用安全硬件保護(hù)物聯(lián)網(wǎng)

　　物聯(lián)網(wǎng)（物聯(lián)網(wǎng)）需要得到保護(hù)，以防止各種形式的濫用。這些不僅包括熟悉的威脅，如金融欺詐和知識(shí)產(chǎn)權(quán)盜竊，而且破壞有形資產(chǎn)。許多的數(shù)十億連接設(shè)備將加入物聯(lián)網(wǎng)在未來(lái)幾年會(huì)像交通信號(hào)或街道照明系統(tǒng)相關(guān)的工業(yè)控制，像發(fā)電的重要過(guò)程的安全機(jī)制、智能電網(wǎng)管理、家庭能源和安全，或連接車。攻擊者可以嘗試禁用或接管這樣的設(shè)備，可能要引起廣泛的破壞和不便，或造成尷尬的攻擊特定的個(gè)人或組織，聲譽(yù)損失甚至人身傷害。這樣的攻擊可以簡(jiǎn)單地用于娛樂(lè)，個(gè)人原因，商業(yè)利益，或出于政治目的和/或恐怖主義。

　　Security threats to IoT devices

　　IoT devices are designed to operate autonomously. Many are left unattended for long periods， and sometimes for their entire operational lifetime. Network connectivity leaves the devices vulnerable to remote attacks that can be launched quickly from almost any geographical location without having to overcome physical barriers such as a fence， a locked enclosure or a security guard. An attack can be directed towards the device itself， or to use it as a means to gain access to other assets connected to the same network， such as data storage containing account-holder information or intellectual property.

　　On the other hand， IoT endpoints are often required to be simple， low-cost， low-power devices， designed to accomplish their intended task using minimal resources. As such， the processing power and energy needed to implement sophisticated security is not available. Unlike the case with a machine such as a desktop computer， no human is routinely present to enter credentials such as a username and password as authentication allowing the device to start up and establish connections. However， the device must be able to resist various types of attacks， and to authenticate itself and present its credentials autonomously to other devices on the network.