{"id":38148,"date":"2019-10-31T22:21:56","date_gmt":"2019-10-31T19:21:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\/"},"modified":"2019-10-31T22:21:56","modified_gmt":"2019-10-31T19:21:56","slug":"obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","title":{"rendered":"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Na \u00faltima d\u00e9cada, al\u00e9m dos m\u00e9todos de extra\u00e7\u00e3o de segredos ou execu\u00e7\u00e3o de outras a\u00e7\u00f5es n\u00e3o autorizadas, os atacantes come\u00e7aram a aplicar vazamentos de dados n\u00e3o intencionais e manipula\u00e7\u00e3o do processo de execu\u00e7\u00e3o de programas por meio de canais laterais. <\/p>\n<p>M\u00e9todos de ataque tradicionais podem ser dispendiosos em termos de conhecimento, tempo e poder computacional. Ataques de canais laterais, por outro lado, podem ser mais facilmente implementados e n\u00e3o destrutivos, uma vez que eles exploram ou manipulam propriedades f\u00edsicas dispon\u00edveis durante o funcionamento normal. <\/p>\n<p>Usando m\u00e9todos estat\u00edsticos para processar medi\u00e7\u00f5es de canais laterais ou introduzindo falhas em canais fechados do chip, o atacante pode acessar seus segredos em quest\u00e3o de horas.<\/p>\n<p><img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/5491f086b156ab016e65f4942f470680.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nAnualmente, mais de 5.000 milh\u00f5es de cart\u00f5es inteligentes s\u00e3o lan\u00e7ados, novas tecnologias criptogr\u00e1ficas embutidas est\u00e3o surgindo nos mercados, aumentando a necessidade de garantir a seguran\u00e7a tanto dos neg\u00f3cios quanto da vida privada. <\/p>\n<p>Na Holanda, a empresa Riscure criou o sistema Inspector, que oferece a laborat\u00f3rios de pesquisa, bem como fabricantes, novas ferramentas altamente eficientes para detectar amea\u00e7as \u00e0 seguran\u00e7a. <\/p>\n<p>O sistema Inspector da Riscure suporta v\u00e1rios m\u00e9todos de an\u00e1lise de canais laterais (SCA), como an\u00e1lise de consumo de pot\u00eancia (SPA\/DPA), sincroniza\u00e7\u00e3o, radiofrequ\u00eancia, bem como an\u00e1lises eletromagn\u00e9ticas (EMA) e ataques de perturba\u00e7\u00e3o (FI), como falhas de tens\u00e3o, falhas de rel\u00f3gio e manipula\u00e7\u00f5es com laser. As fun\u00e7\u00f5es integradas do sistema suportam numerosos algoritmos criptogr\u00e1ficos, protocolos de aplica\u00e7\u00e3o, interfaces e instrumentos de medi\u00e7\u00e3o. <\/p>\n<p>O sistema permite que voc\u00ea expanda e implemente novos m\u00e9todos e aplicativos pr\u00f3prios para detectar vulnerabilidades.<\/p>\n<h5>O sistema de an\u00e1lise de canais laterais Inspector SCA inclui:<\/h5>\n<p><\/p>\n<ul>\n<li> tra\u00e7ador de consumo de pot\u00eancia Power Tracer;<\/li>\n<li> esta\u00e7\u00e3o de sondagem eletromagn\u00e9tica EM Probe Station;<\/li>\n<li> gerador de gatilho icWaves;<\/li>\n<li> filtro CleanWave;<\/li>\n<li> sonda de corrente Current Probe.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Entre os principais \"benef\u00edcios\", podemos destacar:<\/h5>\n<p><\/p>\n<ul>\n<li>Este \u00e9 um \u00fanico instrumento integrado para an\u00e1lise de canais laterais e testes por meio de introdu\u00e7\u00e3o de falhas;<\/li>\n<li>O Inspector atende aos requisitos para a realiza\u00e7\u00e3o de testes de canais laterais, certificados pela EMVco e CMVP com crit\u00e9rios gerais;<\/li>\n<li>Este \u00e9 um ambiente aberto que inclui o c\u00f3digo-fonte dos m\u00f3dulos, permitindo assim modificar m\u00e9todos existentes e incluir novos m\u00e9todos de teste que podem ser desenvolvidos pelo usu\u00e1rio para o Inspector;<\/li>\n<li>O software e o hardware est\u00e1veis e integrados incluem coleta de dados em alta velocidade por milh\u00f5es de tra\u00e7os;<\/li>\n<li>Um ciclo de lan\u00e7amento de software de seis meses permite que os usu\u00e1rios se mantenham atualizados sobre os m\u00e9todos mais recentes de testes de canais laterais em condi\u00e7\u00f5es de campo.