{"id":181791,"date":"2026-05-29T02:48:54","date_gmt":"2026-05-29T00:48:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera"},"modified":"2026-05-29T02:48:54","modified_gmt":"2026-05-29T00:48:55","slug":"opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","title":{"rendered":"Bestemmelse af bes\u00f8gte hjemmesider gennem analyse af SSD-aktivitet fra webbrowseren","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En gruppe forskere fra Graz Universitetet for Teknologi (\u00d8strig) har udviklet en angrebsteknik gennem sidekanaler kaldet FROST (Fingerprinting Remotely using OPFS-based SSD Timing), der g\u00f8r det muligt at bestemme, hvilke hjemmesider brugerne bes\u00f8ger, gennem analyse af SSD-lagringsenhedernes aktivitet fra JavaScript-kode, med en n\u00f8jagtighed p\u00e5 88,95%, samt hvilke applikationer der k\u00f8rer i systemet med en n\u00f8jagtighed p\u00e5 95,83%. Metoden kan ogs\u00e5 bruges til at oprette en skjult kommunikationskanal mellem en lokalt fungerende applikation og den k\u00f8rende JavaScript-kode i browseren. Ydelsen for denne dataveksling var 661 bit\/s i Linux og 892 bit\/s i macOS.<\/p>\n

Angrebet er baseret p\u00e5, at karakteren af \u00e6ndringerne i adgangstiden til SSD-lagringsenheden under \u00e5bning af et website eller topk\u00f8rsel af en webapplikation er specifik for det p\u00e5g\u00e6ldende website og applikation. Ved at bruge typiske aftryk af \u00e6ndringer i adgangstider for forudm\u00e5ltede websites og applikationer kan man udskille deres karakteristiske aktivitet mod baggrund af andre input\/output-operationer. I konteksten af det gennemf\u00f8rte angreb bliver der sammenlignet forsinkelser ved input\/output med signaturerne for de specifikke websites og applikationer.
\nEn konvolutionel neurale netv\u00e6rk er blevet implementeret, som er i stand til at identificere m\u00f8nstre mod st\u00f8jen fra ekstern input\/output.<\/p>\n

Metoden benytter API OPFS (Origin-Private FileSystem) i browseren, som tillader oprettelse af filer i det lokale filsystem (filerne oprettes i en isoleret del af filsystemet knyttet til websitet). Adgangstiden til SSD-lagringsenheden analyseres ved at m\u00e5le forsinkelserne ved ensartede dataoperationer. For at omg\u00e5 indflydelsen fra caching i forbindelse med filoperationerne i angrebet er det n\u00f8dvendigt at oprette meget store filer, der overstiger st\u00f8rrelsen af den tilg\u00e6ngelige RAM. <\/p>\n

Som et m\u00e5l for at im\u00f8deg\u00e5 angrebet, foresl\u00e5s det, at browserproducenter beder brugeren om s\u00e6rskilt bekr\u00e6ftelse af adgang til API OPFS eller begr\u00e6nser den maksimale filst\u00f8rrelse til en v\u00e6rdi, der ikke overstiger st\u00f8rrelsen af den disponible RAM. I \u00f8jeblikket tillader Chrome og Safari gennem API OPFS at oprette filer, der optager op til 60% af det tilg\u00e6ngelige diskplads.<\/p>\n

Chrome-udviklerne fra Google anerkender ikke s\u00e5danne angreb via sidekanaler som s\u00e5rbarheder. Safari-udviklerne fra Apple udelukker ikke implementeringen af metoder i fremtiden for at modvirke angreb. Mozilla har anerkendt problemet, men har endnu ikke implementeret en l\u00f8sning.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c FROST (Fingerprinting Remotely using OPFS-based SSD Timing), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f \u0438\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 JavaScript-\u043a\u043e\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u0439\u0442\u044b \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 88.95%, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 95.83%. \u041c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181791","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bestemmelse af bes\u00f8gte websteder gennem analyse af SSD-aktivitet fra webbrowseren | ProHoster","description":"En gruppe forskere fra Graz Tekniske Universitet (\u00d8strig) har udviklet en sidekanalsangrebsteknik kaldet FROST (Fingerprinting Remotely using OPFS-based SSD Timing), som muligg\u00f8r analyse af aktivitet.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u0435\u043c\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD \u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c FROST (Fingerprinting Remotely using OPFS-based SSD Timing), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-29T00:48:55+00:00","article:modified_time":"2026-05-29T00:48:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/181791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=181791"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/181791\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=181791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=181791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=181791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}