
µ±½ñÕýÊÇ¡°ÎïÁªÍø¡±(Internet of Things, IoT)¼¼ÊõµÄ»Æ½ðʱ´ú£ºÇ¶Èëʽ´¦ÀíÆ÷µÄÐÔÄÜºÍÆ¬ÉÏ×ʲúµÄ·á¸»¶ÈµÃµ½Á˳¤×ãµÄ¸Ä½ø£¬Ç¶ÈëʽÉ豸¿ÉʵÏֵŦÄÜÖð²½¶àÑù»¯;Wi-Fi(wireless fidelity)¡¢À¶ÑÀ¡¢5G(5th generation)µÈÎÞÏßͨÐż¼ÊõµÃµ½È«ÃæÆÕ¼°£¬Ê¹µÃ¡°ÍòÎﻥÁª¡±µÄÃż÷ǰËùδÓеؽµµÍ;ͬʱ£¬Ç¶ÈëʽÉ豸ÓëÊÖ»ú¡¢Â·ÓÉÆ÷µÈÖÇÄÜÉ豸¼äµÄÐ×÷´ó´óÔö¼Ó£¬¼«´óµØ¸Ä½øÁËǶÈëʽÉ豸µÄ¹¦ÄÜÐԺͿ͑ôÌåÑé¡£ÎïÁªÍø¼¼ÊõÒѾÉîÈëµ½ÁËÆÕͨÈËÉú»îµÄ·½·½ÃæÃ棺´Ó¼ÒÖеÄɨµØ»úÆ÷ÈË¡¢ÖÇÄÜÒôÏä¡¢À¶ÑÀ¿ª¹Ø£¬µ½¹¤ÒµÖеÄÎïÁ÷»úÆ÷ÈË¡¢ÎÞÈË»úµÈ£¬¾ùÊǶÔÎïÁªÍø¼¼ÊõµÄµäÐÍÓ¦Óá£È»¶ø£¬ÎïÁªÍøÉ豸µÄ°²È«ÎÊÌâ²»¿ÉСêï¡£ÓëÉú»îÖг£¼ûµÄ¸öÈ˼ÆËã»ú(personal computer, PC)¡¢ÊÖ»úµÈ¼ÆËãÉ豸Ïà±È£¬ÎïÁªÍøÉ豸¸üÒ׳öÏÖ°²È«Â©¶´£¬Ò²¸üÒ׳ÉÎªÍøÂç¹¥»÷µÄÄ¿µÄ¡£ÆäÖеÄÔÒòÖڶ࣬¾ÙÀýÈçÏ£º
ÎïÁªÍøÉ豸µÄ¼ÆËã×ʲúÓÐÏÞ£¬É豸ÉÏͨ³£²»»á²¿ÊðÍêÕûµÄ²Ù×÷ϵͳ£¬Òò´ËÎïÁªÍøÉ豸Éϼ«ÉÙʹÓÃĿǰÔÚ PC ºÍÖÇÄÜÊÖ»úÉϳ£¼ûµÄ¶þ½øÖư²È«¼Ó¹Ì´ëÊ©£¬È磺µØÖ·¿Õ¼ä²¼¾ÖËæ»ú»¯(address space layout randomization, ASLR)£¬¿Éд¡¢¿ÉÖ´ÐÐÄÚ´æ²»Ïཻ£¬Õ»Òç³ö±£»¤(stack smashing protection, SSP)µÈ¡£ÕâʹµÃÉ豸ÉϵÄÈí¼þ©¶´¸üÒ×±»¹¥»÷ÕßÀûÓã¬ÒÔ»ñµÃ¶ÔÉ豸µÄ¿ØÖÆÈ¨¡£