<\/li>\n<\/ul>\n<p><\/p>\n<h5>O Inspector \u00e9 lan\u00e7ado em v\u00e1rias vers\u00f5es em uma \u00fanica plataforma:<\/h5>\n<p><\/p>\n<ul>\n<li><b>Inspector SCA<\/b> oferece todas as op\u00e7\u00f5es necess\u00e1rias para a an\u00e1lise de canais laterais DPA e EMA.<\/li>\n<li><b>Inspector FI <\/b>oferece funcionalidade total para a imposi\u00e7\u00e3o de falhas (ataques de perturba\u00e7\u00e3o), bem como an\u00e1lise diferencial de falhas (DFA).<\/li>\n<li><b>Inspector Core e SP<\/b> (processamento de sinal) oferece a funcionalidade b\u00e1sica SCA, implementada na forma de m\u00f3dulos separados, para garantir um pacote de software acess\u00edvel para coleta de dados ou processamento subsequente.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Inspector SCA<\/h2>\n<p>\nDepois que os resultados da medi\u00e7\u00e3o s\u00e3o obtidos, uma variedade de m\u00e9todos de processamento de sinal est\u00e3o dispon\u00edveis para gerar m\u00faltiplos tra\u00e7os com alto n\u00edvel de sinal e baixo n\u00edvel de ru\u00eddo. Fun\u00e7\u00f5es de processamento de sinal foram desenvolvidas para considerar as sutis diferen\u00e7as entre o processamento de sinais de rastreio eletromagn\u00e9tico, rastreio de consumo de energia e rastreio RF. Poderosos recursos gr\u00e1ficos para apresenta\u00e7\u00e3o de tra\u00e7os no Inspector permitem que os usu\u00e1rios realizem an\u00e1lise temporal ou verifica\u00e7\u00e3o de tra\u00e7os, por exemplo, em busca de vulnerabilidades SPA. <\/p>\n<p><img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/5fe7724312eb8f2845228b30daa756fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Execu\u00e7\u00e3o de DPA na implementa\u00e7\u00e3o de ECC<br \/>\n<\/i><br \/>\nPara muitas implementa\u00e7\u00f5es de seguran\u00e7a, consideradas atualmente resistentes a SPA, o foco principal durante o teste geralmente est\u00e1 nos m\u00e9todos de teste diferenciais (ou seja, DPA\/CPA). Com esse objetivo, o Inspector oferece um amplo conjunto de m\u00e9todos configur\u00e1veis, abrangendo uma vasta gama de algoritmos criptogr\u00e1ficos e algoritmos amplamente utilizados, como (3)DES, AES, RSA e ECC.<\/p>\n<p><img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/1066b611152458069a115225e1fee9d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Emiss\u00e3o de EM do chip para encontrar a melhor posi\u00e7\u00e3o ao implementar DEMA<br \/>\n<\/i><\/p>\n<h5>Principais caracter\u00edsticas<\/h5>\n<p><\/p>\n<ul>\n<li>Esta solu\u00e7\u00e3o combina a an\u00e1lise de pot\u00eancia consumida (SPA\/DPA\/CPA), m\u00e9todos eletromagn\u00e9ticos (SEMA\/DEMA\/EMA-RF) e m\u00e9todos de teste sem contato (RFA).<\/li>\n<li>A velocidade de coleta de dados \u00e9 significativamente aumentada pela estreita integra\u00e7\u00e3o do oscilosc\u00f3pio com o Inspector.<\/li>\n<li>Para prevenir jitter de pulsos de clock e randomiza\u00e7\u00e3o, s\u00e3o utilizados m\u00e9todos avan\u00e7ados de alinhamento.<\/li>\n<li>O usu\u00e1rio pode configurar os m\u00f3dulos de criptoan\u00e1lise que suportam ataques prim\u00e1rios e ataques de alta ordem em todos os principais algoritmos, como (3)DES, AES, RSA e ECC.<\/li>\n<li>Suporte ampliado \u00e9 utilizado para algoritmos espec\u00edficos de diferentes dom\u00ednios, incluindo SEED, MISTY1, DSA, dentre outros como Camellia.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Hardware<\/h5>\n<p>\nAl\u00e9m da esta\u00e7\u00e3o de trabalho PC, o Inspector utiliza hardware otimizado para canais colaterais de dados e coleta de sinais:<\/p>\n<ul>\n<li> Rastreador de pot\u00eancia consumida (Power Tracer) para SPA \/ DPA \/ CPA em smart cards.<\/li>\n<li> Esta\u00e7\u00e3o de sondagem EM (EM Probe station) para SEMA \/ DEMA \/ EMA RF.<\/li>\n<li> Sonda de corrente (Current Probe) para SPA \/ DPA \/ CPA em dispositivos embutidos.<\/li>\n<li> Filtro CleanWave com Micropross MP300 TCL1\/2 para RFA e EMA RF.<\/li>\n<li> Oscilosc\u00f3pio compat\u00edvel com IVI.