Efficient and Secure Provisioning for the IIoT

　　在2016秋季黑客招募了成千上萬(wàn)的嵌入式設(shè)備，以形成惡意僵尸網(wǎng)絡(luò)。他們的未來(lái)惡意軟件感染的寬帶路由器，讓僵尸網(wǎng)絡(luò)的運(yùn)營(yíng)商使用他們的分布式拒絕服務(wù)（DDoS）攻擊。這是一個(gè)喚醒的新興物聯(lián)網(wǎng)（物聯(lián)網(wǎng)）產(chǎn)業(yè)-顯示如何黑客可以使用網(wǎng)絡(luò)智能設(shè)備為自己的目的。

　　雖然未來(lái)的攻擊集中在消費(fèi)設(shè)備，對(duì)物聯(lián)網(wǎng)產(chǎn)業(yè)的影響是嚴(yán)重的。沒(méi)有對(duì)策，工業(yè)工廠面臨類(lèi)似大規(guī)模攻擊的犧牲品。風(fēng)險(xiǎn)范圍從失去生產(chǎn)到嚴(yán)重?fù)p壞連接機(jī)械。安全專(zhuān)家的分析表明，黑客的受害者的設(shè)備制造商作出相對(duì)簡(jiǎn)單的錯(cuò)誤。在未來(lái)的攻擊的情況下，很少有保護(hù)路由器免受黑客登錄和上傳他們的新固件。

　　Groups such as the IoT Security Foundation （IoTSF） have issued recommendations designed to protect against similar attacks. The IoTSF identified measures that would protect against Mirai. They include the need to ensure access codes or passwords are unique to each unit and are not shared among a group of devices. Even if the hacker is able to discover the password for one， they are not able to log into others with the same access credentials. A further recommendation is that devices should protect against having firmware loaded into them that has not been digitally signed by a trusted provider.

　　Although the answer is to have credentials that are unique to each unit， this can be difficult to manage from a logistical point of view. IIoT systems become very expensive to deploy if each device needs to be provisioned individually by an expert installer. It is also a strategy that increases risk because numerous devices may need to be configured by a small group of people – making them prime targets for industrial espionage and social engineering attacks.