2019 物联网安全年报 Annual IoT Cybersecurity Report i g u th 5 b m o .c 关于中国电信网络与信息安全研究院 中国电信网络与信息安全研究院，负责全面支撑中国电信大网的安全运营，发挥央企责任， 营造清朗网络空间。终端安全研究所主要负责泛智能终端和设备的安全技术研究，包括物联网和 智慧家庭等终端设备，以及终端安全检测、身份认证技术、密码技术的应用研究、工业互联网安 全研究等。 关于绿盟科技 u th 5 b 北京神州绿盟信息安全科技股份有限公司（以下简称绿盟科技公司），成立于 2000 年 4 月， 总部位于北京。公司于 2014 年 1 月 29 日在深圳证券交易所创业板上市，证券代码：300369。 绿盟科技在国内设有 40 多个分支机构，为政府、运营商、金融、能源、互联网以及教育、医疗 等行业用户，提供全线网络安全产品、全方位安全解决方案和体系化安全运营服务。公司在美国 硅谷、日本东京、英国伦敦、新加坡设立海外子公司，深入开展全球业务，打造全球网络安全行 业的中国品牌。 i g 版权声明 为避免合作伙伴及客户数据泄露，所有数据在进行分析前都已经过匿名化处理，不会在中 间环节出现泄露，任何与客户有关的具体信息，均不会出现在本报告中。 m o .c 2019 物联网安全年报 目录 执行摘要 ···································································································································································2 1. 2019 年重大物联网安全事件回顾 ······················································································································5 1.1 委内瑞拉和纽约的大规模停电事件 ·········································································································································· 6 1.1.1 事件回顾 ······································································································································································································ 6 1.1.2 小结 ·············································································································································································································· 8 m o .c 1.2 受远程代码执行问题影响的 D-Link 路由器将不会被修复 ···································································································· 8 1.2.1 事件回顾 ······································································································································································································ 8 1.2.2 原理简述 ······································································································································································································ 8 1.2.3 小结 ·············································································································································································································· 9 1.3 物联网僵尸网络再次发起大规模 DDoS 攻击 ·························································································································· 9 5 b 1.3.2 事件回顾 ······································································································································································································ 9 1.3.1 原理简述 ····································································································································································································10 1.3.3 小结 ············································································································································································································10 u th 1.4 泄露代码暴露波音 787 系统中存在多个漏洞 ······················································································································· 11 1.4.1 事件回顾 ····································································································································································································11 i g 1.4.2 原理简述 ····································································································································································································11 1.4.3 小结 ············································································································································································································12 1.5 LockerGoga 的勒索软件疑屡次攻击工厂······························································································································ 13 1.5.1 事件回顾 ····································································································································································································13 1.5.2 原理简述 ····································································································································································································13 1.5.3 小结 ··························