I-TEMPEST kanye ne-EMSEC: ingabe amaza kagesi angasetshenziswa ekuhlaselweni kwe-cyber?

I-TEMPEST kanye ne-EMSEC: ingabe amaza kagesi angasetshenziswa ekuhlaselweni kwe-cyber?

Muva nje eVenezuela uchungechunge lokunqamuka kukagesi, okushiye izifunda ezingu-11 zakuleli zingenawo ugesi. Kusukela ekuqaleni kwalesi sigameko, uhulumeni kaNicolás Maduro wathi kunjalo isenzo sokucekela phansi, okwenziwa kwaba nokwenzeka ukuhlasela kukazibuthe kagesi kanye ne-cyber enkampanini kazwelonke kagesi i-Corpoelec nezizinda zayo zamandla. Ngokuphambene nalokho, uhulumeni ozibize ngoJuan Guaidó uvele wasibhala lesi sigameko ngokuthi "ukungasebenzi [kanye] nokwehluleka kombuso".

Ngaphandle kokuhlaziywa okungachemi nokujulile kwesimo, kunzima kakhulu ukunquma ukuthi lokhu kucisha kube umphumela wokucekela phansi noma ngabe kudalwe ukushoda kwesondlo. Kodwa-ke, izinsolo zezinsolo zokucekela phansi impahla ziphakamisa imibuzo eminingi ethokozisayo ehlobene nezokuphepha kolwazi. Amasistimu amaningi okulawula kwingqalasizinda ebalulekile, njengezitshalo zikagesi, avaliwe ngakho-ke awanakho ukuxhumana kwangaphandle ku-inthanethi. Ngakho-ke umbuzo uphakama: ingabe abahlaseli be-inthanethi bangafinyelela yini kumasistimu e-IT avaliwe ngaphandle kokuxhuma ngokuqondile kumakhompyutha abo? Impendulo ithi yebo. Kulokhu, amagagasi kagesi angaba i-vector yokuhlasela.

Indlela "yokubamba" imisebe ye-electromagnetic


Zonke izinto zikagesi zikhiqiza imisebe ngendlela yamasignali kagesi kanye ne-acoustic. Kuye ngenani lezici, njengebanga kanye nokuba khona kwezithiyo, izisetshenziswa zokulalela zingakwazi "ukuthwebula" amasiginali asuka kulawa madivayisi zisebenzisa izinti ezikhethekile noma imibhobho ezwela kakhulu (uma kwenzeka kumasiginali we-acoustic) futhi iwacubungule ukuze kukhishwe ulwazi oluwusizo. Imishini enjalo ihlanganisa iziqaphi namakhibhodi, futhi ngenxa yalokho angasetshenziswa futhi izigebengu ze-inthanethi.

Uma sikhuluma ngabaqaphi, emuva ngo-1985 umcwaningi u-Wim van Eyck washicilela idokhumenti yokuqala engahlukaniswanga mayelana nezingozi zokuphepha ezidalwa imisebe evela kuleyo mishini. Njengoba ukhumbula, ngaleso sikhathi abaqaphi babesebenzisa amashubhu e-cathode ray (CRTs). Ucwaningo lwakhe lwabonisa ukuthi imisebe evela kumonitha “ingafundwa” kude futhi isetshenziselwe ukwakha kabusha izithombe ezikhonjiswe kumonitha. Lesi sigameko saziwa ngele-van Eyck interception, kanti empeleni kunjalo esinye sezizathu, kungani amazwe amaningi, okuhlanganisa i-Brazil ne-Canada, ebheka amasistimu okuvota e-elekthronikhi angavikelekile kakhulu ukuze asetshenziswe ezinqubweni zokhetho.

I-TEMPEST kanye ne-EMSEC: ingabe amaza kagesi angasetshenziswa ekuhlaselweni kwe-cyber?
Izisetshenziswa ezisetshenziselwa ukufinyelela enye ikhompuyutha ephathekayo etholakala egumbini elilandelayo. Umthombo: University of Tel Aviv

Nakuba abaqaphi be-LCD kulezi zinsuku bekhiqiza imisebe emincane kakhulu kune-CRT monitors, ucwaningo lwakamuva wabonisa ukuthi nabo basengozini. Ngaphezu kwalokho, ongoti baseTel Aviv University (Israel) bakukhombise ngokusobala lokhu. Bakwazile ukufinyelela okuqukethwe okubethelwe kukhompuyutha ephathekayo etholakala ekamelweni elilandelayo besebenzisa okokusebenza okulula okubiza cishe u-$3000, okuhlanganisa uthi, isikhulisi kanye nekhompyutha ephathekayo enesofthiwe ekhethekile yokucubungula isignali.

Ngakolunye uhlangothi, amakhibhodi ngokwawo angaba ebucayi ukuvimba imisebe yabo. Lokhu kusho ukuthi kunengozi engaba khona yokuhlaselwa ku-inthanethi lapho abahlaseli bengathola khona izifakazelo zokungena namaphasiwedi ngokuhlaziya ukuthi yibaphi okhiye abacindezelwe kukhibhodi.

I-TEMPEST kanye ne-EMSEC


Ukusetshenziswa kwemisebe ukuze kukhishwe ulwazi kwaqala ukusebenza phakathi neMpi Yezwe Yokuqala, futhi kwakuhlotshaniswa nezintambo zocingo. Lezi zindlela zasetshenziswa kakhulu phakathi neMpi Yomshoshaphansi ngamathuluzi athuthuke kakhulu. Ngokwesibonelo, idokhumenti ye-NASA yahlukaniswa kusukela ngo-1973 uchaza ukuthi, ngo-1962, isikhulu sezokuphepha e-Embassy yase-US eJapane sathola ukuthi i-dipole ebekwe esibhedlela esiseduze yayiqondiswe esakhiweni senxusa ukuze ibambe izimpawu zayo.

