I-BrutePrint: Uhlaselo olucela umngeni kukhuseleko lweminwe ephathwayo

Ukhuseleko lwesixhobo esiphathwayo ngumba osisiseko wobomi banamhlanje bedijithali, ngakumbi ngokunyuka kweendlela zokuqinisekiswa kwebhayometriki ezifana neminwe. Kwiminyaka yakutshanje, abasebenzisi abaninzi baye babeka ithemba labo kwezi nkqubo zokuvula, bekholelwa ukuba ukungafani kwabo kunye nobunzima bokuziphindaphinda kunika ukhuseleko oluluqilima ekufikeleleni okungagunyaziswanga. Nangona kunjalo, ukuvela kweendlela ezintsha zokuhlasela kuye kwacela umngeni kule trust, kunye neBrutePrint yenye yezoyikiso zamva nje neziphawulekayo.

Le ndlela yokusebenza, efunyenwe liqela labaphandi baseTshayina, ibonise ukuba, kude nokuba ingachaphazeleki, Iimvakalelo zeminwe I-BrutePrint inokunyanzeliswa kwii-smartphones ezininzi isebenzisa indlela ekrelekrele njengoko iphazamisa. Kweli nqaku, sichaza, ngokweenkcukacha kwaye ngokulula, yintoni iBrutePrint, isebenza njani, yintoni impumelelo yayo esekelwe kuyo, kwaye yintoni umphumo wayo kukhuseleko lwezixhobo zanamhlanje.

Kutheni iimpawu zeminwe zithandwa kangaka njengokhuseleko?

Iminwe ithathwa njengenye yezona mpawu zithembekileyo nezikhethekileyo zebhayometriki zoqinisekiso lwedijithali., ekubeni umntu ngamnye enepateni ekhethekileyo ehlala ingaguquguquki kubo bonke ubomi babo. Ke ngoko, iinkampani zetekhnoloji zibandakanye izinzwa zeminwe njengeyona ndlela iphambili yokuvula kwaye njengomqobo ekufikeleleni kulwazi olubuthathaka kwii-smartphones zabo kunye nezinye izixhobo.

Ukuchongwa kwebhayometriki kusetyenziswa ushicilelo lweminwe ngokuthe ngcembe luthathe indawo yeendlela zemveli ezifana ne-PIN okanye igama eliyimfihlo., njengoko ikhawuleza, ilungele, kwaye, ngokweengcamango, kunzima ukuyiphepha ngohlaselo oluqhelekileyo. Nangona kunjalo, oku kuthembana kuye kwakhokelela ukuba abaphuli-mthetho bagxile ekujongeni iziphene kunye nobuthathaka obubavumela ukuba baphephe le nkqubo.

Inqaku elidibeneyo:

I-SuperCard X kunye ne-NGate: I-malware entsha eyenza amakhadi etyala nge-NFC kwi-Android kunye nendlela yokuzikhusela

Iinzame zakudala zokudlula izibonisi zeminwe: Kutheni zingasebenzi kwaphela?

Kude kwafika iBrutePrint, ezona ndlela zaziwa kakhulu zokuthintela ungqinisiso lweminwe yayisemzimbeni kwaye inzima kakhulu.Phakathi kwezi, ukudalwa kwesikhunta esivela kwiminwe yexhoba, ukufotowa kwekhwalithi ephezulu yeminwe ebusweni (njengeglasi yefowuni), kunye nokuphindaphinda kwayo okulandelayo kwi-silicone okanye izinto zokuqhuba ziphawuleka. Iqela le-hacker ye-Chaos Computer Club liye labonisa le nkqubo, nangona umsebenzi udinga ixesha, ukufikelela ngokomzimba ixesha elide, kunye nezixhobo ezikhethekileyo.

Ezi ndlela ziqhelekileyo, nangona zinokwenzeka, zigqalwa njengezingasebenziyo kubomi bokwenene., njengoko zibandakanya inkqubo enzima kunye nesidingo sokubamba umfanekiso ogqibeleleyo weminwe efanelekileyo, ethintela kakhulu amathuba abo okuphumelela ngaphaya kweemeko ezilawulwayo okanye ukuhlaselwa okujoliswe kakhulu. Kulapho i-BrutePrint iguqula i-landscape, njengoko indlela yayo yedijithali, i-automated, kwaye inokuthi isebenze kwiintlobo ezahlukeneyo zezixhobo.

