{"id":3226,"date":"2024-03-25T10:50:25","date_gmt":"2024-03-25T03:50:25","guid":{"rendered":"https:\/\/dangngocduy.vn\/?p=3226"},"modified":"2024-03-25T10:50:25","modified_gmt":"2024-03-25T03:50:25","slug":"the-strategy-that-brought-a-group-of-vietnamese-engineers-to-the-world-security-championship","status":"publish","type":"post","link":"https:\/\/dangngocduy.vn\/vi\/the-strategy-that-brought-a-group-of-vietnamese-engineers-to-the-world-security-championship\/","title":{"rendered":"Chi\u1ebfn l\u01b0\u1ee3c \u0111\u01b0a nh\u00f3m k\u1ef9 s\u01b0 Vi\u1ec7t Nam v\u00f4 \u0111\u1ecbch an ninh th\u1ebf gi\u1edbi"},"content":{"rendered":"
\n

T\u1ea1i cu\u1ed9c thi b\u1ea3o m\u1eadt Pwn2Own Toronto 2023 di\u1ec5n ra cu\u1ed1i th\u00e1ng 10, \u0111\u1ed9i k\u1ef9 thu\u1eadt \u201cTeam Viettel\u201d \u0111\u00e3 gi\u00e0nh ch\u1ee9c v\u00f4 \u0111\u1ecbch khi ho\u00e0n th\u00e0nh c\u1ea3 7 h\u1ea1ng m\u1ee5c \u0111\u0103ng k\u00fd, v\u1edbi s\u1ed1 \u0111i\u1ec3m 30, cao h\u01a1n \u0111\u1ed9i nh\u00ec b\u1ea3ng 12,75 \u0111i\u1ec3m. .<\/p>\n

\u0110\u00e2y l\u00e0 v\u1ecb tr\u00ed cao nh\u1ea5t m\u00e0 \u0111\u1ed9i tuy\u1ec3n Vi\u1ec7t Nam \u0111\u1ea1t \u0111\u01b0\u1ee3c sau nhi\u1ec1u n\u0103m tham gia c\u00e1c gi\u1ea3i \u0111\u1ea5u t\u1ea7m c\u1ee1 th\u1ebf gi\u1edbi. \u0110\u1ec3 \u0111\u1ea1t \u0111i\u1ec3m cao \u1edf t\u1eebng h\u1ea1ng m\u1ee5c, nh\u00f3m cho bi\u1ebft h\u1ecd \u0111\u00e3 \u0111\u01b0a ra c\u00e1c chi\u1ebfn l\u01b0\u1ee3c c\u1ee5 th\u1ec3, thay v\u00ec khai th\u00e1c b\u1ea5t k\u1ef3 l\u1ed7 h\u1ed5ng n\u00e0o \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y nh\u01b0 tr\u01b0\u1edbc \u0111\u00e2y. <\/p>\n

<\/p>\n
\"A<\/source><\/picture><\/div>
\n

\u0110\u1ed9i k\u1ef9 s\u01b0 Vi\u1ec7t Nam thi \u0111\u1ea5u t\u1eeb xa t\u1ea1i Pwn2Own Toronto 2023. \u1ea2nh: Uy\u00ean Nguy\u1ec5n<\/em><\/p>\n<\/figcaption><\/figure>\n

Cu\u1ed9c thi Pwn2Own l\u1ea7n n\u00e0y c\u00f3 ch\u1ee7 \u0111\u1ec1 t\u1ea5n c\u00f4ng m\u1ed9t s\u1ed1 thi\u1ebft b\u1ecb th\u00f4ng minh nh\u01b0 \u0111i\u1ec7n tho\u1ea1i, router, h\u1ec7 th\u1ed1ng thi\u1ebft b\u1ecb th\u00f4ng minh trong v\u0103n ph\u00f2ng do c\u00e1c c\u00f4ng ty l\u1edbn cung c\u1ea5p. C\u00e1c \u0111\u1ed9i s\u1ebd nh\u1eadn \u0111\u01b0\u1ee3c nhi\u1ec7m v\u1ee5 \u0111\u1ec3 bi\u1ebft h\u1ecd s\u1ebd t\u1ea5n c\u00f4ng thi\u1ebft b\u1ecb n\u00e0o v\u00e0 c\u00f3 kho\u1ea3ng ba th\u00e1ng \u0111\u1ec3 t\u00ecm ra l\u1ed7 h\u1ed5ng, vi\u1ebft m\u00e3 khai th\u00e1c tr\u01b0\u1edbc khi tr\u00ecnh di\u1ec5n cu\u1ed9c t\u1ea5n c\u00f4ng trong 30 ph\u00fat. C\u00e1c thi\u1ebft b\u1ecb m\u1ee5c ti\u00eau \u0111\u1ec1u \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m m\u1edbi nh\u1ea5t.<\/p>\n

