Isixhobo esivulekileyo sokujongwa kwenethiwekhi ngezixhobo ze-IoT

Siyakuxelela ukuba yintoni i-IoT Inspector kunye nendlela esebenza ngayo.

Isixhobo esivulekileyo sokujongwa kwenethiwekhi ngezixhobo ze-IoT
/ ifoto PxApha PD

Malunga ne-Intanethi yezinto zokhuseleko

Kwinkampani yokucebisa iBain & Company (PDF, iphepha 1) bathi ukusuka kwi-2017 ukuya kwi-2021 ubungakanani beemarike ze-IoT buya kabini: ukusuka kwi-235 ukuya kwi-520 yeebhiliyoni zeedola. Isabelo seegajethi zasekhaya ezihlakaniphile iya kuxabisa i-47 yeebhiliyoni zeerandi. Iingcali zokhuseleko lolwazi zixhalabile malunga namazinga okukhula anjalo.

Ngu ngokutsho kweAvast, kwi-40% yamatyala ubuncinane esinye isixhobo esihlakaniphile sinomngcipheko obalulekileyo obeka yonke inethiwekhi yasekhaya emngciphekweni. KwiLab yaseKaspersky zisekiwe, ukuba kwikota yokuqala yonyaka odlulileyo, i-smart gadgets ihlaselwe ngokuphindwe kathathu kunayo yonke i-2017.

Ukukhusela izixhobo ezihlakaniphile, abasebenzi beenkampani ze-IT kunye neeyunivesithi baphuhlisa izixhobo zesoftware entsha. Iqela lobunjineli kwiYunivesithi yasePrinceton yenziwe Iqonga elivulekileyo lomhloli wePrinceton IoT. Esi sisicelo sedesktop esibeka iliso kwindlela yokuziphatha kunye nokusebenza kwezixhobo ze-IoT ngexesha lokwenyani.

Isebenza njani le nkqubo

Umhloli we-IoT ubeka esweni umsebenzi wezixhobo ze-IoT kwinethiwekhi esebenzisa itekhnoloji ARP spoofing. Ingasetyenziselwa ukuhlalutya i-traffic yesixhobo. Inkqubo iqokelela ulwazi olungaziwayo malunga netrafikhi yenethiwekhi ukuchonga umsebenzi okrokrelayo. Kule meko, idatha efana ne-IP kunye needilesi ze-MAC azithathelwa ngqalelo.

Xa uthumela iipakethi ze-ARP le khowudi ilandelayo isetyenziswa:

class ArpScan(object):

    def __init__(self, host_state):

        assert isinstance(host_state, HostState)

        self._lock = threading.Lock()
        self._active = True

        self._thread = threading.Thread(target=self._arp_scan_thread)
        self._thread.daemon = True

    def start(self):

        with self._lock:
            self._active = True

        utils.log('[ARP Scanning] Starting.')
        self._thread.start()

    def _arp_scan_thread(self):

        utils.restart_upon_crash(self._arp_scan_thread_helper)

    def _arp_scan_thread_helper(self):

        while True:

            for ip in utils.get_network_ip_range():

                time.sleep(0.05)

                arp_pkt = sc.Ether(dst="ff:ff:ff:ff:ff:ff") / 
                    sc.ARP(pdst=ip, hwdst="ff:ff:ff:ff:ff:ff")
                sc.sendp(arp_pkt, verbose=0)

                with self._lock:
                    if not self._active:
                        return

    def stop(self):

        utils.log('[ARP Scanning] Stopping.')

        with self._lock:
            self._active = False

        self._thread.join()

        utils.log('[ARP Scanning] Stopped.')

Emva kokuhlalutya inethiwekhi, iseva yoMhloli we-IoT iseka ukuba zeziphi iisayithi ze-IoT zotshintshiselwano lwedatha, zikwenza kangaphi oku, kwaye zingaphi na umthamo ozithumelayo kunye nokufumana iipakethi. Ngenxa yoko, inkqubo inceda ukuchonga izixhobo ezikrokrisayo apho iPD ingathunyelwa ngaphandle kolwazi lomsebenzisi.

Okwangoku, isicelo sisebenza kuphela kwi-macOS. Unokukhuphela indawo yokugcina ye-zip apha iwebhusayithi yeprojekthi. Ukufakela, uya kufuna iMacOS High Sierra okanye iMojave, Firefox okanye isikhangeli seChrome. I-app ayisebenzi kwiSafari. Isikhokelo sokuFakelo kunye noLungiselelo iyafumaneka kuYouTube.