ͬÀí£¬ÎïÁªÍøÉ豸ÉÏͨ³£²»´æÔÚ·À»ðǽµÈ¸´ÔÓ°²È«»úÖÆ£¬ÎïÁªÍøÉ豸µÄ°²È«ÑÏÖØÒÀÀµÓÚÖܱßÍøÂç»·¾³µÄ°²È«ÐÔ¡£
Ò»²¿·Ö(ÓÈÆäÊǵͶË)ÎïÁªÍøÉ豸Éϵݲȫ»úÖÆÉè¼Æ¹ýÓÚ¼òµ¥£¬ÇÒÉ豸ÉϵĴúÂëûÓо¹ý³ä·ÖµÄ°²È«É󼯣¬Òò´Ë¸üÈÝÒ×´æÔÚ°²È«Èõµã£¬ÕâÔö´óÁËÉ豸ÔâÊܰ²È«¹¥»÷µÄ·çÏÕ¡£
ÓÉÓÚÎïÁªÍøÉ豸¡°ÎÞ´¦²»ÔÚ¡±¡¢³¤Ê±¼äÔÚÏßµÄÌØÐÔ£¬ÎïÁªÍøÉ豸¸üÈÝÒ×Ô⵽ɨÃèºÍ¹¥»÷¡£ÓÈÆäһЩ³¤ÆÚ±©Â¶ÔÚ¹«ÍøÉϵÄÉ豸£¬Èç·ÓÉÆ÷¡¢¡°Ê÷Ý®ÅÉ¡±µÈ£¬´ËÀàÉ豸ÊǺڿÍÒªµãÑо¿¡¢É¨ÃèºÍ¹¥»÷µÄ¶ÔÏó¡£Ò»µ©ÎïÁªÍøÉ豸ÔâÊܹ¥»÷£¬²¢½øÈë½©Ê¬ÍøÂ磬½«ºÜÓпÉÄܶÔÍ¬ÍøÂçÉÏµÄÆäËüÉ豸Ôì³É³¤ÆÚµÄ¡¢³Ö¾ÃµÄË𺦣¬²¢ÇÒÄÑÒÔ±»É豸µÄÖ÷ÈË·¢ÏÖ¡£
ÎïÁªÍøÉ豸×ÔÉíµÄÌØÐÔ£¬Ê¹µÃÕâЩÉ豸¶ÔÓÚÎïÀí²ãÃæµÄ²àÐŵÀ¹¥»÷(side-channel attacks)¸üΪÃô¸Ð¡£ÀýÈ磬ÎïÁªÍøÉ豸µÄ¹¦ºÄÓë CPU µÄÖ´ÐÐ״̬¾ßÓкÜÇ¿µÄÏà¹ØÐÔ£¬¹¥»÷ÕߺÜÈÝÒ×ͨ¹ý²âÁ¿ÎïÁªÍøÉ豸µÄ¹¦ºÄ±ä»¯À´¼ä½ÓÍÆËã³ö CPU µÄÖ´ÐÐ״̬£¬²¢Ð¹Â¶³ö¿Í‘ôÃÜÂëµÈ»úÃÜÐÅÏ¢¡£´ËÍ⣬ÎïÁªÍøÉ豸¶ÔÓھܾø·þÎñ(denial of service, DoS)¹¥»÷Ò²¸üΪÃô¸Ð£¬ÀýÈç¹¥»÷Õß¿ÉÒÔͨ¹ý·´¸´»½ÐÑһ̨ÎïÁªÍøÉ豸À´ÊµÏÖËðºÄÆäÊÙÃüµÄÄ¿µÄ[8]¡£

ͼ1 Õë¶ÔÎïÁªÍøÉ豸µÄ¹¥»÷ÀàÐÍ