<\/li>\n<\/ul>\n<p>\nOs objetos em avalia\u00e7\u00e3o frequentemente requerem medi\u00e7\u00f5es, comuta\u00e7\u00f5es e controle de hardware, que s\u00e3o essenciais para a execu\u00e7\u00e3o de SCA. O gerenciador de hardware flex\u00edvel da ferramenta Inspector, um ambiente de desenvolvimento aberto e amplas op\u00e7\u00f5es de interface fornecem uma base s\u00f3lida para medi\u00e7\u00f5es de alta qualidade usando o equipamento do usu\u00e1rio.<\/p>\n<p><img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/c23c919276492330cb3afbee753ed1d5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector SCA<br \/>\n<\/i><br \/>\nO engenheiro chefe de seguran\u00e7a interna Joh John Connor comenta sobre o sistema:<br \/>\n\u201cInspector transformou radicalmente a forma como avaliamos a resist\u00eancia de nossos produtos a ataques diferenciais. <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D1%82%D0%B0%D0%BA%D0%B0_%D0%BF%D0%BE_%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%BE%D0%BF%D0%BE%D1%82%D1%80%D0%B5%D0%B1%D0%BB%D0%B5%D0%BD%D0%B8%D1%8E\">ataque de consumo de energia. <\/a><\/noindex> DPA. Sua for\u00e7a reside na integra\u00e7\u00e3o de processos de coleta e an\u00e1lise, permitindo que avaliemos rapidamente a efic\u00e1cia de novos projetos de hardware criptogr\u00e1fico. Al\u00e9m disso, sua excelente interface gr\u00e1fica permite que o usu\u00e1rio visualize assinaturas de consumo de energia com base em dados discretos coletados, seja individualmente ou simultaneamente \u2014 o que \u00e9 inestim\u00e1vel ao preparar dados para DPA durante um ataque \u2014 enquanto suas poderosas bibliotecas anal\u00edticas suportam os algoritmos de criptografia comerciais mais utilizados. Atualiza\u00e7\u00f5es oportunas de software e tecnologias, apoiadas pela Riscure, nos ajudam a manter a seguran\u00e7a de nossos produtos.<\/p>\n<h2>Inspector FI<\/h2>\n<p>\nInspector FI \u2013 inje\u00e7\u00e3o de falha \u2013 oferece um amplo conjunto de funcionalidades para realizar testes de inje\u00e7\u00e3o de falha em tecnologias de smart cards e dispositivos incorporados. Os m\u00e9todos de teste suportados incluem falhas de pulso de clock, falhas de tens\u00e3o e ataques \u00f3pticos usando equipamentos a laser. Ataques por inje\u00e7\u00e3o de falha \u2013 tamb\u00e9m conhecidos como ataques de perturba\u00e7\u00e3o \u2013 alteram o comportamento do chip, provocando uma falha utiliz\u00e1vel. <\/p>\n<p>Com o Inspector FI, os usu\u00e1rios podem testar se \u00e9 poss\u00edvel extrair a chave, causando falhas nas opera\u00e7\u00f5es criptogr\u00e1ficas do chip, contornando verifica\u00e7\u00f5es como autentica\u00e7\u00e3o ou estado do ciclo de vida, ou alterando o processo de execu\u00e7\u00e3o do programa no chip.<\/p>\n<h5>Extensas op\u00e7\u00f5es configur\u00e1veis<\/h5>\n<p>\nInspector FI inclui um grande n\u00famero de par\u00e2metros personaliz\u00e1veis para controle de software de chaveamentos e perturba\u00e7\u00f5es, como pulsos de pico de diferentes dura\u00e7\u00f5es, repeti\u00e7\u00e3o de pulsos e altera\u00e7\u00f5es de n\u00edvel de tens\u00e3o. O software apresenta os resultados, mostrando o comportamento esperado, reset da placa e comportamento inesperado, junto com um detalhamento minucioso. Os m\u00f3dulos de ataque DFA est\u00e3o dispon\u00edveis para os principais algoritmos de criptografia. Usando o \"mestre\", os usu\u00e1rios tamb\u00e9m podem criar um programa de perturba\u00e7\u00e3o personalizado com API.<\/p>\n<h5>Principais caracter\u00edsticas<\/h5>\n<p><\/p>\n<ul>\n<li> Precis\u00e3o e sincroniza\u00e7\u00e3o n\u00e3o paralelas e facilmente reproduz\u00edveis para todos os dispositivos de inje\u00e7\u00e3o de falha (glitching).<\/li>\n<li> Cen\u00e1rios de design de ataque, usando um poderoso sistema de comandos e IDEs integrados Inspector.<\/li>\n<li> Extensas op\u00e7\u00f5es de configura\u00e7\u00e3o do Inspector para testes automatizados por meio de falhas.