Yintoni kanye kanye iBrutePrint?

I-BrutePrint bubuchule bokuhlasela obuyilelwe ngokukodwa ukuxhaphaza ubuthathaka kwiinkqubo zoqinisekiso lweminwe kwii-smartphones, ikakhulu ezo zinenkqubo yokusebenza ye-Android.. Yaziswa ngo-2024 nguYu Chen (i-Tencent) kunye no-Yiling He (iYunivesithi yaseZhejiang), ebonisa ukuba kunokwenzeka ukunyanzelisa ukuqinisekiswa kwe-biometric malunga naso nasiphi na isixhobo, nakwiimeko ebezicingelwa ngaphambili.

Isitshixo seBrutePrint silele kwingqikelelo yohlaselo lwamandla akhohlakeleyo olusetyenziswa kwidatha yebhayometrikiEndaweni yokuzama ukuphinda-phinda ushicilelo lweminwe ngokwasemzimbeni, ivelisa ngokucwangcisiweyo kwaye ivavanye inani elikhulu leminwe yeminwe okanye imifanekiso yeminwe ide ifumane umdlalo owamkelekileyo wesivamvo sesixhobo esonakaliswa. Kodwa indlela iqhubela phambili ngakumbi, isebenzisa ubuthathaka obuthile kuyilo lwabafundi beminwe kunye neeprothokholi zabo zokhuseleko, ziyenza isebenze ngakumbi.

Kutheni izivamvo zeminwe zinokuba sesichengeni?

Ukusebenza kohlaselo lwe-BrutePrint akusekelwe kubuthathaka kwi-biometrics ngokwazo, kodwa kwindlela eziphunyezwa ngayo iteknoloji kwii-smartphones zanamhlanje.Kukho izizathu ezininzi zokuba kutheni izinzwa zangoku zichaphazeleka:

• Umgangatho woluvo kunye nohloboAyizizo zonke izixhobo zoluvo ezibonelela ngokuchaneka okufanayo. Kukho i-optical, i-ultrasonic, kunye ne-capacitive sensors, ezona zoqoqosho kakhulu kwaye zidumileyo zibingelela ukhuseleko ngesantya okanye iindleko zokuvelisa.
• Isisombululo senzwa kunye nobukhuluIzinzwa ezincinci, ezinesisombululo esisezantsi azibambi iminwe ngokuchaneka okufanayo njengeemodeli eziphambili, ezinyusa umda wempazamo yenkqubo yokuqinisekisa.
• Ii-algorithms zokuthelekisa i-biometric: Ukukhawulezisa ukuvula kunye nokuphepha ukukhatywa ngengozi, abavelisi bahlengahlengisa umda wokufana, ukuvumela ukungafani okuncinci ukuba kunyanyezelwe, okwandisa into ebizwa ngokuba Inqanaba loKwamkelwa okungeyonyani (FAR).
• Ukukhuselwa konxibelelwano lwangaphakathiIifowuni ezininzi ze-Android azibetheli ngokufanelekileyo itshaneli edibanisa inzwa yeminwe kwinkqubo yokusebenza, okwenza kube lula ukunqanda kunye nokukhohlisa idatha ngelo xesha.

Le seti yoyilo kunye nezigqibo zemveliso ivula umnyango wokuhlaselwa njengeBrutePrint, apho umdlalo ogqibeleleyo ungafunekiyo, kodwa ukufumana ngokulula umnwe ofana ngokwaneleyo ukoyisa umda woluvo.

I-BrutePrint inyathelo ngenyathelo: Uhlaselo lwenziwa njani?