Theo tr\u01b0\u1edfng nh\u00f3m Ng\u00f4 Anh Huy, th\u00e1ch th\u1ee9c c\u1ee7a cu\u1ed9c thi l\u00e0 c\u00e1c \u0111\u1ed9i \u0111i tr\u01b0\u1edbc c\u00f3 th\u1ec3 khai th\u00e1c \u0111\u01b0\u1ee3c l\u1ed7 h\u1ed5ng gi\u1ed1ng m\u00ecnh. Khi \u0111\u00f3, n\u1ebfu l\u00e0m b\u00e0i thi mu\u1ed9n h\u01a1n, d\u00f9 c\u00f3 khai th\u00e1c th\u00e0nh c\u00f4ng th\u00ec b\u1ea1n c\u0169ng kh\u00f4ng th\u1ec3 \u0111\u1ea1t \u0111i\u1ec3m tuy\u1ec7t \u0111\u1ed1i. Ngo\u00e0i ra, th\u00e1ch th\u1ee9c c\u00f2n \u0111\u1ebfn t\u1eeb ch\u00ednh c\u00e1c nh\u00e0 s\u1ea3n xu\u1ea5t thi\u1ebft b\u1ecb.<\/p>\n

\u201cC\u00e1c thi\u1ebft b\u1ecb \u0111\u1ec1u \u1edf m\u1ee9c \u0111\u1ed9 ho\u00e0n thi\u1ec7n cao. C\u00e1c nh\u00e0 s\u1ea3n xu\u1ea5t \u0111\u1ec1u l\u00e0 nh\u1eefng c\u00f4ng ty h\u00e0ng \u0111\u1ea7u th\u1ebf gi\u1edbi v\u00e0 c\u0169ng lu\u00f4n mong mu\u1ed1n thi\u1ebft b\u1ecb c\u1ee7a m\u00ecnh kh\u00f4ng th\u1ec3 b\u1ecb hack trong cu\u1ed9c c\u1ea1nh tranh. V\u00ec v\u1eady, h\u1ecd c\u0169ng s\u1ebd v\u00e1 h\u1ea7u h\u1ebft ch\u00fang.\u201d l\u1ed7 ngay tr\u01b0\u1edbc ng\u00e0y thi \u0111\u1ea5u\u201d, Huy n\u00f3i. N\u0103m ngo\u00e1i, nh\u00f3m c\u0169ng b\u1ecb m\u1ea5t \u0111i\u1ec3m v\u00ec ch\u1ecdn \u0111\u00fang l\u1ed7 h\u1ed5ng m\u00e0 nh\u00e0 s\u1ea3n xu\u1ea5t \u0111\u00e3 bi\u1ebft.<\/p>\n

Chi\u1ebfn l\u01b0\u1ee3c \u0111\u01b0\u1ee3c \u0111\u1ec1 xu\u1ea5t l\u00e0 t\u00ecm nhi\u1ec1u l\u1ed7i, \u01b0u ti\u00ean c\u00e1c l\u1ed7i \u00edt ng\u01b0\u1eddi ph\u00e1t hi\u1ec7n v\u00e0 khai th\u00e1c. <\/strong>V\u1edbi g\u1ea7n 3 th\u00e1ng \u201c\u0103n ng\u1ee7\u201d c\u00f9ng thi\u1ebft b\u1ecb, \u0111\u1ed9i ng\u0169 k\u1ef9 s\u01b0 Vi\u1ec7t Nam cho bi\u1ebft h\u1ecd ph\u1ea3i d\u1ef1 \u0111o\u00e1n ph\u01b0\u01a1ng ph\u00e1p n\u00e0o d\u1ec5, ph\u01b0\u01a1ng ph\u00e1p n\u00e0o s\u1ebd khai th\u00e1c, ph\u01b0\u01a1ng ph\u00e1p n\u00e0o kh\u00f3 m\u00e0 \u00edt ng\u01b0\u1eddi bi\u1ebft. Khi \u0111\u00f3 h\u1ecd s\u1ebd ch\u1ecdn h\u01b0\u1edbng \u0111i kh\u00f3 kh\u0103n h\u01a1n.<\/p>\n

