paloalto-2020年物联网威胁报告（英文）-2020.3.pdf

《paloalto-2020年物联网威胁报告（英文）-2020.3.pdf》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、2020Unit42IoTThreatReportTableofContentsExecutiveSummary301IoTSecurityLandscape4OrganizationsLacktheToolstoDiscoverandSecureIoT5EnterprisesSitonaTimeBomb6HealthcareIsinCriticalShape7BasicNetworkSegmentationBestPracticesAren’tFollowed8CaseStudy:ConfickerinHealthcare902TopIoTThreats10E

2、xploits,PasswordAttacks,andIoTWormsToptheChart11UnpatchedDevicesandLegacyProtocols:MeansofLateralMovement12ThreatsEvolvingtoSpecificallyTargetIoTEnvironments13CaseStudy:CryptojackingintheWild1403ConclusionandRecommendations15TakeStepstoReduceRisk16Step1:KnowyourriskanddiscoverIoTdevi

3、cesonthenetwork16Step2:Patchprintersandothereasilypatchabledevices16Step3:SegmentyourIoTdevicesacrossVLANs17Step4:Enableactivemonitoring18PerfectYourIoTStrategy19BestPractice1:Thinkholistically,orchestratetheentireIoTlifecycle19BestPractice2:ExpandsecuritytoallIoTdevicesthroughproduc

4、tintegrations20About21PaloAltoNetworks21Unit4221Methodology22PaloAltoNetworks

5、Unit42

6、IoTThreatReport2ExecutiveSummaryAccordingtoa2019Gartnerreport,"Bytheendof2019,4.8billion[IoT]endpointsareexpectedtobeinuse,up21.5%from2018."Whiletheinternetofthings(IoT)opensthedoorforinnovativenewap

7、proachesandservicesinallindustries,italsopresentsnewcybersecurityrisks.ToevaluatethecurrentstateoftheIoTthreatlandscape,theUnit42threatintelligenceteamanalyzedsecurityissuesthroughout2018and2019withthePaloAltoNetworksIoTsecurityproduct,Zingbox®,spanning1.2millionIoTdevicesinthousands

8、ofphysicallocationsacrossenterpriseITandhealthcareorganizationsintheUnitedStates.WefoundthatthegeneralsecuritypostureofIoTdevicesisdeclining,leavingorganizationsvulnerabletonewIoT-targetedmalwareaswellasolderattacktechniquesthatITteamshavelongforgotten.ThisreportdetailsthescopeoftheI

9、oTthreatlandscape,whichIoTdevicesaremostsusceptible,topIoTthreats,andactionablenextstepstoimmediatelyreduceIoTrisk.IoTdevicesareencryptedTheinternetofmedicalthings(IoMT)deviceswiththemostsecurityissuesareimagingandunsecuredsystems,whichrepresentacriticalpartofthe98%ofallIoTdevicetraf

10、ficisunencry