{"id":2479,"date":"2023-06-04T10:26:09","date_gmt":"2023-06-04T10:26:09","guid":{"rendered":"https:\/\/chuyendoiso.haiphong.gov.vn\/?p=2479"},"modified":"2024-04-23T12:28:01","modified_gmt":"2024-04-23T12:28:01","slug":"tan-cong-mo-khoa-dien-thoai-thong-minh-bang-phuong-phap-brute-force-van-tay-bao-mat","status":"publish","type":"post","link":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/2023\/06\/04\/tan-cong-mo-khoa-dien-thoai-thong-minh-bang-phuong-phap-brute-force-van-tay-bao-mat\/","title":{"rendered":"T\u1ea5n c\u00f4ng m\u1edf kh\u00f3a \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh b\u1eb1ng ph\u01b0\u01a1ng ph\u00e1p Brute Force v\u00e2n tay b\u1ea3o m\u1eadt"},"content":{"rendered":"
<\/p>\n
\"\"<\/a><\/div>\n

<\/p>\n

\n

V\u1eeba qua, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt t\u1eeb Tencent Labs v\u00e0 \u0110\u1ea1i h\u1ecdc Chi\u1ebft Giang (Trung Qu\u1ed1c) \u0111\u00e3 ph\u00e1t hi\u1ec7n ra trong m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p tin t\u1eb7c c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua b\u01b0\u1edbc x\u00e1c th\u1ef1c b\u1ea3o m\u1eadt v\u00e2n tay \u0111\u1ec3 x\u00e2m nh\u1eadp \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh, b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng ph\u01b0\u01a1ng ph\u00e1p t\u1ea5n c\u00f4ng Brute Force \u0111\u1ec3 ph\u00e1 v\u1ee1 d\u1ea5u v\u00e2n tay, nh\u1eb1m b\u1ecf qua ph\u1ea7n x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng v\u00e0 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb.<\/strong><\/p>\n

\n
\"T\u1ea5n<\/a><\/div>\n<\/div>\n

C\u01a1 ch\u1ebf t\u1ea5n c\u00f4ng <\/em>BrutePrint<\/em><\/p>\n

K\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng n\u00e0y \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 \u201cBrutePrint\u201d, \u0111\u00e2y\u00a0l\u00e0\u00a0s\u1ef1 k\u1ebft h\u1ee3p gi\u1eefa t\u1ea5n c\u00f4ng Brute Force v\u00e0 Fingerprinting, khi b\u1ecf qua c\u00e1c gi\u1edbi h\u1ea1n \u0111\u01b0\u1ee3c \u0111\u01b0a ra \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c n\u1ed7 l\u1ef1c x\u00e1c th\u1ef1c sinh tr\u1eafc h\u1ecdc kh\u00f4ng th\u00e0nh c\u00f4ng b\u1eb1ng c\u00e1ch khai th\u00e1c hai l\u1ed7 h\u1ed5ng zero-day trong khung x\u00e1c th\u1ef1c v\u00e2n tay tr\u00ean \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh (SFA). Hai l\u1ed7 h\u1ed5ng n\u00e0y l\u00e0 \u201cCancel-After-Match-Fail\u201d (CAMF) v\u00e0 \u201cMatch-After-Lock\u201d (MAL), l\u1ee3i d\u1ee5ng l\u1ed7i logic trong khung x\u00e1c th\u1ef1c, ph\u00e1t sinh do kh\u00f4ng \u0111\u1ee7 kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u d\u1ea5u v\u00e2n tay tr\u00ean Giao di\u1ec7n ngo\u1ea1i vi n\u1ed1i ti\u1ebfp (SPI) c\u1ee7a c\u1ea3m bi\u1ebfn d\u1ea5u v\u00e2n tay.<\/p>\n

