{"id":38148,"date":"2019-10-31T22:21:56","date_gmt":"2019-10-31T19:21:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\/"},"modified":"2019-10-31T22:21:56","modified_gmt":"2019-10-31T19:21:56","slug":"obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","title":{"rendered":"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen ultimul deceniu, pe l\u00e2ng\u0103 metodele de extragere a secretelor sau de realizare a altor ac\u021biuni neautorizate, atacatorii au \u00eenceput s\u0103 aplice scurgeri involuntare de date \u0219i manipularea procesului de execu\u021bie a programelor prin canale laterale. <\/p>\n<p>Metodele tradi\u021bionale de atac pot fi costisitoare \u00een termeni de cuno\u0219tin\u021be, timp \u0219i putere de calcul. Atacurile prin canale laterale, pe de alt\u0103 parte, pot fi mai u\u0219or de implementat \u0219i non-invazive, deoarece acestea utilizeaz\u0103 sau controleaz\u0103 propriet\u0103\u021bile fizice disponibile \u00een timpul func\u021bion\u0103rii normale. <\/p>\n<p>Prin utilizarea metodelor statistice de procesare a m\u0103sur\u0103torilor canalului lateral sau introduc\u00e2nd erori \u00een canalele \u00eenchise ale circuitelor integrate, atacatorul poate avea acces la secretele acestora \u00een c\u00e2teva ore.<\/p>\n<p><img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/5491f086b156ab016e65f4942f470680.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nAnual, sunt emise mai mult de 5.000 de milioane de carduri inteligente, iar pe pie\u021be apar noi tehnologii criptografice \u00eencorporate, ceea ce cre\u0219te necesitatea de a asigura securitatea at\u00e2t pentru companii, c\u00e2t \u0219i pentru via\u021ba privat\u0103. <\/p>\n<p>\u00cen Olanda, compania Riscure a creat sistemul Inspector, care ofer\u0103 laboratoarelor de cercetare, precum \u0219i produc\u0103torilor, noi mijloace de detectare a amenin\u021b\u0103rilor pentru asigurarea securit\u0103\u021bii. <\/p>\n<p>Sistemul Inspector de la Riscure suport\u0103 diverse metode de analiz\u0103 a canalelor laterale (SCA), cum ar fi analiza consumului de putere (SPA\/DPA), sincronizare, radiofrecven\u021be, precum \u0219i analiza electromagnetic\u0103 (EMA) \u0219i atacuri de perturbare (FI), cum ar fi erori de tensiune, erori de puls de ceas \u0219i manipul\u0103ri cu laserul. Func\u021biile \u00eencorporate ale sistemului suport\u0103 numeroase algoritmi criptografici, protocoale aplica\u021bii, interfe\u021be \u0219i instrumente de m\u0103surare. <\/p>\n<p>Sistemul v\u0103 permite s\u0103 extinde\u021bi \u0219i s\u0103 implementa\u021bi noi metode \u0219i aplica\u021bii proprii pentru detectarea vulnerabilit\u0103\u021bilor.<\/p>\n<h5>Sistemul de analiz\u0103 a canalelor laterale Inspector SCA include:<\/h5>\n<p><\/p>\n<ul>\n<li> tracerul de consum de putere Power Tracer;<\/li>\n<li> sta\u021bia de sondare electromagnetic\u0103 EM Probe Station;<\/li>\n<li> generatorul de trigger icWaves;<\/li>\n<li> filtrul CleanWave;<\/li>\n<li> sonda de curent Current Probe.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Printre principalele \u201ebeneficii\u201d se num\u0103r\u0103 cele mai importante:<\/h5>\n<p><\/p>\n<ul>\n<li>Este este un instrument integrat unic pentru analiza canalelor laterale \u0219i testare prin introducerea de erori;<\/li>\n<li>Inspectorul \u00eendepline\u0219te cerin\u021bele de efectuare a testelor de canale laterale, certificate EMVco \u0219i CMVP conform criteriilor generale;<\/li>\n<li>Este un mediu deschis care include codul surs\u0103 al modulelor, permi\u021b\u00e2nd astfel modificarea metodelor existente \u0219i includerea de noi metode de testare care pot fi dezvoltate de utilizator pentru Inspector;<\/li>\n<li>Software stabil \u0219i integrat, care include colectare de date de mare vitez\u0103 pe milioane de tras\u0103ri;<\/li>\n<li>Ciclul de lansare a software-ului de \u0219ase luni permite utilizatorilor s\u0103 fie la curent cu cele mai recente metode de testare a canalelor laterale \u00een condi\u021bii de teren.