{"id":4788,"date":"2025-06-03T09:32:34","date_gmt":"2025-06-03T09:32:34","guid":{"rendered":"http:\/\/br.object-c.cn\/?p=4788"},"modified":"2025-06-24T18:24:47","modified_gmt":"2025-06-24T10:24:47","slug":"atualizacoes-seguras-de-firmware-para-dispositivos-lpwan","status":"publish","type":"post","link":"https:\/\/www.brilhoelectroparts.com\/pt\/secure-firmware-updates-for-lpwan-devices\/","title":{"rendered":"Atualiza\u00e7\u00f5es seguras de firmware para dispositivos LPWAN"},"content":{"rendered":"<h2 class=\"wp-block-heading\"><strong>Introdu\u00e7\u00e3o<\/strong><\/h2><p>O mercado da seguran\u00e7a da IoT atingir\u00e1&nbsp;<strong>1,44 bili\u00f5es de euros at\u00e9 2028<\/strong>&nbsp;(Grand View Research), mas 62% dos dispositivos instalados carecem de mecanismos de atualiza\u00e7\u00e3o adequados (Relat\u00f3rio de amea\u00e7as da Palo Alto Networks de 2024). Os principais desafios incluem:<\/p><ul class=\"wp-block-list\"><li><strong>Tempos de atualiza\u00e7\u00e3o mais longos no 50%<\/strong>\u00a0devido \u00e0 sobrecarga da encripta\u00e7\u00e3o<\/li>\n\n<li><strong>Riscos de bloqueio durante falhas de energia<\/strong><\/li>\n\n<li><strong>Inje\u00e7\u00e3o de carga maliciosa<\/strong>\u00a0atrav\u00e9s de canais secund\u00e1rios de RF<\/li><\/ul><p>O laborat\u00f3rio de seguran\u00e7a da Briltech auditou mais de 40 implementa\u00e7\u00f5es de OTA para desenvolver esta estrutura refor\u00e7ada.<\/p><hr class=\"wp-block-separator has-alpha-channel-opacity\"\/><h2 class=\"wp-block-heading\"><strong>Sec\u00e7\u00e3o 1: Criptografia para dispositivos com recursos limitados<\/strong><\/h2><h3 class=\"wp-block-heading\"><strong>1.1 Compara\u00e7\u00e3o do desempenho dos algoritmos<\/strong><\/h3><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>M\u00e9todo<\/th><th>Tamanho do c\u00f3digo (KB)<\/th><th>RAM (KB)<\/th><th>Hora da atualiza\u00e7\u00e3o*<\/th><\/tr><\/thead><tbody><tr><td>AES-128<\/td><td>3.2<\/td><td>0.5<\/td><td>1,0x<\/td><\/tr><tr><td>ChaCha20<\/td><td>4.1<\/td><td>0.8<\/td><td>1,2x<\/td><\/tr><tr><td>ECC P-256<\/td><td>8.7<\/td><td>2.4<\/td><td>3,5x<\/td><\/tr><\/tbody><\/table><\/figure><p>*Para uma imagem de 100 KB a 50 kbps<\/p><p><strong>Estudo de caso:<\/strong>&nbsp;A nossa abordagem de criptografia dupla nos contadores inteligentes:<\/p><ul class=\"wp-block-list\"><li><strong>AES-128 para encripta\u00e7\u00e3o em massa<\/strong>\u00a0(r\u00e1pido)<\/li>\n\n<li><strong>ECC-256 para assinaturas<\/strong>\u00a0(negrito)<\/li><\/ul><h3 class=\"wp-block-heading\"><strong>1.2 Implementa\u00e7\u00e3o do Secure Boot<\/strong><\/h3><pre class=\"wp-block-preformatted\">void verify_update() {  \n  if (sha3_256(firmware) != stored_hash) abort();  \n  if (ecdsa_verify(sig, pubkey) == 0) abort();  \n  flash_write(backup_sector); <em>\/\/ Interruptor at\u00f3mico  <\/em>\n}  <\/pre><hr class=\"wp-block-separator has-alpha-channel-opacity\"\/><h2 class=\"wp-block-heading\"><strong>Sec\u00e7\u00e3o 2: Atualiza\u00e7\u00e3o da Engenharia de Fiabilidade<\/strong><\/h2><h3 class=\"wp-block-heading\"><strong>2.1 Prote\u00e7\u00e3o contra falhas de energia<\/strong><\/h3><figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Estrat\u00e9gia<\/th><th>Despesas gerais<\/th><th>Capacidade de recupera\u00e7\u00e3o<\/th><\/tr><\/thead><tbody><tr><td>Banco