{"id":73923,"date":"2020-03-12T20:42:15","date_gmt":"2020-03-12T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva"},"modified":"2020-03-12T20:42:15","modified_gmt":"2020-03-12T17:42:15","slug":"google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","title":{"rendered":"Google har presenterat en blockerare f\u00f6r inmatning genom skadliga USB-enheter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google publicerade<\/a><\/noindex> verktyget ukip<\/a><\/noindex>, vilket g\u00f6r att man kan sp\u00e5ra och blockera attacker<\/a><\/noindex>, attacker som utf\u00f6rs med hj\u00e4lp av skadliga USB-enheter som simulerar ett USB-tangentbord f\u00f6r att osynligt injicera falska tangenttryckningar (till exempel kan det i en attack ha simulerats<\/a><\/noindex> en sekvens av tangenttryckningar som leder till att terminalen \u00f6ppnas och godtyckliga kommandon k\u00f6rs d\u00e4r). Koden \u00e4r skriven i Python och sprids<\/a><\/noindex> \u00e4r licensierad under Apache 2.0. <\/p>\n

verktyget k\u00f6rs som en systemd-tj\u00e4nst och kan fungera i \u00f6vervaknings- och skyddsl\u00e4gen. I \u00f6vervakningsl\u00e4get identifieras potentiella attacker och loggar aktiviteter relaterade till f\u00f6rs\u00f6k att anv\u00e4nda USB-enheter p\u00e5 ett ol\u00e4mpligt s\u00e4tt f\u00f6r att injicera inmatning. I skyddsl\u00e4get kopplas potentiellt skadliga enheter bort fr\u00e5n systemet p\u00e5 drivrivarniv\u00e5. <\/p>\n

Malicious aktivitet detekteras baserat p\u00e5 heuristisk analys av inmatningens karakt\u00e4r och f\u00f6rdr\u00f6jningar mellan tangentytryckningar \u2014 attacken genomf\u00f6rs vanligtvis i n\u00e4rvaro av anv\u00e4ndaren och f\u00f6r att den ska f\u00f6rbli obem\u00e4rkt, simulerade tryck skickas med onormala, minimala f\u00f6rdr\u00f6jningar j\u00e4mf\u00f6rt med typisk tangentbordsinmatning. Tv\u00e5 inst\u00e4llningar har f\u00f6reslagits f\u00f6r att \u00e4ndra logiken f\u00f6r attackdetektering: KEYSTROKE_WINDOW som definierar antalet tryck f\u00f6r analys och ABNORMAL_TYPING som anger tr\u00f6skelintervallet mellan tryckningar.<\/p>\n

En attack kan utf\u00f6ras med hj\u00e4lp av en misst\u00e4nkt enhet med modifierad firmware, till exempel kan man simulera ett tangentbord i USB-minnet<\/a><\/noindex>, USB-hubben<\/a><\/noindex>, webbkameran<\/a><\/noindex> eller smartphonen<\/a><\/noindex> (i Kali NetHunter<\/a><\/noindex> erbjuder ett speciellt verktyg f\u00f6r att injicera inmatning fr\u00e5n en smartphone som \u00e4r ansluten till USB-porten och k\u00f6rs p\u00e5 Android-plattformen). F\u00f6r att komplicera attacker via USB kan man ut\u00f6ver ukip ocks\u00e5 anv\u00e4nda paketet USBGuard<\/a><\/noindex>, som till\u00e5ter anslutning av enheter endast fr\u00e5n en vit lista eller blockerar m\u00f6jligheten f\u00f6r anslutning av ok\u00e4nda USB-enheter under l\u00e5sning av sk\u00e4rmen och f\u00f6rhindrar anv\u00e4ndning av s\u00e5dana enheter efter anv\u00e4ndarens \u00e5terkomst.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 ukip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u0438\u043c\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 USB-\u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0438\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u0439, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044e \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432 \u043d\u0451\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434). \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-73923","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google har introducerat en blockerare f\u00f6r inmatningsinjektioner via skadliga USB-enheter | ProHoster","description":"Google har publicerat ett verktyg","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0432\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 USB-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0443","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/google-predstavil-blokirovshhik-podstanovki-vvoda-cherez-vredonosnye-usb-ustrojstva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-12T17:42:15+00:00","article:modified_time":"2020-03-12T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"73923","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:24:24","updated":"2022-10-08 12:19:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/73923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=73923"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/73923\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=73923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=73923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=73923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}