{"id":110360,"date":"2023-09-28T09:56:15","date_gmt":"2023-09-28T07:56:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=110360"},"modified":"2023-09-28T09:56:15","modified_gmt":"2023-09-28T07:56:15","slug":"ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","title":{"rendered":"GPU.zip-angreb, der g\u00f8r det muligt at rekonstruere data, der gengives af GPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En gruppe forskere fra flere universiteter i USA har udviklet en ny teknik til sidekanalangreb, der g\u00f8r det muligt at rekonstruere visuelle informationer bearbejdet i GPU'en. Ved hj\u00e6lp af den foresl\u00e5ede metode, som er blevet kaldt GPU.zip, kan angriberen bestemme, hvilken information der vises p\u00e5 sk\u00e6rmen. Angrebet kan blandt andet udf\u00f8res via en webbrowser, eksempelvis er det blevet vist, hvordan en skadelig webside \u00e5bnet i Chrome kan f\u00e5 information om de pixels, der gengives ved rendering af en anden webside \u00e5bnet i den samme browser. <\/p>\n

Kilden til informationsl\u00e6kagen er den optimering, der anvendes i moderne GPU'er, som sikrer kompression af grafiske data. Problemet viser sig ved brug af kompression p\u00e5 alle testede integrerede GPU'er (AMD, Apple, ARM, Intel, Qualcomm) og diskrete grafikkort fra NVIDIA. Det blev opdaget, at integrerede GPU'er fra Intel og AMD altid inkluderer kompression af grafiske data, selv n\u00e5r applikationen specifikt ikke beder om denne type optimering. Anvendelsen af kompression f\u00f8rer til, at trafikken til DRAM og belastningen p\u00e5 cachen korrelerer med arten af de behandlede data, som kan rekonstrueres pixel-for-pixel gennem analyse via sidekanaler. <\/p>\n

Metoden er temmelig langsom; for eksempel tog et angreb p\u00e5 en system med en integreret GPU AMD Ryzen 7 4800U 30 minutter at fastsl\u00e5 navnet, som en bruger loggede ind med i en anden fane p\u00e5 Wikipedia, og det gjorde det muligt at bestemme indholdet af pixels med en n\u00f8jagtighed p\u00e5 97%. P\u00e5 systemer med integrerede GPU'er Intel i7-8700 tog et tilsvarende angreb 215 minutter med en n\u00f8jagtighed p\u00e5 98%. <\/p>\n

Ved gennemf\u00f8relse af angrebet via browseren \u00e5bnes det m\u00e5lrettede websted cyklisk i en iframe for at initiere rendering. For at bestemme den viste information omdannes outputtet fra iframe til en sort-hvid pr\u00e6sentation, som der anvendes et SVG-filter p\u00e5, der udf\u00f8rer sekventiel p\u00e5f\u00f8ring af masker, der medf\u00f8rer og ikke medf\u00f8rer stor redundans ved kompression. P\u00e5 baggrund af vurderingen af \u00e6ndringen i renderingtiden af referencepr\u00f8ver identificeres tilstedev\u00e6relsen af m\u00f8rke eller lyse pixels i en bestemt position. Det samlede billede rekonstrueres gennem sekventiel pixel-for-pixel kontrol ved brug af s\u00e5danne masker.

\"GPU.zip-angreb,<\/center> <\/p>\n

Producenter af GPU'er og browsere blev informeret om problemet i marts, men ingen leverand\u00f8r har endnu forberedt en l\u00f8sning, da udf\u00f8relsen af et angreb under reelle forhold er tvivlsom, og problemet har mere teoretisk interesse. Google har endnu ikke truffet en beslutning om, hvorvidt det er hensigtsm\u00e6ssigt at blokere angrebet p\u00e5 browserniveau i Chrome. Chrome er s\u00e5rbart, da det tillader indl\u00e6sning af iframe fra andre hjemmesider uden rensning af cookies, giver mulighed for at anvende SVG-filtre til iframe og delegerer udf\u00f8relsen af GPU-visualisering. Firefox og Safari er ikke s\u00e5rbare, da de ikke opfylder disse kriterier. Angrebet er ogs\u00e5 ikke anvendeligt p\u00e5 websteder, der forbyder indlejring via iframe p\u00e5 andre websteder (for eksempel ved at angive HTTP-headeren X-Frame-Options til v\u00e6rdien 'SAMEORIGIN' eller 'DENY', samt gennem adgangsindstillinger via headeren Content-Security-Policy).
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GPU.zip, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u0443\u044e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Chrome \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f web-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GPU-angreb.zip, der muligg\u00f8r rekonstruktion af data, der gengives af GPU'en | ProHoster","description":"En gruppe forskere fra flere universiteter i USA har udviklet en ny teknik til angreb via sidekanaler, der muligg\u00f8r rekonstruktion af visuel information, der behandles i GPU'en.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 GPU.zip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u043c\u044b\u0435 GPU | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-09-28T07:56:15+00:00","article:modified_time":"2023-09-28T07:56:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/110360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=110360"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/110360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/110361"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=110360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=110360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=110360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}