采取零接觸的方法安全地鎖定物聯(lián)網(wǎng)設(shè)備

　　黑客滲透物聯(lián)網(wǎng)設(shè)備的能力證明更多的關(guān)于這些設(shè)備的安全水平比黑客的技能：在大多數(shù)情況下，受影響的產(chǎn)品缺乏最基本的安全條款。也就是說(shuō)，基本的安全概念上是簡(jiǎn)單的，但它的實(shí)現(xiàn)需要在系統(tǒng)中的每個(gè)節(jié)點(diǎn)仔細(xì)注意，以避免漏洞。

　　預(yù)建的安全解決方案，從 微芯科技 允許開(kāi)發(fā)者實(shí)現(xiàn)零接觸設(shè)備的物聯(lián)網(wǎng)應(yīng)用建立在亞馬遜網(wǎng)絡(luò)服務(wù)（AWS）提供物聯(lián)網(wǎng)服務(wù)。

?

　　Security requirements

　　A world of IoT connected devices presents a rich prize to hackers intent on controlling， disrupting， or corrupting critical applications in industry， transportation， health， and emergency services， among others. Increasingly， IoT developers are addressing the safety of data in transit by encrypting communications between devices and their hosts. Yet， data encryption represents only a portion of the requirements for end-to-end security.

　　A secure IoT application also depends upon secure authentication to ensure that known devices communicate with trusted hosts. The lack of assurance in device or host identity leaves an open door for attackers to take control of the data stream using man-in-the-middle attacks. In these attacks， bad actors represent themselves as trusted end devices in order to insert corrupted data streams into an application. Alternatively， attackers falsely represent themselves as known hosts to take control of IoT devices.