Ubuchwephesha beBrutePrint bunobuchule, kodwa bufuna ufikelelo ngokwasemzimbeni kwisixhobo ekujoliswe kuso.Yonke le nkqubo ibandakanya ezi zigaba zilandelayo:

• Ukufikelela ngokwasemzimbeni kwi-smartphoneUmhlaseli kufuneka abe nefowuni ngokwasemzimbeni, njengoko ifuna ukuphazamisa izixhobo zayo. Isenokuba yifowuni ebiweyo, elahlekileyo, okanye ebolekiweyo.
• Ukususa kunye nokudibanisa i-hardware yangaphandle: Isigqubuthelo sangasemva siyasuswa ukufikelela kwi-motherboard kunye ne-SPI ye-fingerprint sensor (i-Serial Peripheral Interface) ishaneli. Ibhodi yesekethe eprintiweyo (PCB) idityaniswe apho, isebenza njengebhuloho phakathi kwenzwa kunye ne-CPU yefowuni.
• Isitofu sedatha kunye noMntu ophakathi (MITM) ukuhlaselwa: Isiphaluka sangaphandle siyabamba kwaye silungise unxibelelwano phakathi kwenzwa kunye nenkqubo yokusebenza, ukuvumela umhlaseli ukuba athumele imifanekiso yeminwe esuka kwisiseko sedatha yangaphandle kwaye afumane iimpendulo ngokukhawuleza.
• Ugcino lweenkcukacha zeminweUmhlaseli usebenzisa iingqokelela zeminwe, ezinokuvela ekuvuzeni, iiseti zophando, okanye uveliswe ngobukrelekrele bokwenziwa. Ngeli xesha, i-AI iguqula kwaye iguqule iminwe yeminwe ukuze ifanise inzwa ethile yesixhobo esihlaselweyo, idala into ebizwa ngokuba "isichazi-magama seminwe."
• Ukuskena okuzenzekelayo kude kube kuvuliwe: I-Hardware ihlasela ngokucwangcisekileyo inzwa ngokuvavanya iminwe yeminwe kwisichazi-magama nganye, ilungisa iiparamitha ezinje nge-FAR ukuze inkqubo yamkele ukuhambelana okungqongqo kwaye, ngenxa yoko, yandise amathuba okuphumelela.

Inqaku elidibeneyo:

I-PlayPraetor: I-malware elinganisa i-Google Play kwaye ibe idatha

Iindleko ze-hardware eziyimfuneko zijikeleze i-$ 15 kuphela, okwenza ukuba kufikeleleke kumaqela anezixhobo zobugcisa.Uvavanyo lubonise ukuba ukuvula kunokufezekiswa kwixesha elisusela kwimizuzu engama-40 ukuya phantse kwiiyure ezili-14, kuxhomekeke kwisixhobo kunye nenani leminwe egcinwe ngumsebenzisi.

Ubuthathaka buxhatshazwe yiBrutePrint

Impumelelo yeBrutePrint ayisiyonto yanto yanto, kodwa sisiphumo sokuxhaphaza ubuthathaka obubini obukhoyo kwii-smartphones ze-Android:

• Rhoxisa-emva komdlalo-usilele (CAMF)Abenzi boluvo abaninzi benza uthatho oluninzi ngomzamo wokuqinisekisa. Ukuba impazamo yenzekile kwinyathelo lokugqibela, inkqubo ayilibali elo linge njengokusilela, ivumela umjikelo ukuba uphindwe ngokungenasiphelo ngaphandle kokuqalisa umda wokuvala umda wokuzama.
• Umdlalo-Emva-Ukutshixa (MAL)Emva kweenzame ezininzi ezingaphumeleliyo, izixhobo zivale ukufikelela okwethutyana. Nangona kunjalo, kwiimodeli ezininzi, nokuba ungqinisiso alukagqitywanga ngexesha lokutshixa, inkqubo iphendula kwimifanekiso emitsha ngokubonisa ukuba iyahambelana na, ivumela umnwe ophumeleleyo ukuba uzilungiselele ngokuzenzekelayo ukusetyenziswa xa ixesha lokuvala liphelile.

Ngokwenza, uphando lubonise ukuba zonke iifowuni ze-Android kunye ne-HarmonyOS ezivavanyiweyo zazisengozini ubuncinane enye yezi ziphene, ukuvumela imizamo engenamkhawulo, okanye ubuncinane abaninzi kunenkqubo ejoliswe kuyo. Obu buthathaka buqhelekile kakhulu kwizixhobo ze-Apple, esiza kuxoxa ngazo kamva.

