modellt (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.securityforum.org\/uploads\/2015\/03\/isf_fiam_es.pdf\">Federated Identity and Access Management, FIdAM<\/a><\/noindex>).<\/p>\n<p>A ZTA elve az, hogy a biztons\u00e1got akkor is fenntarts\u00e1k, ha az eszk\u00f6z ellen\u0151rizetlen\u00fcl mozog, vagy a h\u00e1l\u00f3zat perem\u00e9n k\u00edv\u00fcl tart\u00f3zkodik. A sz\u00f6vets\u00e9gi azonos\u00edt\u00e1si modell egy olyan biztons\u00e1gi megk\u00f6zel\u00edt\u00e9s a 5G sz\u00e1m\u00e1ra, amely egy egys\u00e9ges \u00e9s k\u00f6vetkezetes architekt\u00far\u00e1t biztos\u00edt a hiteles\u00edt\u00e9s, a hozz\u00e1f\u00e9r\u00e9si jogok, az adatok integrit\u00e1sa \u00e9s m\u00e1s \u00f6sszetev\u0151k \u00e9s technol\u00f3gi\u00e1k ellen\u0151rz\u00e9s\u00e9re a 5G h\u00e1l\u00f3zatokban.<\/p>\n<p>Ez a megk\u00f6zel\u00edt\u00e9s kiz\u00e1rja a lehet\u0151s\u00e9g\u00e9t annak, hogy egy \u201eroaming\u201d tornyot \u00e9p\u00edtsenek be a h\u00e1l\u00f3zatba, \u00e9s a fogd meg SIM k\u00e1rty\u00e1kat erre ir\u00e1ny\u00edts\u00e1k. Az IKT rendszerek teljes m\u00e9rt\u00e9kben k\u00e9pesek azonos\u00edtani a k\u00fcls\u0151 eszk\u00f6z\u00f6k csatlakoz\u00e1s\u00e1t \u00e9s blokkolni a parazita forgalmat, amely statisztikai zajt gener\u00e1l. <\/p>\n<p>A SIM card can be protected from modifications by implementing additional integrity checks, potentially realized as a SIM application based on blockchain. The application can be used for authenticating devices and users, as well as for verifying the integrity of firmware and SIM card settings, both in roaming and while working in a home network. <br \/>\n<img decoding=\"async\" alt=\"5G h\u00e1l\u00f3zatok sebezhet\u0151s\u00e9gei\" src=\"\/wp-content\/uploads\/2020\/02\/47b5019c69ea78b1db54e0971681b6f4.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\n<b><\/p>\n<h3>\u00d6sszefoglalva<\/h3>\n<p><\/b><br \/>\n The solutions to the identified security issues of 5G can be viewed as a combination of three approaches: <\/p>\n<ul>\n<li>implementing a federated model of identity and access management that ensures data integrity within the network;<\/li>\n<li>providing complete visibility of threats through the implementation of a distributed ledger to verify the legitimacy and integrity of SIM cards;<\/li>\n<li>forming a borderless distributed security system that addresses interaction issues with devices in roaming. <\/li>\n<\/ul>\n<p>\nThe practical implementation of these measures requires time and significant investment; however, the rollout of 5G networks is happening everywhere, meaning that work on eliminating vulnerabilities needs to begin right now.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/trendmicro\/blog\/486262\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043f\u043e\u0442\u0438\u0440\u0430\u044e\u0442 \u0440\u0443\u043a\u0438, \u043f\u0440\u0435\u0434\u0432\u043a\u0443\u0448\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0430\u0436\u0438\u0432\u044b. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u0441\u0435 \u0441\u0442\u0430\u0440\u0430\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f 5G \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u043f\u044b\u0442\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043d\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041c\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e 5G-\u0441\u0435\u0442\u044c \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435. \u041e\u0431\u044a\u0435\u043a\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u0435\u0439\u0448\u0438\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":40586,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-40585","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/uyazvimosti-setej-5g\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439 5G | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/uyazvimosti-setej-5g\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-02T07:38:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-02T07:38:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabilities of 5G Networks | ProHoster","description":"While enthusiasts eagerly await the mass implementation of fifth-generation networks.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/uyazvimosti-setej-5g","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0439 5G | ProHoster","og:description":"\u041f\u043e\u043a\u0430 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u044b \u0441 \u0442\u0440\u0435\u043f\u0435\u0442\u043e\u043c \u0436\u0434\u0443\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0439 \u043f\u044f\u0442\u043e\u0433\u043e.","og:url":"https:\/\/prohoster.info\/hu\/blog\/uyazvimosti-setej-5g","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T07:38:22+00:00","article:modified_time":"2020-02-02T07:38:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"40585","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:34:25","updated":"2022-09-30 08:28:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/40585","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=40585"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/40585\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/40586"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=40585"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=40585"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=40585"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}