Key Takeaways
- Tus kws tshawb fawb txog kev nyab xeeb tau ua qauv qhia siv SATA cables ua lub kav hlau txais xov wireless.
- Cov no tuaj yeem xa cov ntaub ntawv rhiab los ntawm txhua lub khoos phis tawj, txawm tias ib qho uas tsis muaj cov ntaub ntawv xa xov wireless.
Lwm tus kws paub txog kev ruaj ntseg, txawm li cas los xij, hais tias lwm tus"Lub khoos phis tawj lub khoos phis tawj zaum ntawm lub ntsej muag liab txuas nrog lub tsav sab nraud nrog lub iPhone thiab tus ntiv tes xoo nyob ze." id=mntl-sc-block-image_1-0 /> alt="</h4" />
Kev xa cov ntaub ntawv wirelessly ntawm lub khoos phis tawj uas tsis muaj daim npav wireless suab zoo li txuj ci tseem ceeb tab sis kuj nthuav tawm qhov kev sib tw tshwj xeeb kev nyab xeeb.
Tus kws tshawb fawb txog kev nyab xeeb tau ua kom pom lub tswv yim rau cov neeg tawm tsam nyiag cov ntaub ntawv los ntawm lub khoos phis tawj cua-gapped, uas yog lub khoos phis tawj uas tau txiav tawm tag nrho ntawm lub network thiab tsis muaj wireless lossis wired txuas rau hauv internet. Dubbed SATAn, qhov kev tawm tsam cuam tshuam nrog kev rov ua dua serial ATA (SATA) cables hauv feem ntau cov khoos phis tawj ua lub kav hlau txais xov wireless.
"Qhov no yog qhov piv txwv zoo ntawm vim li cas thiaj li xav tau kev tiv thaiv hauv qhov tob," Josh Lospinoso, CEO thiab tus tsim ntawm Shift5, hais rau Lifewire hauv email. "Tsuas yog huab cua gapping computers yeej tsis txaus vim cov neeg tawm tsam ingenious yuav tuaj nrog cov tswv yim tshiab los tua cov txheej txheem tiv thaiv zoo li qub thaum lawv muaj sijhawm thiab cov peev txheej los ua."
Yuav Ua Li Cas
Rau qhov kev tawm tsam SATAn kom ua tiav, tus neeg tawm tsam thawj zaug yuav tsum tau kis rau lub hom phiaj cua-gapped nrog malware uas hloov cov ntaub ntawv rhiab hauv lub computer mus rau hauv cov xov xwm tshaj tawm.
SATAn tau tshawb pom los ntawm Mordechai Guri, Tus Thawj Coj ntawm R & D ntawm Cyber Security Research Labs ntawm Ben-Gurion University hauv Ixayees. Hauv kev ua qauv qhia, Guri muaj peev xwm tsim hluav taws xob hluav taws xob xa cov ntaub ntawv los ntawm sab hauv lub tshuab cua-gapped mus rau lub computer nyob ze.
Cov kws tshawb fawb txuas ntxiv rov tshawb pom cov kev tawm tsam no, tab sis lawv tsis ua lub luag haujlwm ntsuas hauv kev ua txhaum cai tam sim no…
Ray Canzanese, Tus Thawj Saib Xyuas Kev Nyab Xeeb Kev Nyab Xeeb ntawm Netskope, hais tias qhov kev tawm tsam SATAn pab qhia qhov tseeb tias tsis muaj qhov muaj kev ruaj ntseg kiag li.
"Kev txiav lub khoos phis tawj ntawm Is Taws Nem tsuas yog txo qhov kev pheej hmoo ntawm lub khoos phis tawj ntawd raug tawm tsam hauv is taws nem," Canzanese hais rau Lifewire dhau email. "Lub computer tseem muaj kev cuam tshuam rau ntau lwm txoj kev tawm tsam."
Nws hais tias SATAn nres pab ua kom pom ib txoj hauv kev, ua kom zoo dua ntawm qhov tseeb tias ntau yam khoom hauv lub khoos phis tawj tawm hluav taws xob hluav taws xob uas tuaj yeem xau cov ntaub ntawv rhiab.