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Inspectorul este disponibil \u00een diferite versiuni pe o platform\u0103 unificat\u0103:<\/h5>\n<p><\/p>\n<ul>\n<li><b>Inspector SCA<\/b> ofer\u0103 toate op\u021biunile necesare pentru a efectua analize pe canalele laterale DPA \u0219i EMA.<\/li>\n<li><b>Inspector FI <\/b>ofer\u0103 func\u021bionalitate complet\u0103 pentru introducerea de erori (atacuri de perturbare) \u0219i, de asemenea, analize diferen\u021biale ale erorilor (DFA).<\/li>\n<li><b>Inspector Core \u0219i SP<\/b> (procesare semnale) ofer\u0103 func\u021bionalitatea de baz\u0103 SCA, implementat\u0103 sub form\u0103 de module separate, pentru a oferi un pachet software accesibil pentru colectarea datelor sau procesarea ulterioar\u0103.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Inspector SCA<\/h2>\n<p>\nDup\u0103 ob\u021binerea rezultatelor m\u0103sur\u0103rii, devin disponibile diferite metode de procesare a semnalelor pentru a genera multiple tras\u0103ri cu un nivel ridicat al semnalelor \u0219i un nivel sc\u0103zut al zgomotelor. Au fost dezvoltate func\u021bii de procesare a semnalelor care iau \u00een considerare diferen\u021bele subtile \u00eentre procesarea semnalelor de trasare electromagnetic\u0103, trasarea consumului de putere \u0219i trasarea RF. Instrumentele grafice puternice de vizualizare a tras\u0103rilor din Inspector permit utilizatorilor s\u0103 efectueze analize temporale sau verific\u0103ri ale tras\u0103rilor, de exemplu, pentru a identifica vulnerabilit\u0103\u021bile SPA. <\/p>\n<p><img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/5fe7724312eb8f2845228b30daa756fd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Executarea DPA \u00een implementarea ECC<br \/>\n<\/i><br \/>\nPentru multe implement\u0103ri de securitate care sunt considerate \u00een prezent rezistente la SPA, accentul principal \u00een testare este de obicei pus pe metodele diferen\u021biale de testare (adic\u0103 DPA \/ CPA). \u00cen acest scop, Inspectorul ofer\u0103 un set larg de metode configurabile, referitoare la un num\u0103r mare de algoritmi cripto \u0219i algoritmi larg utiliza\u021bi, precum (3)DES, AES, RSA \u0219i ECC.<\/p>\n<p><img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/1066b611152458069a115225e1fee9d3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>EM radia\u021bia circuitului pentru a determina cea mai bun\u0103 amplasare \u00een implementarea DEMA<br \/>\n<\/i><\/p>\n<h5>Caracteristici principale<\/h5>\n<p><\/p>\n<ul>\n<li>Aceast\u0103 solu\u021bie combin\u0103 analiza puterii consumate (SPA\/DPA\/CPA), metodele electromagnetice (SEMA\/DEMA\/EMA-RF) \u0219i metodele de testare f\u0103r\u0103 contact (RFA).<\/li>\n<li>Viteza de colectare a datelor este semnificativ crescut\u0103 prin integrarea str\u00e2ns\u0103 a osciloscopului cu Inspector.<\/li>\n<li>Pentru a preveni jitter-ul impulsurilor de ceas \u0219i randomizarea, se aplic\u0103 metode avansate de aliniere.<\/li>\n<li>Utilizatorul poate configura modulele de criptanaliz\u0103 care suport\u0103 atacuri de baz\u0103 \u0219i atacuri de ordin \u00eenalt pe toate algoritmii principali, cum ar fi (3)DES, AES, RSA \u0219i ECC.<\/li>\n<li>Se utilizeaz\u0103 suport extins pentru algoritmi specifici domeniilor, inclusiv SEED, MISTY1, DSA, inclusiv Camellia.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Echipamente hardware<\/h5>\n<p>\nPe l\u00e2ng\u0103 sta\u021bia de lucru PC, Inspector utilizeaz\u0103 echipamente hardware optimizate pentru canalele laterale de date \u0219i colectarea semnalelor:<\/p>\n<ul>\n<li> Trasorul de putere (Power Tracer) pentru SPA \/ DPA \/ CPA pe carduri inteligente<\/li>\n<li> Sta\u021bia de sondare EM (EM Probe station) pentru SEMA \/ DEMA \/ EMA RF<\/li>\n<li> Sonda de curent (Current Probe) pentru SPA \/ DPA \/ CPA pe dispozitive integrate<\/li>\n<li> Filtru CleanWave cu Micropross MP300 TCL1\/2 pentru RFA \u0219i EMA RF<\/li>\n<li> Osciloscop IVI-compatibil<\/li>\n<\/ul>\n<p>\nObiectele evaluate necesit\u0103 adesea m\u0103sur\u0103tori, comut\u0103ri \u0219i control al echipamentelor hardware, necesare pentru realizarea SCA. Managementul flexibil al echipamentelor hardware, mediul deschis de dezvoltare \u0219i op\u021biunile extinse de interfatare asigur\u0103 o baz\u0103 solid\u0103 pentru m\u0103sur\u0103tori de \u00eenalt\u0103 calitate utiliz\u00e2nd echipamentul utilizatorului.