ÕýÒòÒÔÉÏÔÒò£¬Õë¶ÔÎïÁªÍøÉ豸µÄ°²È«ÅÙÎöºÍ¼Ó¹ÌÓ봫ͳ PC É豸Óкܴó²»Í¬£¬ÎïÁªÍø°²È«É̽çÐèҪеļ¼ÊõºÍ·½·¨µÄָʾ¡£Ä¿Ç°£¬Ñ§Êõ½çºÍÒµ½çÒѾÓÐÁËһЩÕë¶ÔÎïÁªÍø°²È«µÄÑо¿£¬µ«Òµ½ç¶ÔÓÚÎïÁªÍøÉ豸°²È«ÐÔµÄÖØÊÓ³Ì¶ÈÆÕ±é²»×㣬Õë¶ÔÎïÁªÍøÉ豸µÄÍøÂç¹¥»÷ÈÔÈ»·Ç³£»îÔ¾¡£ÓÉÓÚÎïÁªÍøÉ豸µÄÐÐÒµÕ¼ÓÐÂÊÎȲ½¸Ä½ø£¬ÎïÁªÍø°²È«Öð²½³ÉΪÐÅÏ¢°²È«É̽çµÄÒ»¸ö¹Ø¼üÒéÌâ¡£±¾ÎÄÊ×Òª·ÖΪ 4 ´ó²¿·Ö¡£ÔÚµÚÒ»²¿·Ö£¬·¢¹ú¼ÊÌìÉúÓ®¼ÒÒ»´¥¼´·¢¶ÔÎïÁªÍø¼¼ÊõµÄÏÖ×´£¬ÒÔ¼°Õë¶ÔÎïÁªÍøÉ豸Ò×Êܰ²È«ÍþвµÄÔÒò½øÐÐÁ˼òÒª²ûÊö¡£ÔÚµÚ¶þ²¿·Ö£¬·¢¹ú¼ÊÌìÉúÓ®¼ÒÒ»´¥¼´·¢½«¶ÔÏÖÓÐÎïÁªÍøÉ豸ËùÃæÁÙµÄÊ×ÒªÍþв½øÐÐ×ÛÊö¡£ÔÚµÚÈý²¿·Ö£¬·¢¹ú¼ÊÌìÉúÓ®¼ÒÒ»´¥¼´·¢½«ÃèÊöһЩÎïÁªÍøÉ豸ËùÌØÓеݲȫ»úÖÆ¡£ÔÚµÚËIJ¿·Ö£¬·¢¹ú¼ÊÌìÉúÓ®¼ÒÒ»´¥¼´·¢½«¼òÒª²ûÊöĿǰҵ½çËù½¨Á¢ÆðµÄÕë¶ÔÎïÁªÍøÉ豸µÄһЩ°²È«Êµ¼ù¡£×îºó£¬·¢¹ú¼ÊÌìÉúÓ®¼ÒÒ»´¥¼´·¢½«¶ÔÈ«ÎĽøÐÐ×ܽᡣ
2¡¢Õë¶ÔÎïÁªÍøÉ豸µÄ°²È«Íþв
´«Í³ÉÏ£¬Ò»¸öÎïÁªÍøÏµÍ³´óÖ¿ÉÒÔ·ÖΪ 3 ¸ö²ã´Î£¬·Ö±ðÊÇ[4]£º

ͼ2 ÎïÁªÍøÏµÍ³Ä£ÐÍ
1. ¸ÐÖª²ã(perception layer)£¬¸ºÔðÌṩÎïÀíÉϵĴ«¸ÐÆ÷ºÍͨÐÅÍøÂ磬ÈçÉäÆµÊ¶±ð(RFID£¬radio frequency identification)£¬È«Çò¶¨Î»ÏµÍ³(GPS£¬global positioning system)µÈ;2. ´«Êä²ã(transportation layer)£¬¸ºÔðÔÚÎïÁªÍøÉ豸Ó뻥ÁªÍø(Internet)Ö®¼ä½¨Á¢Í¨ÐÅ£¬ÀýÈçÀ¶ÑÀÍø¹ØµÈ;3. Ó¦Óòã(application layer)£¬¸ºÔðʵÏÖÎïÁªÍøÉ豸±¾ÉíµÄ¹¦ÄÜ£¬ÈçɨµØ»úÆ÷È˵Ä×Ô¶¯Ñ°Â·¡¢ÖÇÄÜÒôÏäµÄÓïÒôʶ±ð¹¦Äܵȡ£Õâ3¸ö²»Í¬²ã´ÎµÄÌØÐÔ¸÷²»Ïàͬ£¬Òò´ËÒ²ÃæÁÙ²»Í¬µÄ°²È«Íþв£¬ÏêÊöÈçÏ¡£