Trong m\u1ed9t ph\u00e2n t\u00edch k\u1ef9 thu\u1eadt, hai nh\u00e0 nghi\u00ean c\u1ee9u Yu Chen v\u00e0 Yiling He cho bi\u1ebft, k\u1ebft qu\u1ea3 l\u00e0 m\u1ed9t c\u00e1ch th\u1ee9c ti\u1ebfp c\u1eadn ph\u1ea7n c\u1ee9ng \u0111\u1ec3 th\u1ef1c hi\u1ec7n nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng Man-in-the-Middle (MitM) nh\u1eb1m chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n h\u00ecnh \u1ea3nh d\u1ea5u v\u00e2n tay. BrutePrint \u0111\u00f3ng vai tr\u00f2 trung gian gi\u1eefa c\u1ea3m bi\u1ebfn d\u1ea5u v\u00e2n tay v\u00e0 M\u00f4i tr\u01b0\u1eddng th\u1ef1c thi \u0111\u00e1ng tin c\u1eady (TEE \u2013 Trusted Execution Environment). M\u1ee5c ti\u00eau c\u1ed1t l\u00f5i c\u1ee7a BrutePrint l\u00e0 c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n g\u1eedi h\u00ecnh \u1ea3nh d\u1ea5u v\u00e2n tay kh\u00f4ng gi\u1edbi h\u1ea1n cho \u0111\u1ebfn khi c\u00f3 k\u1ebft qu\u1ea3 tr\u00f9ng kh\u1edbp v\u1edbi d\u1ea5u v\u00e2n tay c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. Tuy nhi\u00ean, n\u00f3 gi\u1ea3 \u0111\u1ecbnh r\u1eb1ng m\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 s\u1edf h\u1eefu thi\u1ebft b\u1ecb m\u1ee5c ti\u00eau \u0111\u01b0\u1ee3c \u0111\u1ec1 c\u1eadp.<\/p>\n

L\u1ed7 h\u1ed5ng \u0111\u1ea7u ti\u00ean khi\u1ebfn cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 x\u1ea3y ra l\u00e0 CAMF, l\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p t\u0103ng kh\u1ea3 n\u0103ng ch\u1ecbu l\u1ed7i c\u1ee7a h\u1ec7 th\u1ed1ng b\u1eb1ng c\u00e1ch v\u00f4 hi\u1ec7u h\u00f3a ki\u1ec3m tra c\u1ee7a d\u1eef li\u1ec7u v\u00e2n tay, do \u0111\u00f3 cho ph\u00e9p tin t\u1eb7c c\u00f3 th\u1ec3 th\u1eed s\u1ed1 l\u1ea7n kh\u00f4ng gi\u1edbi h\u1ea1n. Trong khi \u0111\u00f3 v\u1edbi MAL, n\u00f3 l\u1ee3i d\u1ee5ng m\u1ed9t k\u00eanh k\u1ec1 \u0111\u1ec3 suy ra k\u1ebft qu\u1ea3 h\u00ecnh \u1ea3nh v\u00e2n tay tr\u00f9ng kh\u1edbp tr\u00ean thi\u1ebft b\u1ecb m\u1ee5c ti\u00eau, ngay c\u1ea3 khi thi\u1ebft b\u1ecb \u0111\u00e3 chuy\u1ec3n sang ch\u1ebf \u0111\u1ed9 kh\u00f3a sau nhi\u1ec1u l\u1ea7n \u0111\u0103ng nh\u1eadp th\u1ea5t b\u1ea1i.<\/p>\n

\u201cM\u1eb7c d\u00f9 ch\u1ebf \u0111\u1ed9 kh\u00f3a \u0111\u01b0\u1ee3c ki\u1ec3m tra th\u00eam \u1edf trong Keyguard \u0111\u1ec3 v\u00f4 hi\u1ec7u h\u00f3a m\u1edf kh\u00f3a, nh\u01b0ng k\u1ebft qu\u1ea3 x\u00e1c th\u1ef1c l\u1ea1i \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n b\u1edfi TEE. V\u00ec k\u1ebft qu\u1ea3 x\u00e1c th\u1ef1c th\u00e0nh c\u00f4ng \u0111\u01b0\u1ee3c g\u1eedi l\u1ea1i ngay l\u1eadp t\u1ee9c khi c\u00f3 m\u1eabu ph\u00f9 h\u1ee3p, n\u00ean c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng k\u00eanh k\u1ec1 c\u00f3 th\u1ec3 suy k\u1ebft qu\u1ea3 ra t\u1eeb c\u00e1c h\u00e0nh vi nh\u01b0 th\u1eddi gian ph\u1ea3n h\u1ed3i v\u00e0 s\u1ed1 h\u00ecnh \u1ea3nh thu \u0111\u01b0\u1ee3c\u201d, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u gi\u1ea3i th\u00edch.<\/p>\n

