TEMPEST uye EMSEC: mafungu emagetsi anogona kushandiswa mukurwiswa kwecyber?

TEMPEST uye EMSEC: mafungu emagetsi anogona kushandiswa mukurwiswa kwecyber?

Venezuela ichangobva kuitika kutevedzana kwekudzima kwemagetsi, izvo zvasiya matunhu gumi nerimwe enyika ino asina magetsi. Kubva pakutanga kwechiitiko ichi, hurumende yaNicolΓ‘s Maduro yakataura kuti yaive chiito chekuparadza, iyo yakaitwa kuti igoneke nekurwiswa kwemagetsi uye cyber pakambani yenyika yemagetsi Corpoelec nemagetsi ayo. Kusiyana neizvi, hurumende yakazviti yaJuan GuaidΓ³ yakangonyora chiitiko ichi se "kusashanda [uye] kukundikana kwehurumende".

Pasina kusarura uye kwakadzama kuongororwa kwemamiriro ezvinhu, zvakaoma zvikuru kuziva kana kubuda uku kwakakonzerwa nekuparadza kana kuti kwakakonzerwa nekushaikwa kwekugadzirisa. Nekudaro, kupomerwa mhosva yekupara mhosva kunomutsa akati wandei emibvunzo inonakidza ine chekuita nekuchengetedza ruzivo. Mazhinji masisitimu ekudzora mune zvakakosha masisitimu, akadai semagetsi emagetsi, akavharwa uye saka haana ekunze anobatana neInternet. Saka mubvunzo unomuka: vanogona here vanorwisa cyber vanogona kuwana yakavharwa IT masisitimu vasina kubatana zvakananga kumakomputa avo? Mhinduro ndihongu. Muchiitiko ichi, mafungu emagetsi anogona kunge ari kurwisa vector.

Maitiro e "kubata" electromagnetic radiation


Zvese zvigadzirwa zvemagetsi zvinogadzira radiation muchimiro chemagetsi uye acoustic masaini. Zvichienderana nehuwandu hwezvinhu, senge chinhambwe uye kuvapo kwezvipingamupinyi, midziyo yekuteerera inogona "kutora" masaini kubva kumidziyo iyi uchishandisa antenna akakosha kana maikorofoni anonzwa zvakanyanya (munyaya yeacoustic masaini) nekuagadzirisa kuti abudise ruzivo runobatsira. Midziyo yakadai inosanganisira mamonitor nemakiyibhodhi, uye nekudaro anogona kushandiswa nematsotsi epa cyber.

Kana tikataura nezve monitors, saka kumashure muna 1985, muongorori Wim van Eyck akaburitsa gwaro rekutanga risina kunyorwa nezve njodzi dzekuchengetedza dzinounzwa nemwaranzi kubva kumidziyo yakadaro. Sezvaunorangarira, kumashure panguva iyoyo mamonitor akashandisa cathode ray chubhu (CRTs). Tsvagiridzo yake yakaratidza kuti radiation kubva pachitarisiko inogona "kuverengwa" kure uye kushandiswa kugadzira patsva mifananidzo inoratidzwa pane yekutarisa. Ichi chiitiko chinozivikanwa sevan Eyck interception, uye ndizvo zvazviri chimwe chezvikonzero, nei nyika dzakati wandei, kusanganisira Brazil neCanada, dzichifunga nezvemagadzirirwo ekuvhota emagetsi haana kuchengetedzwa kuti ashandiswe pakuita sarudzo.

TEMPEST uye EMSEC: mafungu emagetsi anogona kushandiswa mukurwiswa kwecyber?
Midziyo inoshandiswa kuwana imwe laptop iri mukamuri rinotevera. Kwakabva: University of Tel Aviv

Kunyangwe maLCD monitors mazuva ano achigadzira yakaderera radiation pane CRT monitors, ongororo yazvino zvakaratidza kuti naivowo vari panjodzi. Uyezve, nyanzvi dzeTel Aviv University (Israel) dzakaratidza izvi zvakajeka. Vakakwanisa kuwana zvakavharidzirwa palaptop iri mukamuri rinotevera vachishandisa michina iri nyore inodhura mari inosvika US$3000, yaisanganisira antenna, amplifier uye laptop ine special signal processing software.

Kune rumwe rutivi, makiyibhodhi pachawo anogonawo kuva sensitive kumisa mwaranzi yavo. Izvi zvinoreva kuti pane njodzi inogona kuitika yecyber-kurwiswa umo vanorwisa vanogona kudzoreredza zvitupa zvekupinda uye mapassword nekuongorora kuti ndeapi makiyi akatsikirirwa pakhibhodi.

TEMPEST uye EMSEC


Kushandiswa kwemwaranzi kuburitsa ruzivo kwaive nekutanga kushanda panguva yeHondo Yenyika Yekutanga, uye kwaive kwakabatana newaya dzenhare. Nzira idzi dzakashandiswa zvakanyanya munguva yose yeCold War nemichina yemhando yepamusoro. Semuyenzaniso, declassified NASA gwaro kubva 1973 inotsanangura kuti sei, muna 1962, mukuru wezvekuchengetedza paEmbassy yeUnited States muJapan akawana kuti dipole yakaiswa pachipatara chiri pedyo yakanga yakananga pachivako cheembassy kuti ibate zviratidzo zvayo.