<\/p>\n<p><img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/c23c919276492330cb3afbee753ed1d5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector SCA<br \/>\n<\/i><br \/>\nInginerul-\u0219ef al securit\u0103\u021bii interne Joh John Connor descrie sistemul astfel:<br \/>\n\u201eInspector a schimbat fundamental modul \u00een care evalu\u0103m rezisten\u021ba produselor noastre la atacul diferen\u021bial <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D1%82%D0%B0%D0%BA%D0%B0_%D0%BF%D0%BE_%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%BE%D0%BF%D0%BE%D1%82%D1%80%D0%B5%D0%B1%D0%BB%D0%B5%D0%BD%D0%B8%D1%8E\">prin consumul de energie\u201c <\/a><\/noindex> DPA. Puterea sa const\u0103 \u00een integrarea proceselor de colectare \u0219i analiz\u0103, permi\u021b\u00e2ndu-ne s\u0103 evalu\u0103m rapid eficien\u021ba noilor proiecte de hardware criptografic. \u00cen plus, interfa\u021ba grafic\u0103 excelent\u0103 le permite utilizatorilor s\u0103 vizualizeze semn\u0103turile consumului de energie pe datele discrete colectate individual sau simultan \u2013 ceea ce este indispensabil \u00een preg\u0103tirea datelor pentru DPA \u00een timpul unui atac \u2013 \u00een timp ce bibliotecile sale analitice puternice sus\u021bin cele mai frecvent utilizate algoritmi comerciali de criptare. Actualiz\u0103rile software \u0219i tehnologii de \u00eencredere, sus\u021binute de Riscure, ne ajut\u0103 s\u0103 men\u021binem securitatea produselor noastre.<\/p>\n<h2>Inspector FI<\/h2>\n<p>\nInspector FI \u2013 Injec\u021bie de erori \u2013 ofer\u0103 un set variat de func\u021bii pentru a efectua teste prin metoda injec\u021biei de erori \u00een tehnologiile de carduri inteligente \u0219i dispozitive \u00eencorporate. Metodele de testare suportate includ erori \u00een impulsurile de ceas, erori de tensiune \u0219i atacuri optice folosind echipamente laser. Atacurile prin injec\u021bie de erori \u2013 cunoscute \u0219i sub denumirea de atacuri prin perturbare \u2013 modific\u0103 comportamentul cipului, provoc\u00e2nd o defectare utilizabil\u0103. <\/p>\n<p>Cu ajutorul Inspector FI, utilizatorii pot testa dac\u0103 se poate extrage o cheie prin provocarea de erori \u00een opera\u021biunile criptografice ale cipului, elud\u00e2nd verific\u0103ri precum autentificarea sau starea ciclului de via\u021b\u0103, sau modific\u00e2nd procesul de execu\u021bie al programului pe cip.<\/p>\n<h5>Op\u021biuni configurabile extinse<\/h5>\n<p>\nInspector FI include un num\u0103r mare de parametri personalizabili pentru controlul programatic al comutatoarelor \u0219i perturb\u0103rilor, cum ar fi impulsurile de v\u00e2rf de diferite durate, repetarea impulsurilor \u0219i varia\u021biile nivelului de tensiune. Software-ul prezint\u0103 rezultatele, ar\u0103t\u00e2nd comportamentul a\u0219teptat, reseteaz\u0103 cardurile \u0219i comportamentele nea\u0219teptate, \u00eempreun\u0103 cu o \u00eenregistrare detaliat\u0103. Modulele de atac DFA sunt disponibile pentru algoritmi de criptare de baz\u0103. Folosind \u201emaster\u201d, utilizatorii pot \u00een plus crea un program personalizat de perturbare cu API.<\/p>\n<h5>Caracteristici principale<\/h5>\n<p><\/p>\n<ul>\n<li> Precizie \u0219i sincronizare neparalele \u0219i u\u0219or reproducibile pentru toate echipamentele de injec\u021bie de erori (glitching).<\/li>\n<li> Scenarii de proiectare a atacurilor folosind un sistem de comenzi puternic \u0219i IDE-uri integrate Inspector.<\/li>\n<li> Op\u021biuni extinse de configurare Inspector pentru testarea automat\u0103 prin introducerea de erori.<\/li>\n<li> Echipamente laser pentru multi-glitching cu latura din fa\u021b\u0103 \u0219i din spate a pl\u0103cii, fabricate la comanda utilizatorului pentru testarea prin introducerea de erori.<\/li>\n<li> Module DFA pentru implementarea algoritmilor de criptare populari, inclusiv RSA, AES \u0219i 3DES.