Ithuluzi elivulekile lokuqapha inethiwekhi ngamadivayisi we-IoT

Siyakutshela ukuthi iyini i-IoT Inspector nokuthi isebenza kanjani.

Ithuluzi elivulekile lokuqapha inethiwekhi ngamadivayisi we-IoT
/isithombe amasheya PD

Mayelana nokuphepha kwe-inthanethi Yezinto

Enkampanini yokubonisana i-Bain & Company (PDF, ikhasi 1) bathi kusukela ku-2017 kuya ku-2021 ubukhulu bemakethe ye-IoT buzophindwe kabili: kusuka ku-235 kuya ku-520 billion dollar. Isabelo samagajethi asekhaya ahlakaniphile izobiza amaRandi ayizigidi eziyizinkulungwane ezingama-47. Ochwepheshe bezokuphepha kolwazi bakhathazekile ngamazinga anjalo okukhula.

Ngu ngokusho kwe-Avast, Ezimweni ezingu-40% okungenani idivayisi eyodwa ehlakaniphile isengozini enkulu okubeka yonke inethiwekhi yasekhaya engcupheni. EKaspersky Lab sebesungule, ukuthi engxenyeni yokuqala yonyaka odlule, amagajethi ahlakaniphile ahlaselwe ngokuphindwe kathathu kunakuwo wonke u-2017.

Ukuze kuvikelwe amadivaysi ahlakaniphile, abasebenzi bezinkampani ze-IT namanyuvesi bakha amathuluzi esofthiwe amasha. Ithimba Lobunjiniyela kusuka ePrinceton University kudaliwe I-Princeton IoT Inspector yesikhulumi esivulekile. Lolu uhlelo lokusebenza lwedeskithophu oluqapha ukuziphatha nokusebenza kwamadivayisi we-IoT ngesikhathi sangempela.

Indlela uhlelo lokusebenza olusebenza ngayo

I-IoT Inspector iqapha umsebenzi wamadivayisi e-IoT kunethiwekhi esebenzisa ubuchwepheshe ARP spoofing. Ingasetshenziselwa ukuhlaziya ithrafikhi yedivayisi. Uhlelo luqoqa ulwazi olungaziwa mayelana nethrafikhi yenethiwekhi ukuhlonza umsebenzi osolisayo. Kulesi simo, idatha efana namakheli e-IP kanye ne-MAC ayibhekwa.

Lapho uthumela amaphakethe e-ARP ikhodi elandelayo isetshenziswa:

class ArpScan(object):

    def __init__(self, host_state):

        assert isinstance(host_state, HostState)

        self._lock = threading.Lock()
        self._active = True

        self._thread = threading.Thread(target=self._arp_scan_thread)
        self._thread.daemon = True

    def start(self):

        with self._lock:
            self._active = True

        utils.log('[ARP Scanning] Starting.')
        self._thread.start()

    def _arp_scan_thread(self):

        utils.restart_upon_crash(self._arp_scan_thread_helper)

    def _arp_scan_thread_helper(self):

        while True:

            for ip in utils.get_network_ip_range():

                time.sleep(0.05)

                arp_pkt = sc.Ether(dst="ff:ff:ff:ff:ff:ff") / 
                    sc.ARP(pdst=ip, hwdst="ff:ff:ff:ff:ff:ff")
                sc.sendp(arp_pkt, verbose=0)

                with self._lock:
                    if not self._active:
                        return

    def stop(self):

        utils.log('[ARP Scanning] Stopping.')

        with self._lock:
            self._active = False

        self._thread.join()

        utils.log('[ARP Scanning] Stopped.')

Ngemva kokuhlaziya inethiwekhi, iseva ye-IoT Inspector ithola ukuthi yimaphi amasayithi e-IoT amagajethi ashintshanisa idatha, akwenza kangaki lokhu, nokuthi adlulisa futhi amukele amaphakethe ngamavolumu amaphi. Ngenxa yalokho, uhlelo lusiza ukuhlonza izinsiza ezisolisayo lapho i-PD ingathunyelwa khona ngaphandle kolwazi lomsebenzisi.

Okwamanje, uhlelo lokusebenza lusebenza kuphela kuma-macOS. Ungalanda ingobo yomlando ye-zip kokuthi iwebhusayithi yephrojekthi. Ukufaka, uzodinga iMacOS High Sierra noma iMojave, Firefox noma isiphequluli se-Chrome. Uhlelo lokusebenza alusebenzi ku-Safari. Umhlahlandlela Wokufaka kanye Nokumisa iyatholakala ku-YouTube.