I-automation, i-AI, kunye nedatha yeminwe: isichazi-magama sohlaselo

Into eyohlulahlulayo yeBrutePrint kukusetyenziswa kobukrelekrele bokwenziwa ukukhulisa nokulungelelanisa ushicilelo kwiinzwa ezahlukeneyo.Isiseko sedatha sokuqala sinokuvela kwimithombo eyahlukeneyo, kodwa yi-AI eyenza ukulungiswa kakuhle, ithatha ithuba lokwahlukana kumgangatho kunye namandla okusebenza kwimodeli nganye yenzwa ukwenza iinguqulelo ezifanelekileyo zomfanekiso ngamnye.

I-automation ifana nokuba inkqubo idibanisa i-hardware yangaphandle, ilungiselela isichazi-magama esilungisiweyo kwaye iqalise ukuzama ukuzama enye emva komnye de kube enye yeminwe yamkelwe.Le nkqubo yonke yenziwa ngaphandle kokungenelela komntu, okunciphisa zombini ixesha kunye nokwenzeka kweempazamo.

Ukuthelekisa phakathi kwe-Android, i-HarmonyOS kunye ne-iOS: zeziphi iinkqubo ezisengozini ngakumbi?

Elinye lawona macandelo anomdla kakhulu kwisifundo ngumahluko ekuchaseni isixhobo ngokuxhomekeke kwindlela yokusebenza kunye nemodeli yokuphunyezwa kwenzwa.Idatha eqokelelweyo ivelisa iziphumo ezicace kakhulu:

• AndroidUninzi lweefowuni ze-Android zivumela i-BrutePrint ukuba yenze imizamo engenamkhawulo ngenxa yokunqongophala kwe-encryption kwitshaneli yonxibelelwano kunye nobukho bobuthathaka obufana ne-CAMF kunye ne-MAL. Ixesha elifunekayo ukukrazula ukuqinisekiswa lihluka phakathi kwemizuzu engama-40 kunye neeyure ze-14, kuxhomekeke kwinani leminwe ebhalisiweyo (ephantsi kwenani, kunzima kakhulu). Ukuba umsebenzisi unomnwe omnye obhalisiweyo kuphela, uhlaselo lunokuthatha iiyure ezininzi; ukuba inani eliphezulu elivumelekileyo lifikelelwe, inkqubo ikhawuleza kakhulu.
• HarmonyOS: Inobuthathaka obufanayo kwi-Android, njengoko yabelana ngokuphunyezwa kweenzwa kunye neeprothokholi zokhuseleko. Uhlaselo luyasebenza, nangona ezinye iimodeli zibonisa ukuchasana okuyingxenye.
• I-iOS (i-iPhone): Izixhobo ze-Apple zezona zinzima. Ukhuseleko lwabo lukhulu luvela kwinto yokuba Unxibelelwano phakathi kwenzwa yeminwe kunye nenkqubo yokusebenza ifihliwe ngokupheleleyoOku kuthintela ukutofa kwedatha yeminwe yangaphandle okanye ukuvalelwa kwenkqubo yokuqinisekisa. Nangona kunjalo, kuye kwaphawulwa ukuba ezinye iimodeli zivumela umda wemizamo yokunyuswa ukusuka kwi-5 ukuya kwi-15, nangona uhlaselo alukwazi ukusebenzisa iindlela ezifanayo njenge-Android.

Ke ngoko, ngelixa kungekho sistim engenakuchaphazeleka ngokupheleleyo, umahluko phakathi kwe-Android kunye ne-iPhone mkhulu, ubeka iimodeli ze-Apple kwindawo ekhuselekileyo ngokuchasene neBrutePrint. Ngaphaya koko, kubalulekile ukukhumbula ukuba ii-iPhones zamva nje zixhomekeke ekubonweni kobuso (i-ID yobuso) endaweni yeminwe, esusa le vector yohlaselo.

Zeziphi izinto ezonyusa umngcipheko wokuphumelela kweBrutePrint?

