ð å®¶åºã®IoTã»ãã¥ãªãã£å®å šã¬ã€ã â ð WiâFiã«ãŒã¿ãŒã»é²ç¯ã«ã¡ã©ã»ã¹ããŒãå®¶é»ã®å±éºãšå¯Ÿç â ïœ ð å®¶åºçšIoTæ©åšã®ãªã¹ã¯ãšå¯Ÿçããããããäžå¯§ã«ãŸãšããŸãã
å®¶ã®äžã§éãã«åããŠãããããããã®âã€ãªãããã®ãã¡âã
WiâFiã«ãŒã¿ãŒããã¬ããã²ãŒã æ©ãé²ç¯ã«ã¡ã©ãã¹ããŒãå®¶é»âŠâŠã
䟿å©ã§å¿«é©ãªæ®ãããæ¯ããŠãããäžæ¹ã§ãã»ãã®å°ãã®èšå®ãã¹ãæŸçœ®ããæãã¬å±éºã«ã€ãªããããšããããŸãã
æè¿ã§ã¯ãå®¶åºçšIoTæ©åšãçã£ãäžæ£ã¢ã¯ã»ã¹ãèŠãèŠãä¹ã£åãã®äºäŸãå¢ããŠããŸãã ããã©ãé£ããå°éç¥èããªããŠããå®¶ã®å®å šã¯éãã«æŽããŠããããšãã§ããŸãã
ãã®èšäºã§ã¯ã
å®¶åºã®IoTæ©åšã«æœããªã¹ã¯ãšã仿¥ããã§ãããããã察ç ããŸãšããŸããã
ããªãã®æ®ããããããããç©ããã§ããããã«ãå®¶ã®äžã®âèŠããªãå±éºâããã£ãšç¹æ€ããŠãããŸãããã
0. ã¯ããã«ïŒãªãä»ãå®¶åºã®IoTã»ãã¥ãªãã£ãªã®ã
ããæ°å¹Žãå®¶åºã®ãããã¯ãŒã¯ç°å¢ã¯å€§ããå€ãããŸããã
ãã€ãŠã¯ãããœã³ã³ãšã¹ãããçšåºŠã ã£ãæ¥ç¶æ©åšããä»ã§ã¯æ¬¡ã®ããã«åºãã£ãŠããŸãã
ç¡ç·ã«ãŒã¿ïŒWiâFiã¢ã¯ã»ã¹ãã€ã³ãïŒ
ããœã³ã³ã»ã¹ãã
ãã¬ãïŒã¹ããŒãTVïŒ
ã²ãŒã æ©
é²ç¯ã«ã¡ã©
ã¹ããŒãã¹ããŒã«ãŒ
ã¹ããŒãå®¶é»ïŒãšã¢ã³ã³ãç §æãããããæé€æ©ãªã©ïŒ
ãããã¯ãã¹ãŠã€ã³ã¿ãŒãããã«ã€ãªããã䟿å©ããæäŸããäžæ¹ã§ã
æ»æè
ã«ãšã£ãŠâ䟵å
¥çµè·¯ã®å®åº«âã«ããªã£ãŠããŸãã
å®éãå®¶åºçšIoTæ©åšãçã£ãæ»æã¯å¹Žã
å¢å ãã
èŠãèŠãä¹ã£åããèžã¿å°åãæ
å ±æŒãããªã©ã®è¢«å®³ãå ±åãããŠããŸãã
æ¬èšäºã§ã¯ã
å°éç¥èããªããŠãçè§£ã§ããããã«ãå®¶åºã®IoTã»ãã¥ãªãã£ãäœç³»çã«æŽçããŸãã
仿¥ããã§ãã察çãäžå¿ã«ãéãã«ãããã確å®ã«æ®ãããå®ãããã®ã¬ã€ãã§ãã
1. å®¶åºã®ãããã¯ãŒã¯ã¯ã©ãçãããã®ã