Asi iyo pfungwa yeTEMPEST seyakadaro inotanga kuoneka mu70s neyekutanga mirairo yekuchengetedza radiation yakaonekwa muUSA . Iri zita rekodhi rinoreva kutsvagisa kuburitsa nekusaziva kubva kumidziyo yemagetsi inogona kuburitsa ruzivo rwakasiyana. Iyo TEMPEST mwero wakagadzirwa US National Security Agency (NSA) uye zvakaita kuti pave nemaitiro ekuchengetedza aivewo yakagamuchirwa muNATO.

Iri izwi rinowanzo shandiswa zvakafanana nezwi rokuti EMSEC (emissions security), inova chikamu chezviyero COMSEC (kuchengetedzwa kwekutaurirana).

TEMPEST kudzivirira


TEMPEST uye EMSEC: mafungu emagetsi anogona kushandiswa mukurwiswa kwecyber?
Tsvuku/Dema cryptographic architecture dhiyagiramu yechishandiso chekutaurirana. Kwakabva: David Kleidermacher

Chekutanga, TEMPEST chengetedzo inoshanda kune yakakosha cryptographic pfungwa inozivikanwa seRed/Black architecture. Iyi pfungwa inopatsanura masisitimu kuita "Red" midziyo, iyo inoshandiswa kugadzirisa zvakavanzika ruzivo, uye "Nhema" midziyo, iyo inotumira data pasina chengetedzo yemhando. Chimwe chezvinangwa zveTEMPEST kudzivirira ndekuparadzanisa uku, kunoparadzanisa zvikamu zvose, kuparadzanisa "tsvuku" midziyo kubva "dema" ine mafiritsi anokosha.

Chechipiri, zvakakosha kuchengeta mupfungwa kuti zvese zvishandiso zvinoburitsa imwe mwero yemwaranzi. Izvi zvinoreva kuti iyo yepamusoro-soro inokwanisika yekudzivirira ichave yakakwana kuchengetedzwa kwenzvimbo yese, kusanganisira makomputa, masisitimu uye zvikamu. Nekudaro, izvi zvingave zvakadhura zvakanyanya uye zvisingashande kumasangano mazhinji. Nokuda kwechikonzero ichi, mamwe maitiro anonangwa anoshandiswa:

β€’ Zoning Assessment: Inoshandiswa kuongorora iyo TEMPEST chengetedzo yenzvimbo, kuisa, uye makomputa. Mushure mekuongorora uku, zviwanikwa zvinogona kutungamirwa kune izvo zvikamu uye makomputa ane ruzivo rwakanyanya kana data isina kunyorwa. Masangano akasiyana-siyana ari pamutemo anodzora kuchengetedzwa kwekufambiswa kwemashoko, seNSA muUSA kana CCN muSpain, simbisa maitiro akadaro.

β€’ Nzvimbo dzakadzivirirwa: Ongororo yenzvimbo inogona kuratidza kuti dzimwe nzvimbo dzine makomputa hadzizadzise zvizere zvese zvinodiwa kuchengetedza. Mumamiriro ezvinhu akadaro, imwe sarudzo ndeyekudzivirira zvachose nzvimbo kana kushandisa makabati akavharidzirwa kumakombiyuta akadaro. Aya makabati akagadzirwa nezvinhu zvakakosha zvinodzivirira kupararira kwemwaranzi.

β€’ Makomputa ane yavo TEMPEST zvitupa: Dzimwe nguva komputa inogona kunge iri panzvimbo yakachengeteka asi isina kuchengeteka kwakakwana. Kuwedzera danho riripo rekuchengetedza, kune makomputa uye masisitimu ekutaurirana ane yavo TEMPEST certification, inosimbisa chengetedzo yehardware yavo nezvimwe zvinhu.

TEMPEST inoratidza kuti kunyangwe masisitimu emabhizinesi aine nzvimbo dzakachengeteka dzemuviri kana asina kana kubatana nevekunze kutaurirana, hapachina vimbiso yekuti akachengeteka zvakakwana. Chero zvazvingaitika, kusadzivirirwa kwakawanda muzvivakwa zvakakosha kunowanzo hukama nekurwiswa kwakajairwa (semuenzaniso, ransomware), ndizvo zvatinoita. ichangobva kushumwa. Muzviitiko izvi, zviri nyore kudzivirira kurwiswa kwakadaro uchishandisa matanho akakodzera uye mhinduro dzekuchengetedza ruzivo nesarudzo dzekudzivirira dzepamusoro. Kubatanidza ese aya matanho ekudzivirira ndiyo chete nzira yekuve nechokwadi chekuchengetedza masisitimu akakosha kune ramangwana rekambani kana nyika yese.

Source: www.habr.com

Voeg