Ch\u1eb3ng h\u1ea1n, \u1edf h\u1ea1ng m\u1ee5c loa th\u00f4ng minh, th\u00e0nh vi\u00ean \u0110\u1ed7 M\u1ea1nh D\u0169ng cho bi\u1ebft anh ph\u1ea3i m\u1ea5t m\u1ed9t tu\u1ea7n \u0111\u1ec3 t\u00ecm ra l\u1ed7 h\u1ed5ng \u0111\u1ee7 kh\u00f3 tr\u00ean m\u1eabu loa Sonos Era 100 v\u00e0 ph\u1ea3i m\u1ea5t hai th\u00e1ng \u0111\u1ec3 vi\u1ebft m\u00e3 khai th\u00e1c. \u201cT\u00f4i t\u1ef1 tin s\u1ebd th\u00e0nh c\u00f4ng v\u00ec \u0111\u00e2y l\u00e0 l\u1ed7 h\u1ed5ng r\u1ea5t kh\u00f3 t\u00ecm\u201d, th\u00e0nh vi\u00ean tr\u1ebb nh\u1ea5t c\u1ee7a \u0111\u1ed9i sinh n\u0103m 2003 cho bi\u1ebft.<\/p>\n

Chi\u1ebfn l\u01b0\u1ee3c n\u00e0y c\u1ee7a \u0111\u1ed9i thi \u0111\u1ea5u \u0111\u00e3 ph\u00e1t huy hi\u1ec7u qu\u1ea3. T\u1ea1i cu\u1ed9c thi SOHO Smashup, khi c\u00e1c \u0111\u1ed9i ph\u1ea3i t\u1ea5n c\u00f4ng router r\u1ed3i t\u1ea5n c\u00f4ng c\u00e1c thi\u1ebft b\u1ecb kh\u00e1c, Huy cho bi\u1ebft tr\u01b0\u1edbc \u0111\u00e2y c\u00f3 m\u1ed9t \u0111\u1ed9i c\u00f3 c\u00e1ch l\u00e0m r\u1ea5t gi\u1ed1ng \u0111\u1ed9i c\u1ee7a anh.<\/p>\n

V\u00ec \u0111\u00e2y c\u0169ng l\u00e0 b\u00e0i thi cu\u1ed1i c\u00f9ng v\u00e0 c\u00f3 nhi\u1ec1u \u0111i\u1ec3m nh\u1ea5t n\u00ean \u0111\u1ed9i cho bi\u1ebft \u0111\u00e3 chu\u1ea9n b\u1ecb s\u1eb5n ba h\u1ed1. \u0110\u00e2y \u0111\u1ec1u l\u00e0 nh\u1eefng l\u1ed7 h\u1ed5ng m\u00e0 \u00edt ng\u01b0\u1eddi ph\u00e1t hi\u1ec7n ra v\u00e0 \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 l\u00e0 kh\u00f3 khai th\u00e1c nh\u1ea5t. Nh\u00f3m \u0111\u00e3 th\u00e0nh c\u00f4ng d\u00f9 su\u00fdt th\u1ea5t b\u1ea1i sau hai m\u00e0n tr\u00ecnh di\u1ec5n th\u1ea5t b\u1ea1i.<\/p>\n

K\u1ebft qu\u1ea3 n\u00e0y c\u0169ng gi\u00fap Team Viettel \u0111\u1ea1t \u0111i\u1ec3m t\u1ed1i \u0111a \u1edf c\u1ea3 7 h\u1ea1ng m\u1ee5c \u0111\u0103ng k\u00fd. C\u00e1c s\u1ea3n ph\u1ea9m b\u1ecb ph\u00e1t hi\u1ec7n l\u1ed7i bao g\u1ed3m Xiaomi 13 Pro, h\u1ec7 th\u1ed1ng l\u01b0u tr\u1eef QNAP, m\u00e1y in Canon, HP, Lexmark, loa th\u00f4ng minh Sonos v\u00e0 SOHO Smashup. Nh\u00f3m nh\u1eadn \u0111\u01b0\u1ee3c s\u1ed1 ti\u1ec1n th\u01b0\u1edfng 180 ngh\u00ecn USD. <\/p>\n