â æ»æè ã®èŠç¹ïŒã©ãããäŸµå ¥ããã®ã
æ»æè ã¯ãå®¶åºã®ãããã¯ãŒã¯ã次ã®3ã€ã®å±€ã«åããŠçããŸãã
â å ¥å£ïŒWiâFiã«ãŒã¿ïŒç¡ç·APïŒ
å®¶åºãããã¯ãŒã¯ã®âçé¢â
ãããçªç Žããããšãå®¶äžã®æ©åšã«ã¢ã¯ã»ã¹ãããå¯èœæ§ããã
â¡ äžæ žïŒããœã³ã³ã»ã¹ãã
å人æ å ±ã»åçã»ä»äºããŒã¿ãªã©äŸ¡å€ã®é«ãæ å ±ãéãŸã
æçµçãªã¿ãŒã²ããã«ãªãããã
⢠åšèŸºïŒIoTæ©åšïŒã«ã¡ã©ã»å®¶é»ã»TVã»ã²ãŒã æ©ãªã©ïŒ
ã»ãã¥ãªãã£ã匱ããã®ãå€ããèžã¿å°ã«ããããã
äŸµå ¥ã®è¶³ããããšããŠå©çšããã
â ããããæ»æãã¿ãŒã³ïŒå®éã«å€ããã®ïŒ
1. åæãã¹ã¯ãŒãã®ãŸãŸæŸçœ®
ãadmin / adminããªã©ã®åæèšå®ã¯äžçäžã§å ±æãããŠãã
é²ç¯ã«ã¡ã©ãã«ãŒã¿ãçããããã
2. å€ãæ©åšã®è匱æ§ãæªçš
ã¢ããããŒããããªãå€ãã«ãŒã¿ãå®¶é»ã¯â穎ã ããâ
3. å€éšå ¬éèšå®ã®ãã¹
ããŒãéæŸãP2Pæ©èœã®èª€èšå®ã§ãäžçäžããã¢ã¯ã»ã¹å¯èœã«
4. ã¢ã«ãŠã³ãä¹ã£åã
ã²ãŒã æ©ãã¯ã©ãŠã飿ºå®¶é»ã§å€çº
ã¯ã¬ã«æ å ±ãçŽã¥ããŠãããã被害ã倧ãã
5. äžå¯©ãªã¢ããªã»ã¹ãã«ã®æªçš
ã¹ããŒãTVãã¹ããŒãã¹ããŒã«ãŒã§å¢å
â 被害ã€ã¡ãŒãžïŒå®¶åºã§èµ·ããããããšïŒ
é²ç¯ã«ã¡ã©ã®æ åãå€éšã«æµåº
ã¹ããŒãå®¶é»ãåæã«æäœããã
å®¶åºãããã¯ãŒã¯å šäœãä¹ã£åããã
PCãã¹ããã«äŸµå ¥ãããæ å ±ãçãŸãã
ã²ãŒã æ©ã®ã¢ã«ãŠã³ããä¹ã£åããäžæ£èª²é
å®¶åºã®æ©åšãDDoSæ»æã®èžã¿å°ã«ããã
â䟿å©ãâãšâå±éºâã¯åžžã«é£ãåããã§ãã
2. æ©åšå¥ã«èŠããªã¹ã¯ãšå®äŸïŒè©³çްçïŒ
ããããã¯ãå®¶åºã«ããäž»èŠããã€ã¹ããšã«ã
è
åš â å®äŸ â ãªãèµ·ããã®ã
ã®é ã§æ·±æãããŸãã
ð¡ ç¡ç·APïŒWiâFiã«ãŒã¿ïŒ
â äž»ãªè åš
äžæ£ã¢ã¯ã»ã¹
DNSèšå®ã®æ¹ãã
æå·åæ¹åŒã®åŒ±ãïŒWEP / WPAïŒ
管çç»é¢ãžã®äŸµå ¥
â å®äŸ