<\/li>\n<li> Upgrade-ul la un laser multi-punct ofer\u0103 abilitatea de a ac\u021biona pe cip simultan \u00een mai multe locuri.<\/li>\n<li> Sincronizarea dependent\u0103 de opera\u021biuni, folosind generatorul de trigger icWaves, poate preveni aplicarea contram\u0103surilor \u0219i pierderea probei.<\/li>\n<\/ul>\n<p><\/p>\n<h5>Echipamente hardware<\/h5>\n<p>\nInspector FI poate fi utilizat cu urm\u0103toarele componente hardware pentru a efectua atacuri:<\/p>\n<ul>\n<li> VC Glitcher cu amplificator de erori suplimentar.<\/li>\n<li> Sta\u021bie cu laser cu diod\u0103 cu actualizare multi-punct suplimentar\u0103.<\/li>\n<li> PicoScope 5203 sau un osciloscop compatibil IVI.<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/8deff9e61e8127a8af08c580fa7bda92.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector FI cu generator de erori VC Glitcher, generator de trigger icWaves, amplificator de erori Glitch Amplifier \u0219i sta\u021bia laser Laser Station.<\/i><\/p>\n<p>Generatorul VC Glitcher formeaz\u0103 nucleul arhitecturii de introducere a erorilor sistemului Inspector. Folosind tehnologia FPGA ultra-rapid\u0103, erorile pot fi generate cu o durat\u0103 de doar dou\u0103 nanosecunde. Hardware-ul are o interfa\u021b\u0103 de programare u\u0219or de utilizat. Programul cu erori, creat de utilizator, este \u00eenc\u0103rcat \u00een FPGA \u00eenainte de runda de testare. VC Glitcher include un circuit integrat pentru introducerea de erori de tensiune \u0219i de impulsuri de ceas, precum \u0219i o ie\u0219ire a canalului pentru controlul sta\u021biei laser.<\/p>\n<p>Sta\u021bia cu laser cu diod\u0103 const\u0103 dintr-un set special de lasere cu diod\u0103 puternice, cu lentile fabricate la comanda utilizatorului, care sunt gestionate rapid \u0219i flexibil de VC Glitcher. Echipamentul ridic\u0103 testarea optic\u0103 la un nou nivel, furniz\u00e2nd erori multiple eficiente, control precis al consumului de energie \u0219i reac\u021bie rapid\u0103 \u0219i previzibil\u0103 pentru schimbarea impulsurilor. <\/p>\n<p>Datorit\u0103 upgrade-ului sta\u021biei cu laser cu diod\u0103 la versiunea multi-punct, pot fi testate mai multe zone ale cipului utiliz\u00e2nd diferite parametrii de sincronizare \u0219i tensiune de alimentare.<\/p>\n<h5>Lansarea pe baza semnalelor utiliz\u00e2nd un generator de impulsuri triggere icWaves<\/h5>\n<p>\nJitterul impulsurilor de ceas, \u00eentreruperile aleatorii ale procesului \u0219i durata procesului dependent\u0103 de date necesit\u0103 o comutare flexibil\u0103 a erorilor \u0219i colectarea datelor din canalul lateral. Generatorul icWaves al sistemului Inspector genereaz\u0103 un impuls triger \u00een r\u0103spuns la detectarea \u00een timp real a abaterilor de la modelul prestabilit privind alimentarea circuitului integrat sau semnalul EM. Dispozitivul include un filtru special de band\u0103 \u00eengust\u0103 pentru a asigura detectarea conformit\u0103\u021bii modelului chiar \u0219i \u00een condi\u021bii de zgomot. <\/p>\n<p>Traseul de referin\u021b\u0103, utilizat pentru compararea cu modelul \u00een interiorul dispozitivului bazat pe FPGA, poate fi modificat folosind func\u021biile de procesare a semnalelor Inspector. Cardul inteligent, care a detectat introducerea unei erori, poate ini\u021bia un mecanism de protec\u021bie pentru a elimina datele confiden\u021biale sau a bloca cardul. Componenta icWaves poate fi utilizat\u0103, de asemenea, pentru a ini\u021bia oprirea cardului de fiecare dat\u0103 c\u00e2nd consumul de energie sau profilul EM se abate de la func\u021bionarea standard.<\/p>\n<p><img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/48b5bb15548de5517a20a80e8ce237b0.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Statia laser Laser Station (LS) cu op\u021biunea de acces multipunct,<br \/>\ncu microscop \u0219i mas\u0103 coordonat\u0103<\/i><\/p>\n<h2>Mediul de dezvoltare integrat (IDE)<\/h2>\n<p>\nMediul de dezvoltare Inspector este proiectat pentru a oferi utilizatorului maximum de flexibilitate \u00een aplicarea SCA \u0219i FI pentru orice scopuri.