☰ Maxim Blog ✕
Maxim Integrated
/
设计资源
/
Maxim博客
/
您的家居可能越来越智能——但防止黑客的安全性又如何呢？
DIY Engineering Projects for Your Valentine
PUF Technology Protects Against Invasive Attacks
快速、高精度电池管理系统助力更安全的电动汽车
How You Can Help Bring 20.8 Billion Connected Things Into the World
参考设计不仅仅是IC，而是完备的系统
工业4.0来势汹涌，“模拟整合”是主要受益者之一
Putting the power of Industry 4.0 in your Pocket
Battery fuel gauge ICs do more
Reference Designs: Game Changers for Complex Projects
为什么黑客急不可耐地想进入您的汽车
您的家居可能越来越智能——但防止黑客的安全性又如何呢？
实现智能电网故障的快速、高精度检测
Template
隔离电源参考设计
多通道、通用模拟输入 参考设计
Flexound Systems Brings Immersive Dimension to Music
Better Battery Runtimes Without Characterization
Why Not Design a Smaller PLC?
Q&A: Maxim's Randall Wollschlager on Designing the Future Car
Simplify Power Circuit Design with Simulation
How Medical Wearables Enhance Quality of Life
IO-Link Handbook Presents Primer on Designing Sensors and Masters
ELIV 2017: Learn Ways to Design Safer, Smarter Cars
Infomart Creates Tiny Power-over-Ethernet Devices
Advancing Safety and Infotainment for Cars of Today and the Future
How PA Linearization Solves Key Challenge for Remote PHY Fiber Nodes
更安全、更智能汽车的必经之路
Many Technologies Are Vying for Your IoT Wide Area Network Design
Are Your IoT Devices Immune to Cyberattacks?
Machine Learning Club Drives Data Science Demand
Designing Tiny, Connected Products? Don’t Miss this Webinar
How Can We Create One Trillion Connected Devices?
Modular System Speeds Up IoT Design Cycle
Keep Designs Cool with a Tiny, Low-Power Temperature Sensor
Circuit Protection You Might Not Have Thought About
你无法盗取一个并不存在的密钥
See Demos of Turnkey Security ICs at TRUSTECH
Synchronous Switching Regulators: Talk Time or Standby Time?
5 Ways Solar Power Usage Will Change By 2037
What Kind of World Will One Trillion Connected Devices Produce?
Can We Fix the Cybersecurity Mess?
Three Great Personal Gadgets for Engineers
Secure TLS in Connected Devices with a Companion Security IC
Are There One Trillion Things to Connect?
Maxim to Demo High-Speed SerDes Links and More at CES 2018
Achieve Precision Control of Vibration for Wearables
Secure Microcontrollers Safe from Spectre and Meltdown Flaws
How to Stop an Invasive Attack on Your Design
Smaller, Lower Power 4-20mA Sensor Transmitters for Industrial Equipment
利用安全电量计防止假冒电池
Applying Peak Current Mode Control for High Performance in Switching Regulators
iButton背后的故事
Meeting Big Demands for Power in Small Devices
快速了解如何利用NFC保护您的系统
如何通过电池电量计建立客户信任
Sustaining the IoT—What Will This Take?
How a Software Isolation Solution Protects IoT Devices
AM Radio in Your Electric Vehicle? Not Always
Wirelessly Charge Your Next Design
数字健康技术如何改善预防性保健护理
A Look at the Latest Battery Technology from Tesla
需要更紧凑封装的即插即用电源？您找对地方了
Powering Motor Encoders and Resolvers
Flow Battery Technologies for Utility-Scale Systems
High-Speed Serial Links for ADAS and Infotainment
Got an IoT Design Idea? Enter Our Contest
谁是WiFi设备的背后英雄
遇见“达尔文”，为IoT而生的全新微控制器“物种”
How Security ICs Address New Medical Device Regulations
On-Demand Webinar: Hardware Security with PUF Technology
The Beauty of Precision Op Amps
Kid Inventors Showcase STEM Skills at California Invention Convention
Don’t Worry – Isolate All Those Digital Signals
Putting Intelligence in the IoT
Got a Wearable Health Design Idea? Here’s How to Make It Accurate
How Can We Power Our Invisible Intelligence?
What Can GPS Do for Your Design?
Keeping the IoT Safe from Hackers
Choosing the Best Type of Temperature Sensor
Reinforced Digital Isolator Ensures Safety in Industrial Environments
Who Had the Winning Project in Our MAX32620FTHR Design Contest?
4 Ways to Extend Runtime of Small, Battery-Powered Electronics
Accurate, Wrist-Based Heart-Rate Monitoring—Six Months Faster
Smaller, Smarter, and More Powerful ICs—It’s All at electronica 2018
Empowering Secure PIN-on-Glass Payments at TRUSTECH 2018
Engineering Intern Creates Heat-Sensing Robot with LoRa Technology
So Many Smart Devices, So Many Security Vulnerabilities
An Insider's View of Analog Artistry at electronica 2018
One Way to Replace Power Rail Clusters in Small Electronic Devices
Engineers Had Better Be Careful with Algorithms and AI
Get Inspired to Think Big and Design Small
How LED Backlight Drivers Enable Bigger, Higher Resolution Automotive Displays
How IoT Sensors Help Ensure Freshness and Quality of Perishables
Fish Tanks Don’t Need Security—Unless They’re Part of the IoT
Digital Instrument Clusters: Why Functional Safety is Important
Digital Input Design
抢占电动滑板车、电动自行车及其他位置跟踪IoT的电源设计挑战先机
See How Click Boards Make It Quick to Evaluate Real Time Clock ICs
Multichannel ADC Accuracy for Accurate Sensing
What’s in Photoplethysmography Data? A Look at the Interaction Between Sensor Performance and Algorithms
Charging Your Car’s Battery – in 1898
Prioritizing Customer Focus to Save Lives
Maxim博客 您的家居可能越来越智能——但防止黑客的安全性又如何呢？
回到顶部
设计