å€ãã«ãŒã¿ã®è匱æ§ãçªãããå€éšãã管çç»é¢ã«äŸµå ¥
DNSãæžãæããããåœãµã€ãã«èªå°ããã被害
ã«ãŒã¿ãããããããã«ææããDDoSæ»æã«å æ
â ãªãèµ·ããïŒ
åæãã¹ã¯ãŒãã®ãŸãŸ
ãã¡ãŒã ãŠã§ã¢æŽæ°ããããªã
å€ãæå·åæ¹åŒïŒWEP / WPAïŒã䜿ã£ãŠãã
UPnPãWPSãæå¹ã®ãŸãŸ
ð¥ é²ç¯ã«ã¡ã©ïŒãããã¯ãŒã¯ã«ã¡ã©ïŒ
â äž»ãªè åš
èŠãèŠ
æ åæµåº
ããããããåïŒMiraiãªã©ïŒ
â å®äŸ
åæãã¹ã¯ãŒãã®ãŸãŸå ¬éãããäžçäžããé²èЧå¯èœã«
åœå ã®æ²³å·ç£èŠã«ã¡ã©ãä¹ã£åããæ åãå€éšã«æµåº
Miraiäºçš®ã«ããã«ã¡ã©å€§éææ
â ãªãèµ·ããïŒ
å€éšå ¬éèšå®ïŒããŒãéæŸïŒã®èª€èšå®
ãã¹ã¯ãŒãã匱ã
ã¡ãŒã«ãŒã®ãµããŒãçµäº
ð» ããœã³ã³ïŒWindows / MacïŒ
â äž»ãªè åš
ãã«ãŠã§ã¢
ã©ã³ãµã ãŠã§ã¢
ãã£ãã·ã³ã°
å€ãOSã®è匱æ§
â å®äŸ
Emotetã«ããã¡ãŒã«çµç±ææ
Windows 10ãªã©å€ãOSãçã£ãæ»æã®ç¶ç¶
åœã®ã¢ããããŒãéç¥ã«ãããã«ãŠã§ã¢ææ
â ãªãèµ·ããïŒ
ã¡ãŒã«æ·»ä»ãã¡ã€ã«ãéããŠããŸã
OSã»ãã©ãŠã¶ãå€ã
ã»ãã¥ãªãã£ãœãããç¡å¹
ðº ãã¬ãïŒã¹ããŒãTVïŒ
â äž»ãªè åš
äžæ£ã¢ããª
é éæäœ
èŠèŽå±¥æŽã®æŒãã
ãã€ã¯ã»ã«ã¡ã©ã®æªçš
â å®äŸ
ã¹ããŒãTVãã©ã³ãµã ãŠã§ã¢ã«ææãç»é¢ãããã¯
å€ãAndroid TVã®èåŒ±æ§æªçš
äžæ£ã¢ããªã«ããæ å ±åé
â ãªãèµ·ããïŒ
ã¢ããªã¹ãã¢ã®å¯©æ»ãç·©ãå Žåããã
OSæŽæ°ãããªããŸãŸäœ¿ãç¶ãã
ãã€ã¯ã»ã«ã¡ã©æ©èœã®åžžæãªã³
ð® ã²ãŒã æ©ïŒPS / Switch / XboxïŒ
â äž»ãªè åš
ã¢ã«ãŠã³ãä¹ã£åã
äžæ£èª²é
ãªã³ã©ã€ã³å¯ŸæŠã§ã®DDoSæ»æ
å€ãããŒãžã§ã³ã®è匱æ§
â å®äŸ
PSNãXbox Liveã§ã®ã¢ã«ãŠã³ãä¹ã£åã被害
ã²ãŒã æ©ãèžã¿å°ã«ããDDoSæ»æ
Switchã®å€ãããŒãžã§ã³ã§ã®èåŒ±æ§æªçš
â ãªãèµ·ããïŒ
ãã¹ã¯ãŒãã匱ã
