m o h t i g b u c . 5 2017 物联网安全研究报告 h t i g b u 联合出品 m o c . 5 薄明霞  唐洪玉  张  星  张克雷  田金英  刘文懋  桑鸿庆  编著 m o h t i g b u c . 5 前 言 在“互联网 +”时代，物联网发展迅猛，正加速渗透到生产、消费和社会管理等各领域， m o 物联网设备规模呈现爆发性增长趋势，万物互联时代正在到来。 物联网是继计算机、互联网之后的又一新的信息科学技术，目前，世界主要国家已将物 c . 5 联网作为抢占新一轮经济科技发展制高点的重大战略，我国也将物联网作为战略性新兴产业， 在 2016 年国家“十三五”规划指出：要积极推进物联网发展，推进物联网感知设施规划布局， b u 发展物联网开环应用，加快物联网基础设施建设和应用推广已经上升到了国家战略层面。 然而在物联网迅猛发展的同时，物联网安全成了产业痛点。为进一步加强物联网安全建 设，向社会提供有关物联网安全状况的权威数据，中国电信安全帮携手北京神州绿盟信息安 h t i g 全科技股份有限公司（以下简称“绿盟科技”）联合发布《2017 物联网安全研究报告》。 报告主要包括 4 部分。 第一部分采用分层架构思想，由底而上的分析物联网安全风险，提出各层安全需求，并 对物联网典型行业应用的安全风险进行分析。 第二部分针对物联网安全状况进行分析，包括物联网资产暴露情况分析、2017 十大物联 网安全事件分析、2017 十大物联网恶意软件分析，揭示物联网安全防护的必要性和紧迫性。 第三部分针对物联网安全问题，提升物联网安全总体防护水平，给出物联网安全体系架 构及解决方案。 第四部分从物联网安全产业发展趋势、物联网安全新技术探索两个方面对物联网安全发 展进行展望，同时给出了物联网安全建设的发展建议。 本报告在编写过程中参考了大量资料，吸取了多方的宝贵意见和建议，在此深表感谢。 报告的编写和发布得到相关单位的大力支持，我们在此表示衷心的感谢！欢迎广大读者批评、 指正。 1 m o h t i g b u c . 5 目 录 第一部分 m o 物联网安全风险分析 第一章 物联网安全概述·················································································································3 1.1 物联网概述 ························································································································3 1.2 物联网架构简介 ················································································································4 1.3 物联网安全概述 ················································································································5 第二章 物联网安全风险分析·········································································································6 2.1 感知层安全风险及需求分析 ····························································································6 2.2 网络层安全风险及需求分析 ····························································································7 2.3 平台层安全风险及需求分析 ····························································································9 2.4 应用层安全风险及需求分析 ··························································································12 2.5 物联网典型行业应用风险点简析 ··················································································13 h t i g c . 5 b u 2.5.1 车联网 ···················································································································14 2.5.2 智能家居 ···············································································································15 2.5.3 智能监控 ···············································································································16 2.5.3 智能物流 ···············································································································17 2.5.5 智能穿戴 ···············································································································18 2.5.6 智慧医疗 ···············································································································19 2.5.7 智慧能源 ···············································································································20 2.5.7 智慧路灯 ···············································································································21 第二部分 物联网安全现状分析 第三章 物联网资产暴露情况分析·······························································································25 3.1 概述 ··································································································································25 3.2 物联网设备暴露情况分析 ······························································································26 1 2017 物联网安全研究报告 3.3 3.2.1 物联网设备暴露情况总览 ···················································································· 26 3.2.2 路由器暴露情况分析 ···························································································· 27 3.2.3 视频监控设备暴露情况分析 ················································································ 31 3.2.4 打印机暴露情况分析 ···························································································· 34 3.2.5 其他设备暴露情况 ································································································ 38 3.2.6 小结 ······················································································································· 40 物联网操作系统的暴露情况分析 ··················································································· 40 3.3.1 整体情况 ·························································································