Kulo nyaka, abathuthukisi bathembise ukungeza inguqulo ye-Linux, futhi ngoMeyi - isicelo seWindows. Ikhodi yomthombo wephrojekthi iyatholakala ku-GitHub.

Okungenzeka kanye Nemibi

Abathuthukisi bathi lolu hlelo luzosiza izinkampani ze-IT zibheke ubungozi ku-software yamadivayisi we-IoT futhi zenze amadivaysi ahlakaniphile aphephe kakhudlwana. Ithuluzi selingakwazi kakade ukubona ukuphepha nokusebenza engozini.

I-IoT Inspector ithola amadivaysi axhumana njalo, ngisho noma kungekho muntu owasebenzisayo. Ithuluzi futhi lisiza ukuthola amadivayisi ahlakaniphile enza inethiwekhi ingasheshi, njengokulanda izibuyekezo kaningi.

Umhloli we-IoT usenawo amaphutha athile. Njengoba uhlelo lokusebenza lusahlolwa, alukahlolwa kuwo wonke amadivayisi we-IoT anokulungiselelwa okuhlukile. Ngakho-ke, ithuluzi ngokwalo lingaba nomthelela omubi ekusebenzeni kwamagajethi ahlakaniphile. Ngalesi sizathu, ababhali abancomi ukuxhuma isicelo kumagajethi ezokwelapha.

Manje abathuthukisi bagxile ekuqedeni iziphazamisi, kodwa esikhathini esizayo ithimba leNyuvesi yasePrinceton lihlela ukwandisa ukusebenza kwesicelo sabo futhi lethule ama-algorithms okufunda komshini kukho. Bazosiza ukwandisa amathuba okuthola ukuhlaselwa kwe-DDoS ku-99%. Ungakwazi ukujwayelana nayo yonke imibono yabacwaningi ku lo mbiko we-PDF.

Amanye amaphrojekthi we-IoT

Iqembu lonjiniyela baseMelika abasebenzisana noDanny Goodman, umbhali wezincwadi zeJavaScript ne-HTML, bakha ithuluzi lokuqapha i-inthanethi Yezinto Ecosystem - Isistimu Yezinto.

Umgomo wephrojekthi ukuhlanganisa amagajethi e-IoT yasekhaya ahlakaniphile abe yinethiwekhi eyodwa kanye nokulawula okuphakathi. Onjiniyela bathi amadivayisi avela kubakhiqizi abahlukene ngokuvamile awakwazi ukuxhumana futhi asebenze ngokuhlukana. Ukuze kuxazululwe inkinga, ababhali besinyathelo bakha isofthiwe engasebenza nezinqubo ezihlukene zenethiwekhi, amagajethi kanye nezinhlelo zokusebenza zamakhasimende.

Uhlu lwamadivayisi asekelwe etholakala kuwebhusayithi yephrojekthi. Lapho ungathola futhi ikhodi yomthombo ΠΈ umhlahlandlela wokuqala osheshayo.

Enye iphrojekthi evulekile - PrivateEyePi. Ababhali bezixazululo zesoftware yokuqala babelana nekhodi yomthombo yokwakha inethiwekhi yomuntu siqu ye-IoT esekelwe ku-Raspberry Pi. Isayithi linenqwaba yeziqondiso ongakha ngazo okungenantambo inethiwekhi yezinzwa izinga lokushisa, umswakama, futhi futhi ulungiselele uhlelo lokuphepha ekhaya.

Ithuluzi elivulekile lokuqapha inethiwekhi ngamadivayisi we-IoT
/isithombe amasheya PD

Ikusasa lezixazululo ezifanayo

Amaphrojekthi omthombo ovulekile, imitapo yolwazi nezinhlaka ziya ngokuya zivela emakethe ye-IoT. I-Linux Foundation, esebenza futhi emkhakheni we-IoT (badale uhlelo lokusebenza I-Zephyr), bathi amathuluzi omthombo ovulekile abhekwa njengevikeleke kakhulu. Lo mbono ungenxa yokuthi β€œubuhlakani obuhlangene” bomphakathi wochwepheshe bezokuphepha bolwazi bubamba iqhaza ekuthuthukisweni kwabo. Kusuka kukho konke lokhu singaphetha ngokuthi amaphrojekthi afana ne-IoT Inspector azovela kaningi futhi azosiza ukwenza le ngxenye yamadivayisi ivikeleke kakhulu.

Okuthunyelwe okuvela kubhulogi Lokuqala mayelana ne-IaaS yebhizinisi:

Source: www.habr.com

Engeza amazwana