Kukho izinto ezininzi ezinokwenza kube lula okanye ngokukhawuleza ukuba iBrutePrint ilahlekise i-smartphone:

• Inani leminwe erekhodiweyo: Iminwe emininzi igcina umsebenzisi (iminwe evela kwizandla zombini, iminwe yezihlobo, njl.), Uluhlu olukhulu lwemidlalo enokwenzeka kunye nexesha elifutshane elifunekayo lokuhlaselwa.
• Umgangatho wenzwa kunye nokhuseleko: Izinzwa ezitshiphu, ezindala, okanye ezinesisombululo esisezantsi zikholisa ukuba nonyamezelo oluphezulu, nto leyo iguqulela kumathuba aphezulu okwamkela iminwe 'efanayo'.
• Uhlaziyo lweFirmware: Iinkqubo eziphelelwe lixesha zinokugcina ubuthathaka obusele bulungisiwe kwi-firmware yamva nje okanye kwiinguqulelo ze-OS.

Uhlaselo luthatha ixesha elingakanani kwaye ngawaphi amathuba okuphumelela?

Ixesha elifunekayo ukuze i-BrutePrint idibanise isixhobo iyahluka ngokuxhomekeke kwisiseko sedatha kunye nemodeli ethile, kodwa uqikelelo luvela kwimizuzu engama-40 ukuya phantse kwiiyure ze-14. Ukuba umsebenzisi unomnwe omnye obhalisiweyo kuphela, uhlaselo luthatha ixesha elide, kodwa ukuba inani eliphezulu leminwe ekhoyo isetyenzisiweyo, inkqubo imfutshane kakhulu, kunye nefowuni ivuliwe ngaphantsi kweyure kwezinye iimeko.

Inqaku elidibeneyo:

I-SpyLend: I-malware ye-Android eba idatha yakho kwaye ikhuphe amaxhoba ayo

Ithuba lokuphumelela liphezulu nje ukuba umhlaseli uye wandisa ukufikelela ngokomzimba kwi-terminal kunye nolwazi lobugcisa oluyimfuneko ukudibanisa i-hardware.Ngapha koko, zonke iimvavanyo zovavanyo ezenziwa kwiimodeli ezahlukeneyo ze-Android kunye ne-HarmonyOS zikwazile ukunyanzela ukuqinisekiswa ngexesha elithile.

Unyino kunye neemfuno zokusebenzisa iBrutePrint

Ngaphandle kokuba isebenza kakhulu, iBrutePrint inikezela ngezithintelo zolungiselelo ezenza kube nzima ukuba yingozi enkulu kumsebenzisi ophakathi:

• Ukufikelela ngokomzimba kwisixhoboNgaphandle kokufikelela ngokuthe ngqo kwifowuni, uhlaselo alunakwenzeka. Oku kuthintela ukusetyenziswa kwayo kubusela, ilahleko, okanye ufikelelo olungajongwanga.
• Ulwazi lobugcisa: Nangona i-hardware ifikeleleka, umhlaseli kufuneka abe nolwazi oluthile lwe-electronics kunye ne-smartphone disassembly ukufikelela kwitshaneli ye-SPI kunye nokuxhuma kwi-PCB.
• Ixesha lokuphumeza: Iiyure ezifunekayo ukugqiba ukuhlaselwa kunokunika umhlaseli ukuba ifowuni ibekwe iliso okanye ukulandelela kusebenze.
• Isiseko sedatha kunye ne-AI: Ukufikelela kwingqokelela enkulu yeminwe kunye nezixhobo ze-AI zokulungisa uhlaselo kwinzwa nganye ziyafuneka.

Ngawaphi amanyathelo okhuseleko akhoyo ngokuchasene neBrutePrint?