¸ÐÖª²ã°²È«¡£¸ÐÖª²ãÃæÁÙµÄÊ×ÒªÍþвÓÐÒÔϼ¸ÖÖÀàÐÍ£º
ÎïÀí¹¥»÷¡£ÔÚÈ¡µÃ¶ÔÉ豸µÄÎïÀí½Ó´¥Ö®ºó£¬¹¥»÷Õß½«Äܹ»Ö±½ÓÌáÈ¡É豸ÉϵÄÃô¸ÐÊý¾Ý£¬»òÊÇÐÞ¸ÄÉ豸ÉϵijÌÐò£¬ÔÚÆäÖмÓÈë¶ñÒâ´úÂë¡£´ËÀ๥»÷ÐèÒªÓëÉ豸½øÐÐÎïÀí½Ó´¥£¬Òò´ËÏà¶ÔÀ´Ëµ½ÏÈÝÒ×·À·¶;µ«É豸³§ÉÌÒ²ÓбØÒª¿¼ÂÇÉ豸±¾ÉíÔÚÎïÀí²ãÃæµÄ°²È«ÐÔÎÊÌ⣬ÀýÈçÐèÒªÐÒÃâÔÚÉ豸µÄµç·°åÉÏÁôϵ÷ÊԽӿڵȡ£
Éí·Ýαװ¡£ÔÚȱ·¦ÓÐЧµÄÉí·ÝÑéÖ¤´ëÊ©µÄÎïÁªÍøÍøÂçÖУ¬ÈÝÒ×·¢ÉúÉí·Ýð³äµÄÎÊÌ⣬¶ñÒâÉ豸¿ÉÒÔͨ¹ýÕâÖÖ·½Ê½ÇÔÈ¡Ãô¸ÐÊý¾Ý¡£ÁíÍ⣬²»°²È«µÄÉ豸³õʼ»¯ºÍÅä¶Ô¹ý³ÌÒ²ÊǹؼüµÄ°²È«ÍþвÀ´Ô´£¬ÀýÈçÒ»Ãû¹¥»÷Õß¿ÉÒÔÀûÓ÷ÓÉÆ÷Ê״請ú¡¢ÉÐδÉèÖÃÃÜÂëµÄʱ»ú£¬ÏòÆäÖÐ×¢Èë¶ñÒâ³ÌÐò»òÅäÖá£ÈôÒª·ÀÖ¹´ËÀ๥»÷£¬É豸³§ÉÌÓ¦×Ðϸ¿¼ÂÇÉí·ÝÑéÖ¤¹ý³ÌÖпÉÄÜ´æÔڵݲȫÎÊÌ⣬²¢¼ÓÈëÓÐЧµÄÉí·ÝÑéÖ¤»úÖÆ¡£
¾Ü¾ø·þÎñ¹¥»÷(DoS)¡£¹¥»÷Õß¿ÉÒÔͨ¹ý³¤Ê±¼äʹÉ豸´¦Óڸ߹¦ºÄ״̬£¬À´ºÄ½ßÉ豸µÄ¼ÆËãÄÜÁ¦¡£¶Ô´ËÀ๥»÷µÄÍêÈ«·À·¶·Ç³£À§ÄÑ£¬µ«É豸³§ÉÌ¿ÉÒÔͨ¹ýºÏÀíµÄ°²È«Éè¼Æ£¬½«´ËÀ๥»÷ËùÔì³ÉµÄËðʧ¾¡¿ÉÄܽµµÍ¡£ÀýÈ磬¶ÔÓÚÐèÒªÏûºÄ´óÁ¿ËãÁ¦µÄ²Ù×÷£¬Ó¦µ±¼ÓÈëÓÐЧµÄ¹Ë¿Í¶ËÉí·ÝÑéÖ¤»úÖÆ£¬»òÊÇÏÞÖÆ¹Ë¿Í¶ËÖ´ÐвÙ×÷µÄƵÂʵȵȡ£
