March 2017
Intermediate to advanced
262 pages
5h 26m
Chinese
Content preview from 物联网设备安全
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
未来的安全
——
对话将来的攻击方式
｜
233
读数而针对我们投放血压药物广告，或是根据通常我们关闭物联网电灯系统的时间所采
集到的数据而发放抗失眠药物的广告。
随着人们开始使用更多的物联网设备，他们希望使用由谷歌和苹果这样的公司提供平台
和框架进行集成和自动化，这些设备各种传感器上收集到的信息将能获取到。这些数据
用于市场营销，并存储在跨多个云架构，这对恶意代理来说是一座金矿，他们已经被限
制从在线平台收集数据，如电子邮件和社交网站等。除了隐私问题，威胁代理有能力篡
改这些信息，如果更改的信息被其他物联网设备使用，会带来健康或人身安全的影响。
很可能，这样一个隐私和安全漏洞能够恐吓和激怒用户，他们将会要求去细粒度地追踪
被收集的数据是如何被使用的，以及选择退出的权利。
8.10
智慧城市目标
在
2013
年
5
月，安全研究人员
Billy Rios
和
Terry McCorkle
入侵谷歌的澳大利亚总部楼
宇控制系统。发现楼宇使用
Tridium Niagara AX
平台，允许管理员远程控制物理安全警报、
物理访问，以及供暖和空调系统。他们使用任何人能够猜出的默认管理员密码获得了访
问权限。这个口令存储在配置文件中，研究人员利用系统中的漏洞获得，系统漏洞暴露
该信息给未经验证用户。
Tridium
系统在世界各地都很流行，研究者声明，已经能够使
用
Shodan
工具定位
25 000
多个这样的系统暴露在互联网中。
除了
Rios
和
McCorkle
公司采用的工业级互联系统，我们开始看到大幅增加的采用消费
级的物联网设备，正如本书到现在为止一直探索的这些设备 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.