<\/p>\n<ul>\n<li> API deschis: simplific\u0103 implementarea de noi module<\/li>\n<li> Cod surs\u0103: fiecare modul este livrat \u00eempreun\u0103 cu codul s\u0103u surs\u0103, astfel \u00eenc\u00e2t modulele pot fi adaptate dorin\u021belor utilizatorului sau utilizate ca baz\u0103 pentru crearea de noi module<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/f6468dc30cccfeb3897ac3e1511fd744.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Inspector FI<\/i><\/p>\n<p>Inspector combin\u0103 introducerea erorilor \u0219i metodele de analiz\u0103 a canalului lateral \u00eentr-un singur pachet performant.<\/p>\n<p>Exemplu de analiz\u0103 a comportamentului erorii:<\/p>\n<p><img decoding=\"async\" alt=\"Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacurile hackerilor pe carduri inteligente \u0219i procesoare criptografice cu protec\u021bie \u00eencorporat\u0103\" src=\"\/wp-content\/uploads\/2019\/09\/6e150558b3905cdd5c24e4a7d73b44f5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDomeniul atacurilor prin canalul lateral se dezvolt\u0103 rapid, iar noi rezultate de cercetare sunt publicate anual, devenind cunoscute sau f\u0103c\u00e2nd obligatorie certificarea circuitelor \u0219i standardelor. Inspector permite utilizatorilor s\u0103 fie la curent cu noile dezvolt\u0103ri \u0219i actualiz\u0103rile regulate ale software-ului, care implementeaz\u0103 noi metode.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/467449\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430 \u0441\u0447\u0435\u0442 \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u0445 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u043c\u0438 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u043d\u0430\u043d\u0438\u0439, \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0438. \u0410\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043b\u0435\u0433\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u044b\u043c\u0438 \u0438 \u043d\u0435\u0440\u0430\u0437\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u043c\u0438, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28637,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38148","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u0438 \u043a \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Detectarea vulnerabilit\u0103\u021bilor \u0219i evaluarea rezisten\u021bei la atacuri cibernetice a smart cardurilor \u0219i a microprocesoarelor cu protec\u021bie \u00eencorporat\u0103 | ProHoster","description":"\u00cen ultimele zece ani, pe l\u00e2ng\u0103 metodele de extragere a secretelor sau de desf\u0103\u0219urare a altor ac\u021biuni neautorizate, atacatorii au \u00eenceput s\u0103 utilizeze scurgerea accidental\u0103 a datelor \u0219i manipularea procesului de execu\u021bie a programelor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u0442\u043e\u0439\u043a\u043e\u0441\u0442\u0438 \u043a \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 | ProHoster","og:description":"\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u0435 \u043f\u043e\u043c\u0438\u043c\u043e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0435\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0437\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/obnaruzhenie-uyazvimostej-i-otsenki-stojkosti-k-hakerskim-atakam-smart-kart-i-kriptoprotsessorov-so-vstroennoj-zashhitoj","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:56+00:00","article:modified_time":"2019-10-31T19:21:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38148","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:38:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:22","updated":"2026-01-23 20:38:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=38148"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38148\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/28637"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=38148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=38148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=38148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}