Êý¾Ý´«Êä¹¥»÷¡£ÀýÈ磬¹¥»÷Õß¿ÉÒÔ¶ÔÉ豸Ëù´«ÊäµÄÊý¾Ý½øÐÐ×¥°ü£¬»òʵʩÖмäÈË(MitM, man in the middle)¹¥»÷¡£¶Ô´ËÀ๥»÷µÄͨÓ÷À·¶´ëÊ©ÊÇÔÚÊý¾Ý´«Êä¹ý³ÌÖÐÔö¼Ó¼ÓÃÜÓ밲ȫУÑé»úÖÆ£¬Èç Wi-Fi ÖÐµÄ WPA(Wi-Fi Protected Access)£¬ÒÔ¼° LTE(Long Term Evolution)ÖÐµÄ EEA(EPS Encryption Algorithm;ÆäÖÐ EPS = Evolved Packet System)Ëã·¨µÈ¡£
´«Êä²ã°²È«¡£´Ë²ãµÄ°²È«ÍþвÊ×񻃾¼°¶Ô½ÓÈëÍø(Èç Wi-Fi£¬5G)µÄ°²È«Íþв£¬Ê×ÒªÓÐ 2 ÖÖ¹¥»÷ÀàÐÍ£¬·Ö±ðÊÇÊý¾Ý´«Êä¹¥»÷ºÍ¾Ü¾ø·þÎñ¹¥»÷¡£ÕâÁ½ÖÖ¹¥»÷ÀàÐ͵ķÀ·¶·½·¨Óë¸ÐÖª²ã°²È«ÖеÄÀàËÆ£¬²»ÔÙ׸Êö¡£Ó¦Óò㰲ȫ¡£´Ë²ãµÄ°²È«ÍþвÓ봫ͳ PC ËùÃæÁٵݲȫÍþвÓÐÒ»¶¨µÄÖØºÏ£¬Ê×ÒªÓÐÒÔÏÂÕâЩÀàÐÍ£º
¡ñ Êý¾Ýй¶£º³ÌÐòÖеÄÉè¼ÆÊè©¿ÉÄܵ¼Ö¿͑ôµÄÒþ˽Êý¾Ýй¶¸øµÚÈý·½¡£ÈôÒª¾¡¿ÉÄÜÐÒÃâ´ËÀà©¶´³öÏÖ£¬ÐèÒª¶ÔÉ豸ÉϵijÌÐò´úÂë½øÐгä·ÖµÄ°²È«Éó¼ÆºÍÆÀ¼Û¡£
¡ñ ¾Ü¾ø·þÎñ¹¥»÷£ºÓë¸ÐÖª²ã°²È«Öеľܾø·þÎñ¹¥»÷ÀàËÆ£¬²»ÔÙ׸Êö¡£
¡ñ Ô¶³Ì´úÂëÖ´ÐУºÀûÓÃÉ豸³ÌÐòÖеݲȫ©¶´£¬¹¥»÷ÕßÄܹ»¿ØÖÆÉ豸ִÐÐһЩÒâÁÏÖ®ÍâµÄ¶¯×÷£¬ÉõÖÁÖ´Ðй¥»÷ÕßËùÉÏ´«µÄÈÎÒâ´úÂë¡£´ËÀలȫÍþвµÄ·À·¶·½·¨Ó봫ͳ©¶´µÄ·À·¶ÀàËÆ£¬Ê×Òª°üº¬£º¼ÓÇ¿´úÂ밲ȫÉ󼯡¢¶Ô³ÌÐò½øÐÐÄ£ºý²âÊÔ(fuzzing)¡¢²ÉÓà ASLR µÈ¶þ½øÖư²È«¼Ó¹Ì´ëÊ©µÈ¡£µ«ÔÚ·À·¶´ËÀà©¶´Ê±£¬ÐèҪͬʱ¿¼ÂÇÉ豸±¾ÉíµÄ×ʲú¾ÖÏÞÐÔ¡£