Nangona umngcipheko wokuba lixhoba leBrutePrint usezantsi kuninzi, amanyathelo okhuseleko anokuthi athathwe ukwenza oku okanye uhlaselo olufanayo lube nzima kangangoko kunokwenzeka:

• Rekhoda iminwe embalwa kangangoko: Ukukhawulela ukuqinisekiswa kumnwe omnye kunciphisa kakhulu indawo yokuhlaselwa.
• Hlaziya rhoqo inkqubo yokusebenza kunye ne-firmwareAbavelisi bakhupha iipetshi kunye nokuphuculwa kokhuseleko kunye nokulungiswa okujoliswe ekukhuseleni umjelo wonxibelelwano we-sensor kunye nokuthintela ubuthathaka obaziwayo.
• Nciphisa ukufikelela ngokwasemzimbeni kwi-smartphone: Musa ukushiya ifowuni ingajongwanga okanye ezandleni zabantu ongabaziyo.
• Vula iinkqubo zokhuseleko ezongezelelweyo: Sebenzisa amagama ayimfihlo anamandla, ii-PIN, kunye nokhuseleko lwe-app kwizinto ezinovakalelo, ezinjengokhuseleko olungqale kwi-app okanye isiqinisekiso esinamanyathelo amabini xa kunokwenzeka.

Ukongezelela, iingcali ze-cybersecurity zincoma ukuba abavelisi basebenzise ukubethelwa kokuphela kokugqibela ekunxibelelaneni phakathi kwe-biometric sensor kunye nenkqubo yokusebenza, kunye neenkqubo zokuphicothwa rhoqo ukuqinisekisa ukuthotyelwa kweendlela ezilungileyo zokhuseleko.

Ngaba iApile isimahla kwiBrutePrint?

Inkqubo ye-ID ye-ID ye-iPhone ibonakalise ukuxhathisa ngakumbi kwi-BrutePrint kunye nohlaselo olufanayo., ubukhulu becala sibulela ukubethelwa konxibelelwano lwangaphakathi kunye nodibaniso lwe-hardware-software oluvaliweyo olubonakalisa iimveliso ze-Apple.

Ngelixa abaphandi bakwazile ukwandisa inani eliphezulu leenzame ezivunyelweyo kwezinye iimodeli ukusuka kwi-5 ukuya kwi-15, uhlaselo ngokwalo alunakwenzeka njenge-Android.Ukongeza, ii-iPhones ezininzi zangoku zifudukele kwi-ID yoBuso (ubuqinisekiso bobuso), isusa ngokupheleleyo i-vector yokuhlaselwa kweminwe.

Ngaba iBrutePrint isisongelo sokwenyani kubasebenzisi abaninzi?

Ukuvela kweBrutePrint kuphawula inguqu ephambili kukhuseleko lwebhayometriki ye-smartphone, kodwa impembelelo yayo ebonakalayo ilinganiselwe. Phakathi kwezinto ezinciphisa ubungozi bayo kuluntu jikelele zezi:

• Imfuneko yokufikelela ixesha elide ngokwasemzimbeni: Uhlaselo lunokwenzeka kuphela ukuba umhlaseli unokufikelela kwifowuni iiyure kunye nendawo apho banokuyichitha ngaphandle kokufunyanwa.
• Iimfuno zezixhobo kunye nolwazi olulodwaNangona i-hardware ingabizi, ukwenza uhlaselo kungaphaya kokufikelela kwizaphuli-mthetho ngaphandle koqeqesho oluthile lobugcisa.
• Ixesha eliphezulu lokwenziwa: Inani leeyure ezifunekayo linokufuna ukuba ixhoba libuyise ifowuni okanye liyitshixe likude phambi kokuba lugqitywe uhlaselo.
• Ukulungiswa okuqhubelekayo kobuthathakaUkukhutshwa kweBrutePrint kuye kwakhuthaza abavelisi kunye nabaphuhlisi ukuba baqinise ukhuseleko kunye nokubethela umjelo wonxibelelwano kunye neenzwa, ngokuqhubekayo ukunciphisa inani lezixhobo ezisengozini.

Inqaku elidibeneyo:

I-SparkCat: I-cryptocurrency-ukweba i-malware ingena kwii-apps ezisemthethweni

Nangona isoyikiso siyinyani kakhulu kwindawo yokhuseleko oluphezulu, ubuntlola, ukubiwa kolwazi lwenkampani okanye uphando lwasenkundleni., apho ukufikelela ngokomzimba kunye nexesha kunokuqinisekiswa, iingozi kumsebenzisi oqhelekileyo ziphantsi ukuba kuthathwe amanyathelo afanelekileyo. Yabelana ngolwazi ukuze abanye abasebenzisi bazi iindaba.