2FAãèšå®ããŠããªã
ãªã³ã©ã€ã³IDãå ¬éãããã
ð£ AIé³å£°èªèæ©åšïŒã¹ããŒãã¹ããŒã«ãŒïŒ
â äž»ãªè åš
誀äœåã«ããé²é³
å€éšããã®é³å£°ã³ãã³ãæ»æ
å®¶é»é£æºã®æªçš
ã¯ã©ãŠã飿ºã®èšå®ãã¹
â å®äŸ
誀äœåã§äŒè©±ãé²é³ã第äžè ã«éä¿¡
é³å£°ã³ãã³ããæªçšããé éæäœã®å®éšçæ»æ
ã¹ãã«ïŒã¢ããªïŒçµç±ã®æ å ±æŒãã
â ãªãèµ·ããïŒ
åžžæåŸ æ©ã®ãã€ã¯
äžèŠãªã¹ãã«ã®ã€ã³ã¹ããŒã«
å®¶é»ãšã®é£æºç¯å²ãåºããã
𧺠ã¹ããŒãå®¶é»ïŒãšã¢ã³ã³ã»ç §æã»ããããæé€æ©ãªã©ïŒ
â äž»ãªè åš
äžæ£æäœ
å®¶ã®æ å ±ïŒéåããªã©ïŒã®æµåº
ããããããå
â å®äŸ
APIè匱æ§ã«ãã第äžè ãé éæäœå¯èœã«ãªã£ãŠããäºäŸ
ããããæé€æ©ã®æ åæµåº
å€ãå®¶é»ãããããããã«ææ
â ãªãèµ·ããïŒ
ã¡ãŒã«ãŒã®ã»ãã¥ãªãã£èšèšã匱ãå Žåããã
ã¢ããããŒããæäŸãããªã
å€éšã¢ã¯ã»ã¹èšå®ã®èª€ã
3. å®¶åºã®ã»ãã¥ãªãã£ãé«ããâ3ã€ã®æ±âïŒè©³çްçïŒ
â å ¥å£ãå®ãïŒWiâFiã«ãŒã¿ïŒ
â æåªå ã§ããã¹ãããš
管çãã¹ã¯ãŒãã匷åã«å€æŽ
æå·åæ¹åŒãWPA3ãŸãã¯WPA2-AESã«
SSIDãé ãå¿ èŠã¯ãªãããèå¥ãã«ããååã«ãã
WPSãç¡å¹å
UPnPãå¿ èŠæä»¥å€ãªã
ãã¡ãŒã ãŠã§ã¢ãå®ææŽæ°
IoTå°çšã®ã²ã¹ãWiâFiãäœãïŒæéèŠïŒ
â¡ ã¢ã«ãŠã³ããå®ã
â éèŠãã€ã³ã
äºæ®µéèªèšŒïŒ2FAïŒãå¿ ãæå¹å
ãã¹ã¯ãŒãã¯é·ãè€éã«
åããã¹ã¯ãŒãã䜿ãåããªã
äžå¯©ãã°ã€ã³éç¥ã確èª
å®¶æã¢ã«ãŠã³ãã®æš©é管çã峿 Œã«
⢠æ©åšãææ°ã«ä¿ã€
â å®è·µãã€ã³ã
èªåã¢ããããŒããON
å€ãæ©åšã¯è²·ãæ¿ã
äžèŠãªã¢ããªã»ã¹ãã«ãåé€
ã¡ãŒã«ãŒã®ãµããŒãçµäºæ©åšã¯èŠæ³šæ
4. 仿¥ããã§ããâå®¶åºåããã§ãã¯ãªã¹ãâ
â WiâFiã«ãŒã¿
åæãã¹ã¯ãŒãã倿Žãã
管çç»é¢ã®ãã¹ã¯ãŒãã倿Žãã
æå·åæ¹åŒãWPA2以äž
SSIDãå人æ å ±ãå«ãŸãªã
ã²ã¹ãWiâFiãäœã£ã
