{"id":138938,"date":"2025-07-14T11:11:58","date_gmt":"2025-07-14T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu"},"modified":"2025-07-14T11:11:58","modified_gmt":"2025-07-14T09:11:59","slug":"gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","title":{"rendered":"GPUHammer \u2014 varianta \u00fatoku Rowhammer na pam\u011b\u0165 GPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdzkumn\u00edci z Torontsk\u00e9 univerzity p\u0159edstavili prvn\u00ed \u00fatok t\u0159\u00eddy Rowhammer, kter\u00fd lze pou\u017e\u00edt k deformaci obsahu grafick\u00e9 pam\u011bti. Mo\u017enost proveden\u00ed \u00fatoku, kter\u00fd zp\u016fsobuje substituci a\u017e 8 bit\u016f dat, byla demonstrov\u00e1na na diskr\u00e9tn\u00ed grafick\u00e9 kart\u011b NVIDIA A6000 s pam\u011bt\u00ed GDDR6. Jako praktick\u00fd p\u0159\u00edklad bylo uk\u00e1z\u00e1no, jak lze vyu\u017e\u00edt takov\u00e9 deformace k zasahov\u00e1n\u00ed do prov\u00e1d\u011bn\u00ed model\u016f strojov\u00e9ho u\u010den\u00ed a k v\u00fdznamn\u00e9mu (z 80 % na 0,1 %) sn\u00ed\u017een\u00ed p\u0159esnosti jejich v\u00fdsledk\u016f p\u0159i zm\u011bn\u011b hodnoty pouze jednoho bitu.

\"GPUHammer<\/center> <\/p>\n

Dosud bylo obt\u00ed\u017en\u00e9 vytv\u00e1\u0159et \u00fatoky t\u0159\u00eddy Rowhammer pro grafickou pam\u011b\u0165 kv\u016fli komplikac\u00edm p\u0159i ur\u010dov\u00e1n\u00ed fyzick\u00e9ho uspo\u0159\u00e1d\u00e1n\u00ed pam\u011bti v \u010dipech GDDR, velk\u00fdm zpo\u017ed\u011bn\u00edm p\u0159i p\u0159\u00edstupu k pam\u011bti (4kr\u00e1t pomalej\u0161\u00edm) a vy\u0161\u0161\u00ed frekvenc\u00ed aktualizace pam\u011bti. Nav\u00edc prov\u00e1d\u011bn\u00ed v\u00fdzkum\u016f zt\u011b\u017eovalo zapojen\u00ed v \u010dipech GDDR propriet\u00e1rn\u00edch mechanism\u016f ochrany proti manipulac\u00edm, kter\u00e9 vedly k p\u0159ed\u010dasn\u00e9 ztr\u00e1t\u011b n\u00e1boje, pro jejich\u017e anal\u00fdzu bylo nutn\u00e9 vytvo\u0159it speci\u00e1ln\u00ed hardwarov\u00e9 testovac\u00ed stanice na b\u00e1zi FPGA. <\/p>\n

Pro studium grafick\u00e9 pam\u011bti vyvinuli badatel\u00e9 novou techniku reverzn\u00edho in\u017een\u00fdrstv\u00ed GDDR DRAM, p\u0159i\u010dem\u017e p\u0159i samotn\u00e9m \u00fatoku byly vyu\u017eity optimalizace p\u0159\u00edstupu k pam\u011bti pro parallel computing, kter\u00e9 byly pou\u017eity jako zesilova\u010de intenzity p\u0159\u00edstupu k jednotliv\u00fdm bu\u0148k\u00e1m. Pro proveden\u00ed \u00fatoku na GPU NVIDIA byl pou\u017eit n\u00edzko\u00farov\u0148ov\u00fd k\u00f3d CUDA. <\/p>\n

V u\u017eivatelsk\u00e9m k\u00f3du CUDA nen\u00ed prov\u00e1d\u011bn p\u0159\u00edstup k fyzick\u00fdm adres\u00e1m pam\u011bti, ale v ovlada\u010di NVIDIA do\u0161lo k mapov\u00e1n\u00ed virtu\u00e1ln\u00ed pam\u011bti na stejnou fyzickou pam\u011b\u0165, \u010deho\u017e v\u00fdzkumn\u00edci vyu\u017eili k v\u00fdpo\u010dtu offsetu virtu\u00e1ln\u00ed pam\u011bti a ur\u010den\u00ed uspo\u0159\u00e1d\u00e1n\u00ed pam\u011b\u0165ov\u00fdch bank. Rozpozn\u00e1n\u00ed p\u0159\u00edstup\u016f k r\u016fzn\u00fdm bank\u00e1m pam\u011bti bylo provedeno anal\u00fdzou zpo\u017ed\u011bn\u00ed, kter\u00e9 se li\u0161ily p\u0159i p\u0159\u00edstupu k jedn\u00e9 nebo r\u016fzn\u00fdm bank\u00e1m pam\u011bti. <\/p>\n

V syst\u00e9mech, kter\u00e9 spole\u010dn\u011b pou\u017e\u00edvaj\u00ed GPU, jako jsou servery<\/a> pro prov\u00e1d\u011bn\u00ed model\u016f strojov\u00e9ho u\u010den\u00ed umo\u017e\u0148uje \u00fatok jednomu u\u017eivateli m\u011bnit obsah grafick\u00e9 pam\u011bti obsahuj\u00edc\u00ed data jin\u00e9ho u\u017eivatele. Jako ochrann\u00e9 opat\u0159en\u00ed spole\u010dnost NVIDIA doporu\u010duje zapnout k\u00f3dy pro opravu chyb (ECC, Error Correction Codes) p\u0159\u00edkazem «nvidia-smi -e 1» nebo pou\u017e\u00edvat \u0159ady grafick\u00fdch karet podporuj\u00edc\u00edch OD-ECC (On-Die ECC), jako jsou GeForce RTX 50, RTX PRO, GB200, B200, B100, H100, H200, H20 a GH200. <\/p>\n