Kodwa umqondo we-TEMPEST njengoba unjalo uqala ukuvela vele kuma-70s neyokuqala iziqondiso zokuphepha ngemisebe ezivele e-USA . Leli gama lekhodi libhekisela ocwaningweni lokukhishwa okungahlosiwe okuvela emishinini kagesi okungase kuvuze ulwazi oluhlukanisiwe. Izinga le-TEMPEST lakhiwe I-US National Security Agency (NSA) futhi kwaholela ekuqhamukeni kwamazinga okuphepha nawo ayekhona yamukelwa ku-NATO.

Leli gama livame ukusetshenziswa ngokushintshana negama elithi EMSEC (ukuphepha kokukhipha umoya), okuyingxenye yamazinga I-COMSEC (ukuphepha kwezokuxhumana).

Ukuvikelwa kwe-TEMPEST


I-TEMPEST kanye ne-EMSEC: ingabe amaza kagesi angasetshenziswa ekuhlaselweni kwe-cyber?
Umdwebo we-cryptographic obomvu/omnyama wedivayisi yokuxhumana. Umthombo: UDavid Kleidermacher

Okokuqala, ukuphepha kwe-TEMPEST kusebenza kumqondo oyisisekelo we-cryptographic owaziwa ngokuthi i-Red/Black architecture. Lo mqondo uhlukanisa amasistimu abe okokusebenza “Okubomvu,” okusetshenziselwa ukucubungula ulwazi oluyimfihlo, kanye nempahla “Emnyama”, edlulisela idatha ngaphandle kokuhlukaniswa kwezokuphepha. Enye yezinjongo zokuvikela kwe-TEMPEST yilokhu kuhlukaniswa, okuhlukanisa zonke izingxenye, ukuhlukanisa imishini "ebomvu" kusukela "emnyama" ngezihlungi ezikhethekile.

Okwesibili, kubalulekile ukukhumbula iqiniso lokuthi wonke amadivaysi akhipha izinga elithile lemisebe. Lokhu kusho ukuthi izinga eliphakeme kakhulu lokuvikela lizoba ukuvikela okuphelele kwendawo yonke, okuhlanganisa amakhompyutha, amasistimu kanye nezingxenye. Kodwa-ke, lokhu kungabiza kakhulu futhi kungenzeki ezinhlanganweni eziningi. Ngenxa yalesi sizathu, izindlela eziqondiswe kakhulu zisetshenziswa:

Ukuhlolwa Kwendawo: Isetshenziselwa ukuhlola ileveli yokuphepha ye-TEMPEST yezikhala, ukufakwa, namakhompyutha. Ngemva kwalokhu kuhlola, izinsiza zingaqondiswa kulezo zingxenye namakhompyutha aqukethe ulwazi olubucayi kakhulu noma idatha engabethelwe. Izinhlaka ezahlukene ezisemthethweni ezilawula ukuphepha kwezokuxhumana, njenge-NSA yase-USA noma CCN eSpain, qinisekisa amasu anjalo.

Izindawo ezivikelekile: Ukuhlolwa kwendawo kungase kubonise ukuthi izikhala ezithile eziqukethe amakhompyutha azihlangabezani ngokugcwele nazo zonke izidingo zokuphepha. Ezimweni ezinjalo, inketho eyodwa ukuvikela ngokuphelele isikhala noma ukusebenzisa amakhabethe avikelekile kumakhompyutha anjalo. Lawa makhabethe enziwe ngezinto ezikhethekile ezivimbela ukusabalala kwemisebe.

Amakhompyutha anezitifiketi zawo ze-TEMPEST: Ngezinye izikhathi ikhompuyutha ingase ibe sendaweni evikelekile kodwa intule ukuvikeleka okwanele. Ukuze kuthuthukiswe izinga elikhona lokuphepha, kukhona amakhompyutha nezinhlelo zokuxhumana ezinezitifiketi zazo ze-TEMPEST, eziqinisekisa ukuphepha kwezingxenyekazi zekhompuyutha zazo nezinye izingxenye.

I-TEMPEST ibonisa ukuthi noma ngabe amasistimu ebhizinisi anezindawo ezibonakalayo ezivikelekile cishe noma engaxhumekile ngisho nokuxhumana kwangaphandle, asikho isiqinisekiso sokuthi avikeleke ngokuphelele. Kunoma ikuphi, ubungozi obuningi kwingqalasizinda ebalulekile buhlobene kakhulu nokuhlasela okuvamile (isibonelo, i-ransomware), okuyikhona esikwenzayo. kubikwe kamuva. Kulezi zimo, kulula kakhulu ukugwema ukuhlaselwa okunjalo usebenzisa izinyathelo ezifanele kanye nezixazululo zokuphepha kolwazi oluthuthukisiwe ngezinketho zokuvikela ezithuthukisiwe. Ukuhlanganisa zonke lezi zinyathelo zokuvikela kuwukuphela kwendlela yokuqinisekisa ukuphepha kwezinhlelo ezibalulekile ekusaseni lenkampani noma izwe lonke.

Source: www.habr.com

Engeza amazwana