UPnPããªãã«ãã
WPSããªãã«ãã
â ã«ã¡ã©
å€éšå ¬éããŠããªã
ãã¹ã¯ãŒãã倿Žãã
ã¯ã©ãŠãçµç±ã¢ã¯ã»ã¹ãå©çš
ãã¡ãŒã ãŠã§ã¢æŽæ°ã確èª
â PC
OSã»ãã©ãŠã¶ãææ°
ã»ãã¥ãªãã£ãœããæå¹
äžå¯©ãªã¡ãŒã«ãéããªã
ããã¯ã¢ããã宿çã«åã
â ã¹ããŒãå®¶é»
äžèŠãªã¯ã©ãŠã飿ºããªã
ã¢ããªãææ°ã«æŽæ°
å€éšã¢ã¯ã»ã¹èšå®ã確èª
â ã²ãŒã æ©
2FAãæå¹å
ãªã³ã©ã€ã³IDãå ¬éããªã
äžå¯©ãªãã°ã€ã³å±¥æŽã確èª
â ã¹ããŒãã¹ããŒã«ãŒ
é³å£°å±¥æŽã宿åé€
äžèŠãªã¹ãã«ãç¡å¹å
å®¶é»é£æºãæå°éã«
5. å®¶åºãããã¯ãŒã¯ã®âçæ³çãªæ§æå³â

ã«ãŒã¿ã®ã»ãã¥ãªãã£æ©èœïŒãã¡ã€ã¢ãŠã©ãŒã«ïŒãON
IoTæ©åšã¯ã¡ã€ã³ãããã¯ãŒã¯ã«å ¥ããªã
ã²ã¹ãWiâFiã¯ã€ã³ã¿ãŒãããã®ã¿æ¥ç¶ã«å¶é
ãããã¯ãŒã¯ãåããããšã§ã
äžãäžIoTæ©åšã䟵害ãããŠããPCãã¹ããã«è¢«å®³ãæ³¢åãã«ãããªããŸãã
6. ãŸãšãïŒå®¶åºã®å®å šã¯ãèšå®ã»æŽæ°ã»åé¢ãã§å®ãã
å®¶åºã®IoTã»ãã¥ãªãã£ã¯ãç¹å¥ãªç¥èããªããŠãæ¹åã§ããŸãã
å ¥å£ïŒã«ãŒã¿ïŒã匷åãã
ã¢ã«ãŠã³ããå®ã
æ©åšãææ°ã«ä¿ã€
ãããã¯ãŒã¯ãåé¢ãã
ãã®4ã€ãæèããã ãã§ãå®¶åºã®å®å šæ§ã¯å€§ããåäžããŸãã
䟿å©ããšå®å¿ãäž¡ç«ãããããã«ã仿¥ã§ããããšããéãã«æŽããŠãããŸãããã
7. ãããã«ïŒéãã«æ®ãããå®ãããã«
å®¶ã®äžã§éãã«åãç¶ãããããããã®ããžã¿ã«ãã¡ã
ãã®ã²ãšã€ã²ãšã€ã«ãå°ãã ãæ°ãé
ã£ãŠãããããšã§ãæ®ããã¯ãã£ãšç©ããã«ããã£ãšåªãããªã£ãŠãããŸãã
ã»ãã¥ãªãã£ã¯ãæããããã®ãã®ã§ã¯ãªãã
ããªãã®æ¯æ¥ããã£ãšå®ãããã®âèŠããªãç¯ãâã®ãããªååšã§ãã
ãã®èšäºãããã®ç¯ããå°ãã ãæããããæå©ãã«ãªãã°å¬ããã§ãã
ãããªãšæã£ããå¿æŽãããïŒ
ãããããã°å¿æŽãé¡ãããŸãïŒ ããã ãããããã¯ã¯ãªãšã€ã¿ãŒãšããŠã®æŽ»åè²»ã«äœ¿ãããŠããã ããŸãïŒ