Daudzi no mums noteikti ir izjutu\u0161i scen\u0101rijus, kad m\u016bsu tie\u0161saistes bankas sist\u0113ma atkal un atkal pieprasa ievad\u012bt datus. Jo sist\u0113ma nesp\u0113j noteikt m\u016bsu konta datus. T\u0101 ir ne tikai satrauco\u0161a, bet ar\u012b kaitino\u0161a situ\u0101cija. Mums ir j\u0101ievada autoriz\u0101cijas kods, lai p\u0101rbaud\u012btu savu identit\u0101ti.<\/p>\n
\u0160im nol\u016bkam m\u0113s sa\u0146emam zi\u0146ojumu vai t\u0101lru\u0146a zvanu no bankas. Ne tikai banku konti izmanto \u0161o inform\u0101cijas ieg\u016b\u0161anas sist\u0113mu. Bet ar\u012b citas finan\u0161u organiz\u0101cijas vis\u0101 pasaul\u0113 v\u0101c datus autentifik\u0101cijai.<\/p>\n
2019. gada febru\u0101r\u012b Metro Bank hakeru sist\u0113ma aktualiz\u0113ja b\u016btisku probl\u0113mu saist\u012bb\u0101 ar 7. signaliz\u0101cijas sist\u0113mu (SS7). Mobilo t\u012bklu operatori (MNO) izmanto \u0161o protokolu kopumu datu p\u0101rs\u016bt\u012b\u0161anai. SS7 ir starptautisks telekomunik\u0101ciju standarts zvanu, zi\u0146ojumu un citu datu p\u0101rs\u016bt\u012b\u0161anai. \u0160\u012b sist\u0113ma nodro\u0161ina, ka inform\u0101cija un izmaksas pat\u0113r\u0113t\u0101jiem ir der\u012bgas. Mobilo t\u012bklu operatori (MNO) pla\u0161i izmanto \u0161o SS7 sist\u0113mu datu p\u0101rs\u016bt\u012b\u0161anai. T\u0101 pal\u012bdz lietot\u0101jiem datu viesabon\u0113\u0161an\u0101, ce\u013cojot uz jebkuru citu valsti.<\/p>\n
1974. gad\u0101, kad SS7 tika izgudrots, nebija nevienas ievainojam\u012bbas probl\u0113mas. SS7 ievie\u0161anas laik\u0101 bija tikai ierobe\u017eots t\u012bkla operatoru skaits. Ta\u010du tehnolo\u0123ija un straujais MNO skaita pieaugums deva tam iesp\u0113ju. Tagad, kad pasaul\u0113 ir daudz MNO, ir k\u013cuvis iesp\u0113jams uzlauzt jebkuru mobilo ier\u012bci, izmantojot SS7 sist\u0113mu.<\/p>\n
Nav \u0161aubu, ka \u0161ie MNO c\u012bn\u0101s, lai aizsarg\u0101tu savus lietot\u0101jus. Vi\u0146i cen\u0161as izstr\u0101d\u0101t lab\u0101kos dro\u0161\u012bbas pas\u0101kumus, ta\u010du to m\u0101c\u0101s ar\u012b vi\u0146u pretinieki. Vienl\u012bdz\u012bga zin\u0101\u0161anu izplat\u012bba ir sare\u017e\u0123\u012bjusi sist\u0113mas aizsardz\u012bbu no \u0161iem gudrajiem iebruc\u0113jiem. Ja k\u0101ds MNO ievie\u0161 k\u0101du izsekot\u0101ju, ar\u012b kr\u0101pnieki atrod risin\u0101jumu, k\u0101 to p\u0101rvar\u0113t.<\/p>\n
Protams, vi\u0146i ir m\u0101c\u012bju\u0161ies, prasm\u012bgi un apr\u012bkoti ar hakeru r\u012bkiem un strat\u0113\u0123ij\u0101m. Ar \u0161o pal\u012bdz\u012bbu vi\u0146i veiksm\u012bgi piek\u013c\u016bst sev interes\u0113jo\u0161iem savienotajiem telefonijas t\u012bkliem. \u0160ie hakeri izmanto t\u0101lru\u0146a numurus un SS7 protokolu, lai piek\u013c\u016btu \u0161\u012bm ievainojam\u012bb\u0101m.<\/p>\n
