RSA SecurID software token cloning: a new how-to
A cloned SecurID software token created by security consultant Behrang Fouladi. Credit: Behrang Fouladi A researcher has devised a method that attackers with control over a victim's computer can use to clone the secret software token that RSA's SecurID uses to generate one-time passwords. The technique, described on Thursday by a senior security analyst at a firm called SensePost, has important im
ç±³ã§ä½¿ã„æ¨ã¦ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰æƒ…å ±ç›—é›£ã€ç«¯æœ«4000万å°äº¤æ›ã¸ã€€RSAã‚»ã‚ュリティã®ä¸»åŠ›è£½å“ - 日本経済新èž
ã€ãƒ‹ãƒ¥ãƒ¼ãƒ¨ãƒ¼ã‚¯=å°å·ç¾©ä¹Ÿã€‘米セã‚ュリティー対ç–大手RSAã‚»ã‚ュリティã¯6æ—¥ã€åŒç¤¾ã®ä¸»åŠ›è£½å“ã®1ã¤ã§ã€ä¸–ç•Œã§ç´¯è¨ˆç´„4000万å°ãŒå‡ºè·ã•ã‚Œã¦ã„る「使ã„æ¨ã¦ãƒ‘スワードã€ç«¯æœ«ã®äº¤æ›ã«å¿œã˜ã‚‹æ–¹é‡ã‚’明らã‹ã«ã—ãŸã€‚åŒç¤¾ã®ã‚·ã‚¹ãƒ†ãƒ ã«ãƒãƒƒã‚«ãƒ¼ãŒä¸æ£ä¾µå…¥ã—ã€ä½¿ã„æ¨ã¦ãƒ‘スワード技術ã«é–¢ã™ã‚‹æƒ…å ±ãŒç›—ã¾ã‚ŒãŸãŸã‚。åŒç«¯æœ«ã¯æ—¥æœ¬ã®é‡‘èžæ©Ÿé–¢ã‚„ä¼æ¥ã§ã‚‚広ã使ã‚ã‚Œã¦ãŠã‚Šã€å½±éŸ¿ãŒåºƒãŒã‚‹å¯èƒ½æ€§ãŒã‚る。RSAã‚»ã‚ュリティã®ã‚¢ãƒ¼ã‚µãƒ¼ãƒ»ã‚³
SecurIDã®å®‰å…¨æ€§ã¯æœ¬å½“ã«å¤§ä¸ˆå¤«ãªã®ã‹? - ã‚»ã‚ュリティã¯æ¥½ã—ã„ã‹ã？ Part 1
(2011/06/07 æ›´æ–°) RSAãŒä»Šå›žã®ä»¶ã«ã¤ã„ã¦å…¬å¼ã«ç™ºè¡¨ã‚’ã—ã¾ã—ãŸã€‚ãƒãƒƒã‚ードã¸ã®ä¸æ£ä¾µå…¥ã®åŽŸå› ã«ãªã£ãŸã“ã¨ã‚’èªã‚ã€é¡§å®¢ã«å¯¾ã—㦠SecurIDã®äº¤æ›ãªã©ã«å¿œã˜ã‚‹æ案をã—ã¦ã„ã¾ã™ã€‚ ã“ã®é€±æœ«ã€ã‚¢ãƒ¡ãƒªã‚«ã§èµ·ããŸãƒãƒƒã‚ード・マーãƒãƒ³(Lockheed Martin)ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«å¯¾ã™ã‚‹ä¸æ£ä¾µå…¥ãŒè©±é¡Œã«ãªã£ã¦ã„る。ãƒãƒƒã‚ード・マーãƒãƒ³ã¨ã„ãˆã°ã€ã‚¢ãƒ¡ãƒªã‚«ã‚’代表ã™ã‚‹ä¼æ¥ã®ä¸€ã¤ã§ã‚ã‚Šã€F22ã‚„ F35ãªã©ã®æœ€æ–°é‹æ©Ÿã‚’開発ã—ã¦ã„ã‚‹ã“ã¨ã§ã‚‚有åã§ã‚る。 ãã®ãƒãƒƒã‚ードã§å…ˆé€±æœ«ã«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«å¯¾ã™ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã®ä¸æ£ä¾µå…¥ãŒèµ·ããŸã€‚ã“ã®ä»¶ã‚’最åˆã«ä¼ãˆãŸã®ã¯ Robert X. Cringelyæ°*1。5/25ã®ãƒ–ãƒã‚°ã§ã€ã‚る国防関連ä¼æ¥ã®è©±ã¨ã—ã¦ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§å•é¡ŒãŒèµ·ããŸã“ã¨ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚ˆã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ã‚’åœæ¢ã—ãŸã“ã¨ã€å…¨ã¦ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘スワードをリセットã—ãŸã“ã¨ã€SecurIDを数週間ã®ã†ã¡
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Was stolen Symantec source code behind the RSA SecurID attacks?
{{#tags}}- {{label}}
{{/tags}}