\u0110\u1ec3 m\u1edf r\u1ed9ng ph\u1ea1m vi ph\u00e2n t\u00edch, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 th\u1eed nghi\u1ec7m tr\u00ean 10 m\u1eabu thi\u1ebft b\u1ecb kh\u00e1c nhau t\u1eeb Apple, Huawei, OnePlus, OPPO, Samsung, Xiaomi v\u00e0 Vivo, k\u1ebft qu\u1ea3 cho th\u1ea5y c\u00f3 th\u1ec3 th\u1eed v\u00f4 s\u1ed1 l\u1ea7n \u0111\u1ec3 ph\u00e1 v\u1ee1 d\u1ea5u v\u00e2n tay tr\u00ean Android v\u00e0 HarmonyOS. \u0110\u1ed1i v\u1edbi c\u00e1c thi\u1ebft b\u1ecb iOS, h\u1ecd \u0111\u00e3 th\u1eed nghi\u1ec7m th\u00e0nh c\u00f4ng 10 l\u1ea7n trong t\u1ed5ng s\u1ed1 15 l\u1ea7n th\u1eed.<\/p>\n

M\u1eb7c d\u00f9 \u0111\u00e1ng lo ng\u1ea1i, nh\u01b0ng c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u cho r\u1eb1ng \u0111\u00e2y l\u00e0 m\u1ed9t c\u00e1ch khai th\u00e1c m\u1edbi v\u00e0 ch\u01b0a c\u00f3 d\u1ea5u hi\u1ec7u \u0111\u00e3 x\u1ea3y ra trong th\u1ef1c t\u1ebf. Tuy nhi\u00ean, \u0111\u00e2y v\u1eabn l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt m\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u1ea7n ch\u00fa \u00fd.<\/p>\n

Nh\u1eefng ph\u00e1t hi\u1ec7n n\u00e0y \u0111\u01b0\u1ee3c \u0111\u01b0a ra khi m\u1ed9t nh\u00f3m c\u00e1c h\u1ecdc gi\u1ea3 tr\u00ecnh b\u00e0y chi ti\u1ebft v\u1ec1 k\u00eanh k\u1ec1 lai t\u1eadn d\u1ee5ng \u201cs\u1ef1 \u0111\u00e1nh \u0111\u1ed5i ba chi\u1ec1u gi\u1eefa t\u1ed1c \u0111\u1ed9 th\u1ef1c hi\u1ec7n (ngh\u0129a l\u00e0 t\u1ea7n su\u1ea5t), m\u1ee9c \u0111i\u1ec7n n\u0103ng ti\u00eau th\u1ee5 v\u00e0 nhi\u1ec7t \u0111\u1ed9\u201d trong h\u1ec7 th\u1ed1ng tr\u00ean m\u1ed9t vi m\u1ea1ch (SoC) hi\u1ec7n \u0111\u1ea1i v\u00e0 GPU \u0111\u1ec3 ti\u1ebfn h\u00e0nh c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u00e1nh c\u1eafp pixel tr\u00ean tr\u00ecnh duy\u1ec7t v\u00e0 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng sniffing (nghe l\u00e9n) trong l\u1ecbch s\u1eed \u0111\u1ed1i v\u1edbi phi\u00ean b\u1ea3n Chrome 108 v\u00e0 Safari 16.2.<\/p>\n

Cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f2n \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 Hot Pixels, t\u1eadn d\u1ee5ng h\u00e0nh vi n\u00e0y \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e2n tay tr\u00ecnh duy\u1ec7t (website fingerprinting) v\u00e0 s\u1eed d\u1ee5ng m\u00e3 JavaScript \u0111\u1ec3 thu th\u1eadp d\u1eef li\u1ec7u ng\u01b0\u1eddi d\u00f9ng. \u0110i\u1ec1u n\u00e0y \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n b\u1eb1ng c\u00e1ch thi\u1ebft k\u1ebf b\u1ed9 l\u1ecdc SVG n\u1eb7ng v\u1ec1 t\u00ednh to\u00e1n \u0111\u1ec3 l\u1ed9 m\u00e0u pixel, b\u1eb1ng c\u00e1ch \u0111o th\u1eddi gian k\u1ebft xu\u1ea5t v\u00e0 l\u00e9n l\u00fat thu th\u1eadp th\u00f4ng tin v\u1edbi \u0111\u1ed9 ch\u00ednh x\u00e1c cao l\u00ean t\u1edbi 94%. Apple, Google, Intel, Nvidia, Qualcomm sau \u0111\u00f3 \u0111\u00e3 ghi nh\u1eadn v\u1ec1 v\u1ea5n\u00a0\u0111\u1ec1 n\u00e0y. C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u c\u0169ng khuy\u1ebfn kh\u00edch c\u1ea5m \u00e1p d\u1ee5ng b\u1ed9 l\u1ecdc SVG cho c\u00e1c iframe hay si\u00eau li\u00ean k\u1ebft v\u00e0 ng\u0103n truy c\u1eadp kh\u00f4ng \u0111\u1eb7c quy\u1ec1n v\u00e0o c\u00e1c b\u1ea3n \u0111\u1ecdc c\u1ea3m bi\u1ebfn.<\/p>\n

\u0110\u1ec3 gi\u1ea3m thi\u1ec3u nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng, c\u00e1c nh\u00e0 s\u1ea3n xu\u1ea5t \u0111i\u1ec7n tho\u1ea1i di \u0111\u1ed9ng c\u1ea7n t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt cho c\u1ea3m bi\u1ebfn v\u00e2n tay tr\u00ean thi\u1ebft b\u1ecb c\u1ee7a h\u1ecd, b\u00ean c\u1ea1nh \u0111\u00f3 ng\u01b0\u1eddi d\u00f9ng c\u0169ng n\u00ean t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch thi\u1ebft l\u1eadp m\u1eadt kh\u1ea9u m\u1ea1nh, s\u1eed d\u1ee5ng t\u00ednh n\u0103ng x\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 v\u00e0 ch\u1ec9 t\u1ea3i xu\u1ed1ng \u1ee9ng d\u1ee5ng t\u1eeb nh\u1eefng ngu\u1ed3n \u0111\u00e1ng tin c\u1eady.<\/p>\n

Trong m\u1ed9t l\u01b0u \u00fd li\u00ean quan, Intel CPU c\u0169ng \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng k\u00eanh k\u1ec1 s\u1eed d\u1ee5ng c\u00e1c bi\u1ebfn th\u1ec3 v\u1ec1 th\u1eddi gian th\u1ef1c thi, b\u1eb1ng c\u00e1ch thay \u0111\u1ed5i thanh ghi EFLAGS trong qu\u00e1 tr\u00ecnh th\u1ef1c thi t\u1ea1m th\u1eddi \u0111\u1ec3 gi\u1ea3i m\u00e3 d\u1eef li\u1ec7u m\u00e0 kh\u00f4ng c\u1ea7n d\u1ef1a v\u00e0o b\u1ed9 nh\u1edb \u0111\u1ec7m.<\/p>\n

Ngu\u1ed3n: https:\/\/english.mic.gov.vn\/Pages\/TinTuc\/159075\/Tan-cong-mo-khoa-dien-thoai-thong-minh-bang-phuong-phap-Brute-Force-van-tay-bao-mat.html<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

V\u1eeba qua, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt t\u1eeb Tencent Labs v\u00e0 \u0110\u1ea1i h\u1ecdc Chi\u1ebft Giang (Trung Qu\u1ed1c) \u0111\u00e3 ph\u00e1t hi\u1ec7n ra trong m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p tin t\u1eb7c c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua b\u01b0\u1edbc x\u00e1c th\u1ef1c b\u1ea3o m\u1eadt v\u00e2n tay \u0111\u1ec3 x\u00e2m nh\u1eadp \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh, b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng ph\u01b0\u01a1ng ph\u00e1p t\u1ea5n c\u00f4ng […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[13],"tags":[],"class_list":{"0":"post-2479","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-tin-tuc"},"_links":{"self":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/2479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/comments?post=2479"}],"version-history":[{"count":1,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/2479\/revisions"}],"predecessor-version":[{"id":2681,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/2479\/revisions\/2681"}],"wp:attachment":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media?parent=2479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/categories?post=2479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/tags?post=2479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}