IoT智能设备安全威胁及防护技术综述  

A Survey of Security Threats and Defending Technologies on IoT Smart Devices

作　　者：王雅哲[1,2,3] 张城毅 霍冬冬 李佳琳[1,2,3] WANG Yazhe;ZHANG Chengyi;HUO Dongdong;LI Jialin(State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China;Engineering Laboratory of the Internet Smart Device Information Security, Beijing 100093, China;School of Cyber Security, University of Chinese Academy of Sciences, Beijing 100049, China)

机构地区：[1]中国科学院信息工程研究所信息安全国家重点实验室,北京中国100093 [2]互联网智能设备信息安全北京市工程实验室,北京中国100093 [3]中国科学院大学网络空间安全学院,北京中国100049

出　　处：《信息安全学报》2018年第1期48-67,共20页Journal of Cyber Security

基　　金：中国科学院青年创新促进会(1105CX0105);信息安全国家标准项目(智能互联设备信息安全技术要求);国家重点研发计划(2017YFB0801900)资助

摘　　要：伴随着物联网的产生和发展,IoT智能设备越来越多地出现,其大规模普及的同时,也给用户个人资产安全与隐私保护带来了极大地冲击和挑战。本文围绕智能设备,基于智能设备终端、云服务端和用户控制终端三端系统架构,综述目前智能设备安全威胁的主要来源和技术攻击手段,并针对性地梳理已有防护技术和安全研究现状。然后,针对现有IoT智能设备安全防护体系缺失和安全设计不足的问题,本文讨论提出了全生命周期的IoT智能设备系统防护模型设计思路。With the emergence and development of Internet of things, IoT smart devices increasingly appear and its large-scale popularity also has brought great impact and challenges on the user＇s personal assets security and privacy protection. In this paper, based on the smart device terminal, cloud server and user control terminal this three-terminal system architecture, we first summarize the main sources and technical attack methods of smart device security threats and combs the corresponding protection technologies and security research. Then, aiming at the problem of the lack of security protection system and the lack of security design on the existing IoT smart devices, this paper discusses and puts forward full life-cycle IoT smart device protection system model designing.

关 键 词：智能设备安全 安全威胁和防护综述 系统防护模型设计 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]