Visi MNO eksperti un tehnolo\u0123ijas ir labi iepazinu\u0161ies ar \u0161\u012bm SS7 tra\u0123\u0113dij\u0101m. Tehnolo\u0123iju sare\u017e\u0123\u012bt\u0101 daba apgr\u016btina past\u0101v\u012bgu risin\u0101jumu pret \u0161\u012bm ievainojam\u012bb\u0101m. Daudzas mobilo t\u012bklu sist\u0113mas nol\u0113ma c\u012bn\u012bties pret \u0161iem riskiem, ta\u010du sask\u0101r\u0101s ar smagiem un gudriem \u0161\u0137\u0113r\u0161\u013ciem. P\u0101rsvar\u0101 datu viesabon\u0113\u0161anas laik\u0101 SS7 nav iesp\u0113jams filtr\u0113t t\u012bkla diapazona d\u0113\u013c.<\/p>\n
Ja SS7 sist\u0113mai piek\u013c\u016bst hakeri, vi\u0146i var viegli piek\u013c\u016bt mobilajai kontrolei. Vi\u0146i var sa\u0146emt zvanus, zi\u0146ojumus un p\u0101rs\u016bt\u012bt tos t\u0101l\u0101k. MNO un tehnologiem k\u013c\u016bst neiesp\u0113jami noskaidrot kr\u0101pnieku atra\u0161an\u0101s vietu.<\/p>\n
Lai gan 2020. gad\u0101 ir ieviesti da\u017ei autentiski un stingri dro\u0161\u012bbas pas\u0101kumi. Ta\u010du SS7 ievainojam\u012bba joproj\u0101m ir \u0161o hakeru ne\u017e\u0113last\u012bb\u0101. IT eksperti un tehnologi ievie\u0161 jaunus protokolus k\u0101 diametru 4G t\u012bkliem. Lai gan tas nodro\u0161ina savienojumu, joproj\u0101m past\u0101v ievainojam\u012bbas iesp\u0113jas. T\u0101 k\u0101 4G t\u012bkl\u0101 zvanu un zi\u0146ojumu p\u0101rs\u016bt\u012b\u0161anai izmanto ar\u012b veco SS7 sader\u012bbu.<\/p>\n
Dro\u0161s un aizsarg\u0101ts protokols var pal\u012bdz\u0113t nov\u0113rst \u0161\u012bs ievainojam\u012bbas. Lai izstr\u0101d\u0101tu \u0161\u0101du dro\u0161u protokolu, ir svar\u012bgi da\u017ei faktori. Pirmk\u0101rt, j\u0101izvair\u0101s no darb\u012bb\u0101m, kas rada risku. T\u0101tad dro\u0161as un efekt\u012bvas sazi\u0146as sist\u0113mas p\u0101rk\u0101p\u0113ju izskau\u0161ana samazin\u0101s risku. Otrk\u0101rt, MNO un citiem attiec\u012bgajiem uz\u0146\u0113mumiem jau no pa\u0161a s\u0101kuma regul\u0101ri j\u0101seko l\u012bdzi \u0161iem gad\u012bjumiem. T\u0101d\u0113j\u0101di tie pal\u012bdz\u0113s izskaust \u0161os neaizsarg\u0101tos uzlau\u0161anas gad\u012bjumus no mobil\u0101s SS7 sist\u0113mas.<\/p>","protected":false},"excerpt":{"rendered":"
Daudzi no mums noteikti ir izjutu\u0161i scen\u0101rijus, kad m\u016bsu tie\u0161saistes bankas sist\u0113ma atkal un atkal pieprasa ievad\u012bt datus. Jo sist\u0113ma nesp\u0113j noteikt m\u016bsu konta datus. T\u0101 ir ne tikai satrauco\u0161a, bet ar\u012b kaitino\u0161a situ\u0101cija. Mums ir j\u0101ievada autoriz\u0101cijas kods, lai p\u0101rbaud\u012btu savu identit\u0101ti. \u0160im nol\u016bkam m\u0113s...<\/p>","protected":false},"author":1,"featured_media":411,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-393","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ss7-sms"],"yoast_head":"\n