<\/li>\n<li> Equipamento a laser para multi-glitching com ambos os lados do chip, feito sob medida para testes por falha.<\/li>\n<li> M\u00f3dulos DFA para implementa\u00e7\u00f5es de algoritmos de criptografia populares, incluindo RSA, AES e 3DES.<\/li>\n<li> A atualiza\u00e7\u00e3o para um laser multiponto permite a interven\u00e7\u00e3o no chip em v\u00e1rios locais simultaneamente.<\/li>\n<li> A sincroniza\u00e7\u00e3o dependente de opera\u00e7\u00f5es, usando o gerador de gatilho icWaves, pode evitar a aplica\u00e7\u00e3o de contra-medidas e impedir a perda de amostras.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Hardware<\/h5>\n<p>\nO Inspector FI pode ser usado com os seguintes componentes de hardware para realizar ataques:<\/p>\n<ul>\n<li> VC Glitcher com amplificador de falhas adicional<\/li>\n<li> Esta\u00e7\u00e3o com laser de diodo com atualiza\u00e7\u00e3o multiponto adicional<\/li>\n<li> PicoScope 5203 ou oscilosc\u00f3pio compat\u00edvel com IVI<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/8deff9e61e8127a8af08c580fa7bda92.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector FI com gerador de falhas VC Glitcher, gerador de gatilho icWaves, amplificador de falhas Glitch Amplifier e esta\u00e7\u00e3o a laser Laser Station.<\/i><\/p>\n<p>O gerador VC Glitcher forma o n\u00facleo da arquitetura de falhas do sistema Inspector. Usando tecnologia FPGA super r\u00e1pida, \u00e9 poss\u00edvel gerar falhas com dura\u00e7\u00e3o de apenas duas nanosegundos. O hardware possui uma interface de programa\u00e7\u00e3o amig\u00e1vel. O programa com falhas, criado pelo usu\u00e1rio, \u00e9 carregado no FPGA antes do ciclo de teste. O VC Glitcher inclui um circuito integrado para introduzir falhas de tens\u00e3o e falhas de pulsos de clock, al\u00e9m de uma sa\u00edda de canal para controle da esta\u00e7\u00e3o a laser.<\/p>\n<p>A esta\u00e7\u00e3o com laser de diodo consiste em um conjunto especial de potentes lasers de diodo com \u00f3ptica feita sob medida, que \u00e9 rapidamente e flexivelmente controlada pelo VC Glitcher. O equipamento leva o teste \u00f3ptico a um novo n\u00edvel, proporcionando falhas m\u00faltiplas eficazes, controle preciso do consumo de energia e uma resposta r\u00e1pida e previs\u00edvel para a mudan\u00e7a de pulsos. <\/p>\n<p>Com a atualiza\u00e7\u00e3o da esta\u00e7\u00e3o de laser de diodo para a vers\u00e3o multiponto, v\u00e1rias \u00e1reas do chip podem ser testadas com diferentes par\u00e2metros de sincroniza\u00e7\u00e3o e tens\u00e3o de alimenta\u00e7\u00e3o.<\/p>\n<h5>Lan\u00e7amento baseado em sinais usando o gerador de pulsa\u00e7\u00f5es icWaves<\/h5>\n<p>\nO jitter dos pulsos de clock, interrup\u00e7\u00f5es aleat\u00f3rias no processo e dura\u00e7\u00e3o dependente de dados exigem uma comuta\u00e7\u00e3o flex\u00edvel de falhas e coleta de dados de canal lateral. O gerador icWaves do sistema Inspector cria um pulso de trigger em resposta \u00e0 detec\u00e7\u00e3o em tempo real de diverg\u00eancias do modelo definido por alimenta\u00e7\u00e3o do circuito integrado ou sinal EM. O dispositivo inclui um filtro de banda estreita especial para garantir a detec\u00e7\u00e3o da conformidade com o modelo, mesmo em um sinal ruidoso. <\/p>\n<p>A trilha de refer\u00eancia usada para compara\u00e7\u00e3o com o modelo dentro do dispositivo baseado em FPGA pode ser modificada usando as fun\u00e7\u00f5es de processamento de sinal do Inspector. Um smart card que detectou a introdu\u00e7\u00e3o de uma falha pode iniciar um mecanismo de prote\u00e7\u00e3o para remover dados secretos ou bloquear o cart\u00e3o. O componente icWaves tamb\u00e9m pode ser usado para iniciar o desligamento do cart\u00e3o sempre que o consumo de energia ou o perfil EM se desvia do funcionamento padr\u00e3o.