Podle v\u00fdzkumn\u00edk\u016f zapnut\u00ed ECC na syst\u00e9mech s GPU A6000 vede k poklesu v\u00fdkonu p\u0159i prov\u00e1d\u011bn\u00ed model\u016f strojov\u00e9ho u\u010den\u00ed p\u0159ibli\u017en\u011b o 10% a ke sn\u00ed\u017een\u00ed objemu pam\u011bti o 6,25%. N\u00e1stroje pro prov\u00e1d\u011bn\u00ed \u00fatoku a zp\u011btn\u00e9ho in\u017een\u00fdrstv\u00ed n\u00edzko\u00farov\u0148ov\u00e9ho rozlo\u017een\u00ed video pam\u011bti na syst\u00e9mech s GPU NVIDIA byly zve\u0159ejn\u011bny na GitHubu. <\/p>\n

\u00datok RowHammer umo\u017e\u0148uje naru\u0161it obsah jednotliv\u00fdch bit\u016f pam\u011bti DRAM cyklick\u00fdm \u010dten\u00edm dat ze sousedn\u00edch bun\u011bk pam\u011bti. Proto\u017ee pam\u011b\u0165 DRAM p\u0159edstavuje dvourozm\u011brn\u00e9 pole bun\u011bk, z nich\u017e ka\u017ed\u00e1 se skl\u00e1d\u00e1 z kondenz\u00e1toru a tranzistoru, prov\u00e1d\u011bn\u00ed nep\u0159etr\u017eit\u00e9ho \u010dten\u00ed t\u00e9to same oblasti pam\u011bti vede k fluktuac\u00edm nap\u011bt\u00ed a anom\u00e1li\u00edm, kter\u00e9 zp\u016fsobuj\u00ed malou ztr\u00e1tu n\u00e1boje sousedn\u00edch bun\u011bk. Pokud je intenzita \u010dten\u00ed vysok\u00e1, m\u016f\u017ee sousedn\u00ed bu\u0148ka ztratit dostate\u010dn\u00e9 mno\u017estv\u00ed n\u00e1boje, a dal\u0161\u00ed regenera\u010dn\u00ed cyklus nemus\u00ed sta\u010dit k obnoven\u00ed jej\u00edho p\u016fvodn\u00edho stavu, co\u017e povede ke zm\u011bn\u011b ulo\u017een\u00fdch dat v bu\u0148ce. <\/p>\n

Metoda \u00fatoku Rowhammer byla navr\u017eena v roce 2014, pot\u00e9 mezi bezpe\u010dnostn\u00edmi v\u00fdzkumn\u00edky a v\u00fdrobci hardwaru za\u010dala hra na «ko\u010dky a my\u0161i» — v\u00fdrobci pam\u011b\u0165ov\u00fdch \u010dip\u016f se sna\u017eili zablokovat zranitelnost, zat\u00edmco v\u00fdzkumn\u00edci nach\u00e1zeli nov\u00e9 zp\u016fsoby, jak ji obej\u00edt. Nap\u0159\u00edklad v reakci na RowHammer v\u00fdrobci \u010dip\u016f p\u0159idali mechanismus TRR (Target Row Refresh), ale uk\u00e1zalo se, \u017ee blokuje deformace bun\u011bk pouze v konkr\u00e9tn\u00edch p\u0159\u00edpadech a nechr\u00e1n\u00ed p\u0159ed v\u0161emi mo\u017en\u00fdmi variantami \u00fatoku. \u00dato\u010dn\u00e9 metody byly vyvinuty pro pam\u011b\u0165ov\u00e9 \u010dipy DDR3, DDR4 a DDR5 na syst\u00e9mech s procesory Intel, AMD a ARM. Tak\u00e9 byly nalezeny zp\u016fsoby, jak obej\u00edt korekci chyb ECC a navr\u017eeny varianty prov\u00e1d\u011bn\u00ed \u00fatoku p\u0159es s\u00ed\u0165 a pomoc\u00ed spu\u0161t\u011bn\u00ed JavaScript k\u00f3du v prohl\u00ed\u017ee\u010di.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0434\u043e 8 \u0431\u0438\u0442 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a\u0440\u0435\u0442\u043d\u043e\u043c GPU NVIDIA A6000 \u0441 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u044c\u044e GDDR6. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e (\u0441 80% \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":138939,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GPUHammer \u2014 varianta \u00fatoku Rowhammer na pam\u011b\u0165 GPU | ProHoster","description":"V\u00fdzkumn\u00edci z Torontsk\u00e9 university p\u0159edstavili prvn\u00ed \u00fatok t\u0159\u00eddy Rowhammer, kter\u00fd se pou\u017e\u00edv\u00e1 k po\u0161kozen\u00ed obsahu video pam\u011bti.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GPUHammer \u2014 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 Rowhammer \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c GPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-14T09:11:59+00:00","article:modified_time":"2025-07-14T09:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138938","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:49:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:50:21","updated":"2026-02-09 17:49:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/138938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=138938"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/138938\/revisions"}],"predecessor-version":[{"id":159226,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/138938\/revisions\/159226"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/138939"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=138938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=138938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=138938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}