Dr. Johannes Ullrich, Tus Thawj Saib Xyuas Kev Tshawb Fawb, SANS Technology Institute, txawm li cas los xij, tau taw qhia tias kev tawm tsam xws li SATAn tau paub zoo thiab rov qab mus rau hnub ua ntej lub network.
"Lawv tau hu ua TEMPEST thiab tau lees paub tias yog kev hem thawj txij li xyoo 1981 thaum NATO tsim daim ntawv pov thawj los tiv thaiv lawv," Ullrich hais rau Lifewire ntawm email.
Hais txog cov qauv TEMPEST, Canzanese tau hais tias lawv tau sau ntawv yuav ua li cas ib puag ncig yuav tsum tau teeb tsa los tiv thaiv kev xau ntawm cov ntaub ntawv rhiab los ntawm hluav taws xob emissions.
Kev Ruaj Ntseg
David Rickard, CTO North America ntawm Cipher, cybersecurity faib ntawm Prosegur, pom zoo tias thaum SATAn nthuav tawm qhov kev txhawj xeeb, muaj cov kev txwv rau qhov kev tawm tsam no uas ua rau nws yooj yim kov yeej.
Rau qhov pib, nws taw qhia rau ntau yam ntawm SATA cables uas siv los ua tus kav hlau txais xov, hais tias kev tshawb fawb pom tias txawm tias nyob ntawm plaub taw, qhov kev hloov pauv wireless tsis zoo yog qhov tseem ceeb, nrog lub qhov rooj thiab phab ntsa ntxiv degrading lub zoo ntawm kev sib kis.
"Yog tias koj tsev cov ntaub ntawv tseem ceeb ntawm koj tus kheej qhov chaw, cia lawv kaw kom tsis muaj lwm lub khoos phis tawj siv kev sib txuas wireless tuaj yeem tuaj yeem nyob hauv 10 ko taw ntawm lub khoos phis tawj vaj tsev cov ntaub ntawv," piav qhia Rickard.
Tag nrho peb cov kws tshaj lij kuj tau taw qhia rau qhov tseeb tias TEMPEST cov lus qhia tshwj xeeb yuav tsum tau siv cov ntaub thaiv npog thiab cov rooj plaub, nrog rau lwm qhov kev txiav txim siab, kom ntseeg tau tias cov khoos phis tawj uas lub tsev cov ntaub ntawv nkag siab tsis txhob tawm cov ntaub ntawv los ntawm cov txheej txheem zoo li no.
"TEMPEST cov khoom siv ua raws cai muaj rau cov pej xeem los ntawm ntau lub tuam txhab thiab cov muag khoom," qhia Rickard. "Yog tias [koj siv] cov peev txheej huab cua, nug nrog koj tus kws kho mob txog lawv qhov kev ua raws li TEMPEST."
… kev siv zog siv ntau dua los tiv thaiv kev tawm tsam qhov teeb meem.
Canzanese lees paub qhov kev tawm tsam SATAn qhia txog qhov tseem ceeb ntawm kev txwv lub cev nkag mus rau cov khoos phis tawj uas tuav cov ntaub ntawv rhiab.
"Yog tias lawv tuaj yeem txuas cov khoom siv tsis raug cai, xws li USB tus ntiv tes xoo, lub khoos phis tawj tuaj yeem kis tus kab mob malware," Canzanese hais. "Cov khoom siv tib yam, yog tias lawv tuaj yeem sau rau, tuaj yeem siv rau kev tshem tawm cov ntaub ntawv."
Rickard pom zoo, hais tias tshem tau USB drives (thiab phishing) yog qhov loj dua cov ntaub ntawv tshem tawm kev hem thawj thiab nyuaj thiab raug nqi los daws.
"Hnub no, cov kev tawm tsam no feem ntau yog qhov kev xav, thiab cov neeg tiv thaiv yuav tsum tsis txhob nkim sijhawm thiab nyiaj txiag rau cov kev tawm tsam no," Ullrich hais. "Cov kws tshawb fawb txuas ntxiv rov tshawb pom cov kev tawm tsam no, tab sis lawv tsis ua lub luag haujlwm ntsuas hauv kev ua txhaum cai tam sim no, thiab kev siv zog tau zoo dua los tiv thaiv kev tawm tsam qhov teeb meem."