<\/p>\n<p><img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/48b5bb15548de5517a20a80e8ce237b0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Esta\u00e7\u00e3o a Laser Laser Station (LS) com op\u00e7\u00e3o de acesso multiponto,<br \/>\ncom microsc\u00f3pio e mesa de coordenadas<\/i><\/p>\n<h2>Ambiente de Desenvolvimento Integrado (IDE)<\/h2>\n<p>\nO ambiente de desenvolvimento Inspector \u00e9 projetado para fornecer a m\u00e1xima flexibilidade ao usu\u00e1rio que utiliza SCA e FI para quaisquer fins.<\/p>\n<ul>\n<li> API Aberto: simplifica a implementa\u00e7\u00e3o de novos m\u00f3dulos<\/li>\n<li> C\u00f3digo-fonte: cada m\u00f3dulo \u00e9 fornecido com seu c\u00f3digo-fonte, assim, os m\u00f3dulos podem ser adaptados \u00e0s prefer\u00eancias do usu\u00e1rio ou usados como base para a cria\u00e7\u00e3o de novos m\u00f3dulos.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/f6468dc30cccfeb3897ac3e1511fd744.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector FI<\/i><\/p>\n<p>O Inspector combina a indu\u00e7\u00e3o de falhas e m\u00e9todos de an\u00e1lise de canal lateral em um \u00fanico pacote de alto desempenho.<\/p>\n<p>Exemplo de an\u00e1lise de comportamento de falha:<\/p>\n<p><img decoding=\"async\" alt=\"Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00e3o da resist\u00eancia a ataques de hackers de smart cards e criptoprocessadores com prote\u00e7\u00e3o embutida.\" src=\"\/wp-content\/uploads\/2019\/09\/6e150558b3905cdd5c24e4a7d73b44f5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA \u00e1rea de ataques por canal lateral est\u00e1 em r\u00e1pida evolu\u00e7\u00e3o, com novos resultados de pesquisa sendo publicados a cada ano, tornando-se amplamente conhecidos ou exigindo certifica\u00e7\u00e3o de esquemas e padr\u00f5es. O Inspector permite que os usu\u00e1rios se mantenham atualizados sobre novas descobertas e atualiza\u00e7\u00f5es regulares de software que implementam novos m\u00e9todos.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/467449\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430 \u0441\u0447\u0435\u0442 \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0445 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u043c\u0438 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u043d\u0430\u043d\u0438\u0439, \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0438. \u0410\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u044b\u043c\u0438 \u0438 \u043d\u0435\u0440\u0430\u0437\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u043c\u0438, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28637,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38148","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u0438 \u043a \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Detec\u00e7\u00e3o de vulnerabilidades e avalia\u00e7\u00f5es de resist\u00eancia a ataques de hackers em smart cards e microprocessadores criptogr\u00e1ficos com prote\u00e7\u00e3o embutida | ProHoster","description":"Na \u00faltima d\u00e9cada, al\u00e9m de m\u00e9todos de extra\u00e7\u00e3o de segredos ou execu\u00e7\u00e3o de outras a\u00e7\u00f5es n\u00e3o autorizadas, os atacantes come\u00e7aram a usar o vazamento acidental de dados e a manipula\u00e7\u00e3o do processo de execu\u00e7\u00e3o de programas.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u0438 \u043a \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 | ProHoster","og:description":"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:56+00:00","article:modified_time":"2019-10-31T19:21:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38148","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:38:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:22","updated":"2026-01-23 20:38:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=38148"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38148\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/28637"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=38148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=38148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=38148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}