您的家居可能越来越智能——但防止黑客的安全性又如何呢？

November 16, 2016

November 16, 2016

Christine Young By: Christine Young
博主，Maxim Integrated


毫无疑问，通过智能手机控制家中的照明、温度、安保系统甚至电器的确非常方便。但这些物联网(IoT)设备抵御黑客窥探的安全性又如何呢？

最近的新闻一定会让您感到震惊！10月下旬发生了大面积网络中断事故，导致包括Netflix、Spotify和Amazon在内的大面积断网，显然是黑客使用基于Mirai恶意软件的僵尸网络攻击CCTV视频摄像机和DVR造成的。今年春天，密歇根大学(University of Michigan)和微软(Microsoft)的研究人员发表了他们所称的智能家居平台的首次深度安全分析，其中引用了Samsung SmartThings平台。在他们的研究中，研究人员利用框架设计缺陷，开发了四种概念验证攻击：

  • 悄悄植入门锁代码
  • 偷窃现有门锁代码
  • 禁止假期模式
  • 诱导虚假火警

Smartphone apps can control many functions inside a smart home.

如何保证IoT设备的安全

还有许多关于婴儿监护器、温度控制器甚至智能厕所受到攻击的新闻。当然，IoT领域的许多公司在其产品中内置了可靠的安全措施。有些情况下，部分产品真正做到了只有在实验室配置下才会受到攻击，并且往往还需要是专家才行。而在其他情况下，消费者必须经常更换默认的用户凭据和密码。(几年前，一个网站检索了全球73,000多个使用非安全摄像头的地点。这些摄像头仍然在使用默认的用户名和密码，所以基本上没有安全措施！)然而，安全专家指出，对于较低端的智能家居产品，所有的措施都无济于事，因为这些产品往往具有更多的漏洞。

那么设计者如何在其智能、联网产品中构建更加坚固的安全性呢？早期阶段就在设计中集成安全措施并考虑如何实施至关重要。为了保证安全措施的有效性，必须在从传感器到云端的多个设计层面实施安全措施。

首先对嵌入式系统进行加密，但事实证明仍然非常脆弱，特别是密钥被偷窃时。实施加密的更好方式是通过安全微控制器，为密钥提供片上存储，所以不必依赖于从外部存储器传输密钥。

安全认证是防止恶意攻击的一种途径。安全认证提供验证身份的过程，根据验证结果允许或拒绝访问。最严格的安全认证机制将加密算法(例如SHA-1、SHA-256和ECDSA)与密钥绑定使用。

传感器的保护非常关键，因为这些传感器是智能设备收集所有数据的渠道。在这种情况下，能够为从受保护传感器节点到网络服务器的整个数据链提供安全认证的技术非常有用。

为系统构建高级防护

Maxim提供适用于以上所述各个领域的解决方案。Maxim的DeepCover安全微控制器将高级加密和物理安全组合在一起，提供最高等级的防物理篡改和反向工程保护。DeepCover安全认证器使用高级的物理安全，实现低成本IP保护、克隆防护及外设安全认证。并且DeepCover安全管理器集成物理安全与片上无痕迹存储器，保护敏感数据，防止轻微的物理或环境篡改。另一种方案是MAXREFDES143#，是IoT嵌入式安全参考设计，利用安全认证及传感器和网络服务器之间的通告，保护工业检测节点；实际上提供了金融级别的加密。关于MAXREFDES143#如何帮助您简化构建安全IoT产品的详细信息，请阅览Scott Jones新近发表的博文。