<\/p>\n
\"Vietnam's<\/source><\/picture><\/div>
\n

\u0110\u1ed9i tuy\u1ec3n Vi\u1ec7t Nam l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ee9ng \u0111\u1ea7u t\u1ea1i Pwn2Own. H\u00ecnh ch\u1ee5p: ZDI<\/em><\/p>\n<\/figcaption><\/figure>\n

Theo H\u00e0 Anh Ho\u00e0ng, k\u1ef9 s\u01b0 an to\u00e0n th\u00f4ng tin sinh n\u0103m 1997, do ph\u1ea3i thi tr\u1ef1c tuy\u1ebfn n\u00ean nh\u00f3m c\u0169ng c\u00f3 th\u1ec3 g\u1eb7p b\u1ea5t l\u1ee3i so v\u1edbi c\u00e1c nh\u00f3m thi tr\u1ef1c ti\u1ebfp \u1edf ch\u1ed7 ch\u1ec9 c\u00f3 th\u1ec3 ki\u1ec3m tra thi\u1ebft b\u1ecb t\u1eeb xa qua camera. \u201cQu\u00e1 tr\u00ecnh thi kh\u00f4ng th\u1ec3 ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c c\u00e1c v\u1ea5n \u0111\u1ec1 k\u1ef9 thu\u1eadt ph\u00e1t sinh n\u00ean ph\u1ea3i t\u1eadp trung ho\u00e0n to\u00e0n v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o th\u00e0nh c\u00f4ng\u201d, \u00f4ng Ho\u00e0ng n\u00f3i.<\/p>\n

Nh\u00f3m d\u1ef1 ki\u1ebfn s\u1ebd ch\u1ecdn ra nh\u1eefng m\u1ee5c ti\u00eau \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 l\u00e0 kh\u00f3 h\u01a1n trong c\u00e1c cu\u1ed9c thi sau, ch\u1eb3ng h\u1ea1n nh\u01b0 Apple iPhone v\u00e0 Google Pixel.<\/p>\n

Pwn2Own l\u00e0 cu\u1ed9c thi t\u1ea5n c\u00f4ng m\u1ea1ng l\u1edbn nh\u1ea5t v\u00e0 uy t\u00edn nh\u1ea5t th\u1ebf gi\u1edbi do Zero Day Initiative t\u1ed5 ch\u1ee9c th\u01b0\u1eddng ni\u00ean k\u1ec3 t\u1eeb n\u0103m 2007 v\u00e0 \u0111\u01b0\u1ee3c coi l\u00e0 World Cup c\u1ee7a th\u1ebf gi\u1edbi b\u1ea3o m\u1eadt. S\u1ef1 ki\u1ec7n n\u0103m nay c\u00f3 8 h\u1ea1ng m\u1ee5c, bao g\u1ed3m \u0110i\u1ec7n tho\u1ea1i di \u0111\u1ed9ng, B\u1ed9 \u0111i\u1ec1u khi\u1ec3n nh\u00e0 th\u00f4ng minh, Loa th\u00f4ng minh, M\u00e1y in, Thi\u1ebft b\u1ecb gi\u00e1m s\u00e1t, Thi\u1ebft b\u1ecb l\u01b0u tr\u1eef m\u1ea1ng, Thi\u1ebft b\u1ecb Google, Thi\u1ebft b\u1ecb v\u0103n ph\u00f2ng nh\u1ecf, v\u1edbi t\u1ed5ng gi\u1ea3i th\u01b0\u1edfng h\u01a1n m\u1ed9t tri\u1ec7u USD. Sau cu\u1ed9c thi, c\u00e1c thi\u1ebft b\u1ecb b\u1ecb ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng s\u1ebd ph\u1ea3i ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 trong v\u00f2ng 90 ng\u00e0y.<\/p>\n

L\u01b0u Qu\u00fd<\/strong><\/p>\n<\/article>","protected":false},"excerpt":{"rendered":"

Competing with experts from many countries around the world, the Vietnamese engineering team must find the most difficult and numerous vulnerabilities possible at Pwn2Own.<\/p>","protected":false},"author":1,"featured_media":3227,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[42,41],"tags":[44,43],"class_list":["post-3226","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-tech","tag-security","tag-tech"],"_links":{"self":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts\/3226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/comments?post=3226"}],"version-history":[{"count":1,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts\/3226\/revisions"}],"predecessor-version":[{"id":3230,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts\/3226\/revisions\/3230"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/media\/3227"}],"wp:attachment":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/media?parent=3226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/categories?post=3226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/tags?post=3226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}