Duplo<\/td><td>+100% Flash<\/td><td>Revertimento total<\/td><\/tr><tr><td>Atualiza\u00e7\u00f5es da Delta<\/td><td>30% mais pequeno<\/td><td>Recupera\u00e7\u00e3o parcial<\/td><\/tr><tr><td>Verifica\u00e7\u00f5es CRC-32<\/td><td>CPU 2%<\/td><td>Apenas dete\u00e7\u00e3o<\/td><\/tr><\/tbody><\/table><\/figure><p><strong>Recomenda\u00e7\u00e3o da Briltech:<\/strong><\/p><ul class=\"wp-block-list\"><li><strong>M\u00ednimo de 256 KB de mem\u00f3ria flash<\/strong>\u00a0para atualiza\u00e7\u00f5es em dois bancos<\/li>\n\n<li><strong>Bateria de reserva com supercondensador<\/strong>\u00a0(mant\u00e9m-se durante 500 ms em caso de queda de tens\u00e3o)<\/li><\/ul><h3 class=\"wp-block-heading\"><strong>2.2 Otimiza\u00e7\u00e3o da largura de banda<\/strong><\/h3><ul class=\"wp-block-list\"><li><strong>Aplica\u00e7\u00e3o de patches bin\u00e1rios com o BSDiff<\/strong>\u00a0(85%: pequenas atualiza\u00e7\u00f5es)<\/li>\n\n<li><strong>Cabe\u00e7alhos compactados<\/strong>\u00a0(Codifica\u00e7\u00e3o CBOR)<\/li>\n\n<li><strong>Atualiza\u00e7\u00f5es seletivas de m\u00f3dulos<\/strong><\/li><\/ul><hr class=\"wp-block-separator has-alpha-channel-opacity\"\/><h2 class=\"wp-block-heading\"><strong>Sec\u00e7\u00e3o 3: Mitiga\u00e7\u00e3o da superf\u00edcie de ataque<\/strong><\/h2><h3 class=\"wp-block-heading\"><strong>3.1 Lista de verifica\u00e7\u00e3o de vulnerabilidades comuns<\/strong><\/h3><ol start=\"1\" class=\"wp-block-list\"><li><strong>Ataques de redu\u00e7\u00e3o de n\u00edvel<\/strong>\u00a0(guardar a vers\u00e3o no elemento seguro)<\/li>\n\n<li><strong>Ataques de repeti\u00e7\u00e3o<\/strong>\u00a0(contadores monot\u00f3nicos + limite de tempo de 24 horas)<\/li>\n\n<li><strong>Ataques de temporiza\u00e7\u00e3o<\/strong>\u00a0(opera\u00e7\u00f5es criptogr\u00e1ficas de tempo constante)<\/li><\/ol><h3 class=\"wp-block-heading\"><strong>3.2 Conformidade regulamentar<\/strong><\/h3><ul class=\"wp-block-list\"><li><strong>ETSI TS 103 645<\/strong>\u00a0(Seguran\u00e7a b\u00e1sica da IoT)<\/li>\n\n<li><strong>NIST IR 8259A<\/strong>\u00a0(funcionalidades essenciais de ciberseguran\u00e7a)<\/li>\n\n<li><strong>Artigo 32.\u00ba do RGPD<\/strong>\u00a0(requisitos de integridade dos dados)<\/li><\/ul>","protected":false},"excerpt":{"rendered":"<p>Introduction The IoT security market will reach&nbsp;$84 billion by 2028&nbsp;(Grand View Research), yet 62% of deployed devices lack proper update<\/p>","protected":false},"author":1,"featured_media":4793,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[211,213,212],"class_list":["post-4788","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-success-case","tag-devices","tag-firmware","tag-secure"],"_links":{"self":[{"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/posts\/4788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/comments?post=4788"}],"version-history":[{"count":0,"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/posts\/4788\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/media\/4793"}],"wp:attachment":[{"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/media?parent=4788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/categories?post=4788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.brilhoelectroparts.com\/pt\/wp-json\/wp\/v2\/tags?post=4788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}