Kulo nyaka, abaphuhlisi bathembisa ukongeza inguqulo yeLinux, kwaye ngoMeyi - isicelo seWindows. Ikhowudi yomthombo weprojekthi iyafumaneka kwiGitHub.

Ezinokubakho kunye neeNgeniso

Abaphuhlisi bathi inkqubo iya kunceda iinkampani ze-IT zijonge ubuthathaka kwisoftware yezixhobo ze-IoT kwaye zenze izixhobo ezikhuselekileyo ezikhuselekileyo. Isixhobo sele sibona ukhuseleko kunye nobuthathaka bokusebenza.

Umhloli we-IoT ufumana izixhobo ezinxibelelana rhoqo, nokuba akukho mntu uzisebenzisayo. Isixhobo sikwanceda ukubona izixhobo ezihlakaniphile ezicutha inethiwekhi, njengokukhuphela uhlaziyo rhoqo.

Umhloli we-IoT usenazo iintsilelo. Kuba isicelo silingo, ayikavavanywa kuzo zonke izixhobo ze-IoT ezinolungelelwaniso olwahlukileyo. Ngoko ke, isixhobo ngokwaso sinokuba nefuthe elibi ekusebenzeni kweegajethi ezihlakaniphile. Ngenxa yesi sizathu, ababhali abacebisi ukudibanisa isicelo kwiigajethi zonyango.

Ngoku abaphuhlisi bagxile ekupheliseni iziphene, kodwa kwixesha elizayo iqela leYunivesithi yasePrinceton liceba ukwandisa ukusebenza kwesicelo sabo kunye nokwazisa i-algorithms yokufunda koomatshini kuyo. Baya kunceda ukwandisa amathuba okufumana ukuhlaselwa kweDDoS kwi-99%. Unokuziqhelanisa nazo zonke iimbono zabaphandi le ngxelo yePDF.

Ezinye iiprojekthi ze-IoT

Iqela labaphuhlisi baseMelika abasebenzisana noDanny Goodman, umbhali weencwadi kwiJavaScript kunye ne-HTML, benza isixhobo sokubeka iliso kwi-Intanethi yeZinto ecosystem - Inkqubo yeNto.

Injongo yeprojekthi kukudibanisa izixhobo ze-IoT zasekhaya ezihlakaniphile zibe yinethiwekhi enye kunye nolawulo oluphakathi. Abaphuhlisi bathi izixhobo ezivela kubavelisi abahlukeneyo zihlala zingakwazi ukunxibelelana kunye nokusebenza ngokwahlukeneyo. Ukusombulula ingxaki, ababhali beli nyathelo benza isoftware enokusebenza ngeeprotocol ezahlukeneyo zenethiwekhi, izixhobo kunye nezicelo zabathengi.

Uluhlu lwezixhobo ezixhaswayo iyafumaneka kwiwebhusayithi yeprojekthi. Apho unokufumana kwakhona imvelaphi ΠΈ Isikhokelo sokuqalisa ngokukhawuleza.

Enye iprojekthi evulekileyo - PrivateEyePi. Ababhali benyathelo lokuqala lokwabelana ngezisombululo zesoftware kunye nekhowudi yomthombo yokwenza inethiwekhi ye-IoT eyeyakho esekwe kwiRaspberry Pi. Isiza sinenani elikhulu lezikhokelo onokwakha ngazo wireless inethiwekhi yabenzi boluvo iqondo lokushisa, ukufuma, kwaye uqwalasele inkqubo yokhuseleko ekhaya.

Isixhobo esivulekileyo sokujongwa kwenethiwekhi ngezixhobo ze-IoT
/ ifoto PxApha PD

Ikamva lezisombululo ezinjalo

Iiprojekthi zemithombo evulekileyo, amathala eencwadi kunye nesikhokelo ziya zivela ngakumbi kwimarike ye-IoT. I-Linux Foundation, ekwasebenza kwintsimi ye-IoT (badale inkqubo yokusebenza track), bathi izixhobo zomthombo ovulekileyo zithathwa njengekhuselekile ngakumbi. Olu luvo lubangelwa kukuba "i-intelligence collective" yoluntu lweengcali zokhuseleko lolwazi zithatha inxaxheba ekuphuhlisweni kwazo. Ukusuka kuyo yonke le nto sinokugqiba ukuba iiprojekthi ezifana ne-IoT Inspector ziya kubonakala rhoqo kwaye ziya kunceda ukwenza eli candelo lezixhobo likhuseleke ngakumbi.

Izithuba ezivela kwiBlog yeShishini lokuQala le-IaaS:

umthombo: www.habr.com

Yongeza izimvo