i g u th 5 b m o .c 关于绿盟科技 北京神州绿盟信息安全科技股份有限公司（简称绿盟科技）成立于 2000 年 4 月，总部位于北京。在国内外设有 30 多个分支机构， 为政府、运营商、金融、能源、互联网以及教育、医疗等行业用户，提供具有核心竞争力的安全产品及解决方案，帮助客户实现业务的 安全顺畅运行。 基于多年的安全攻防研究，绿盟科技在网络及终端安全、互联网基础安全、合规及安全管理等领域，为客户提供入侵检测 / 防护、 抗拒绝服务攻击、远程安全评估以及 Web 安全防护等产品以及专业安全服务。 北京神州绿盟信息安全科技股份有限公司于 2014 年 1 月 29 日起在深圳证券交易所创业板上市交易。 股票简称：绿盟科技　股票代码：300369 关于上海交通大学信息内容分析技术国家工程实验室 5 b m o .c 上海交通大学信息内容分析技术国家工程实验室于 2009 年 3 月由国家发改委批准建设。实验室主体建设于张江高科技园区，并于 2014 年 6 月通过国家验收。实验室主要围绕国家信息化建设对网络信息安全管理的需求，重点开展网络发布内容智能获取、多媒体内 容主题提取与分类、基于内容的网络访问控制等关键技术方面的研究。同时，实验室积极开拓产业新增长点，加快技术成果转化，支撑 国家有关职能部门和信息安全基础设施建设。 u th 近年来实验室聚焦物联网安全的密码理论、密钥管理、无线传感器网络安全、入侵检测、安全数据融合、安全定位、射频识别的隐 私与安全、物联网嵌入式系统的安全设计，取得了一系列成果。相关成果已经在电信运营商、公安、网安、文化宣传等系统获得成功应用。 i g 关于广州大学网络空间先进技术研究院 为加快推进高水平大学建设步伐，布局新的学科与科研大平台，学校围绕“5+2”平台引进并打造了一批高水平创新型科研团队， 2017 年 7 月份，学校成功引进了方滨兴院士，并以方院士团队为主体，成立了网络空间先进技术研究院。研究院下设 4 个研究所：网 络安全研究所、物联网及安全研究所、大数据及安全研究所、先进计算技术研究所。 物联网及安全研究所协同网络安全研究所、网络空间安全大数据分研究所，以物联网环境的个人用户隐私保护、平台安全的局限性、 普遍存在的移动性使得追踪和资产管理面临挑战、设备的数量巨大使得常规的更新和维护操作面临挑战、基于云的操作使得边界安全不 太有效等核心科学问题。在物联网中存在的隐私保护、认证、访问控制管理、数据保护、物理安全、设备保护和资产管理等物联网及安 全方向开展深入学术研究及技术应用。 特别声明 为避免合作伙伴及客户数据泄露，所有数据在进行分析前都已经过匿名化处理，不会在中间环节出现泄露，任何与客户有关的具 体信息，均不会出现在本报告中。 2018 物联网安全年报 目录 执行摘要 ···································································································································································2 1. 2018 年重大物联网安全事件回顾 ······················································································································5 1.1 暗网出现利用物联网设备的 DDoSaaS ··································································································································· 6 1.1.1 事件回顾 ····································································································································································································· 6 1.1.2 原理简述 ····································································································································································································· 7 m o .c 1.1.3 小结 ············································································································································································································· 8 1.2 Hide’n Seek 僵尸网络感染了 9 万台物联网设备··················································································································· 9 1.2.1 事件回顾 ····································································································································································································· 9 1.2.2 原理简述 ····································································································································································································· 9 1.2.3 小结 ···········································································································································································································10 5 b 1.3 IoTroop 针对金融机构的多起 DDoS 攻击活动 ···················································································································· 10 1.3.1 事件回顾 ···································································································································································································10 1.3.2 小结 ···········································································································································································································10 u th 1.4 VPNFilter 感染约 50 万台物联网设备，或与国家行为有关 ······························································································ 11 1.4.1 事件回顾 ···································································································································································································11 i g 1.4.2 原理简介 ···································································································································································································11 1.4.3 小结 ···········································································································································································································12 1.5 台积电生产线被勒索，停产损失超 10