江苏龙网

  1. 首页 > 生活 > >

怎样评价LoRa技术的安全性

LoRa同步传输机制设置的问题，可以干扰，不让消息到达网关，有点像我们计算机网络课程中学的1坚持csma监听技术，我就是让信道干扰一直忙，就是不让你们正常的发；
LoRa 设备共存问题，相同的frequency和spread factor，LoRa传输相互干扰，具体见 E. Aras的Exploring the security vulnerabilities of lora；
楼上说的消息完整性，基于这个攻击还挺多简单又有效的， 详见J. Lee的Risk analysis and countermeasure for bit-flipping attack in lorawan 和H. Hu 的Verdict: Privacy-preserving authentication of range queries in location-based services
还有终端设备，不同类别节点接入时候的攻击。
作为一只学安全的，打算一年内拿个LoRa设备操作一下，好好学一学，到时候再补充一下，先占一个坑儿～

■网友
先看几个概念，仅仅从问题本身出发，这些概念题主肯定没问题怎样评价LoRa技术的安全性

lorawan节点入网，这里的nonce很重要怎样评价LoRa技术的安全性

MIC消息完整性编码，相关性怎样评价LoRa技术的安全性

For over-the-air-activation, end-devices are not personalized with any kind of network key. Instead, whenever an end-device joins a network, a network session key specific for that end-device is derived to encrypt and verify transmissions at the network level. This way,roaming of end-devices between networks of different providers is facilitated. Using both a network session key and an application session key further allows federated network servers in which application data cannot be read or tampered with by the network provider.Establishing these two session 1 keys allows for a federated network server infrastructure in which network operators are not able to eavesdrop on application data. In such a setting, the application provider must support the network operator in the process of an end device actually joining the network and establishing the NwkSKey for the end-device. At the same time the application provider commits to the network operator that it will take the charges for any traffic incurred by the end-device and retains full control over the AppSKey used for protecting its application data.以上摘自 LoRaWANSpecification1R0 Spec。--------------------------------------------------------------------安全与否不能仅仅看加密算法，还需要关注join trim过程，另外现在绝大多数云平台为了安全性的做法每个device都有独立的devkey哪怕你是同一款产品appkey，这种方式牺牲了产线上时间消耗。另外LoRaWAN也是采用同样的做法，不过用户可以根据实际的安全性考虑选择是否独立烧写key还是自动根据mac等生成key。参考Spec的说明，Each device should have a unique set of NwkSKey and AppSKey. Compromising the keys of one device shouldn‘t compromise the security of the communications of other devices. The process to build those keys should be such that the keys cannot be derived in any way from publicly available information (like the node address for example).


推荐阅读


上一篇：辞职与否——是在逃避困难还是真想换个发展方向

下一篇：微信相比微博為何在中老年年齡層如此受歡迎