保障人力资源供应链中的通信安全.pdf

1、 2025 BlackBerry.All Rights Reserved.1 2025 BlackBerry.All Rights Reserved.Christine GadsbyVP and CISO,BlackBerry Secure CommunicationsSecuring Communications in the Human Supply Chain 2025 BlackBerry.All Rights Reserved.The exposed dataThe attack value of the data in the Human Supply ChainTools and

2、 Exploits Used to Weaponize How Governments Can Protect ThemselvesAgenda2 2025 BlackBerry.All Rights Reserved.3 2025 BlackBerry.All Rights Reserved.3November 5,2024January 4,2025Salt Typhoon Must Assume all Networks Globally Compromised 2025 BlackBerry.All Rights Reserved.4 2025 BlackBerry.All Right

3、s Reserved.4Fake Cell Towers Easier Than Ever to Deploy5 2025 BlackBerry.All Rights Reserved.5The Result Can be a Matter of Life and Death 2025 BlackBerry.All Rights Reserved.6 6 2025 BlackBerry.All Rights Reserved.Data Being Gathered 2025 BlackBerry.All Rights Reserved.Click to edit Master text sty

4、lesSecond levelThird levelFourth levelFifth levelHong Kong data roaming sim 2025 BlackBerry.All Rights Reserved.8 2025 BlackBerry.All Rights Reserved.8Where are the Interception Risks?Operating systemWirelessinterfaceBordergatewaysTransmissionnetworkOperating systemCountry borderAttack During Transm

5、issionSpecific Device AttacksSpecific Device Attacks 2025 BlackBerry.All Rights Reserved.9 9 2025 BlackBerry.All Rights Reserved.Tools and Exploits Used to Weaponize 2025 BlackBerry.All Rights Reserved.10 2025 BlackBerry.All Rights Reserved.10Transmission NetworkTransmissionNetworkSS7 SS7 network in

6、terconnectsnetwork interconnectsCellphone tapping as a serviceCellphone tapping as a serviceCarrier metadata archives compromisesCarrier metadata archives compromisesUntrusted network equipmentUntrusted network equipmentInjection of spyware into trusted networksInjection of spywa