{"id":74882,"date":"2020-03-21T14:41:55","date_gmt":"2020-03-21T11:41:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predlozhennaya-google-programmnaya-zashhita-ot-ataki-lvi-pokazala-snizhenie-proizvoditelnosti-v-14-raz"},"modified":"2020-03-21T14:41:55","modified_gmt":"2020-03-21T11:41:55","slug":"predlozhennaya-google-programmnaya-zashhita-ot-ataki-lvi-pokazala-snizhenie-proizvoditelnosti-v-14-raz","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/predlozhennaya-google-programmnaya-zashhita-ot-ataki-lvi-pokazala-snizhenie-proizvoditelnosti-v-14-raz","title":{"rendered":"La protecci\u00f3n contra ataques LVI propuesta por Google mostr\u00f3 una disminuci\u00f3n del rendimiento de 14 veces.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zola Bridges de Google propuso<\/a><\/noindex> para el conjunto de compiladores LLVM, un parche que implementa la protecci\u00f3n SESES (Supresi\u00f3n de Efectos Secundarios de Ejecuci\u00f3n Especulativa), que ayuda a bloquear ataques al mecanismo de ejecuci\u00f3n especulativa en CPUs Intel, similar a LVI<\/a><\/noindex>. El m\u00e9todo de protecci\u00f3n se implementa a nivel del compilador y se basa en la adici\u00f3n por parte del compilador, al generar el c\u00f3digo m\u00e1quina, de instrucciones LFENCE<\/a><\/noindex>, que se insertan antes de cada instrucci\u00f3n de lectura o escritura de memoria, as\u00ed como antes de la primera instrucci\u00f3n de bifurcaci\u00f3n en un grupo de instrucciones que finaliza un bloque. <\/p>\n

La instrucci\u00f3n LFENCE espera que todas las operaciones anteriores de lectura de memoria se hayan completado y proh\u00edbe la ejecuci\u00f3n especulativa de las siguientes instrucciones despu\u00e9s de LFENCE hasta que la finalizaci\u00f3n est\u00e9 completa. El uso de LFENCE resulta en una reducci\u00f3n significativa del rendimiento, por lo que se sugiere aplicarlo solo en casos extremos para c\u00f3digo especialmente cr\u00edtico. Adem\u00e1s de la protecci\u00f3n completa, el parche ofrece tres flags que permiten desactivar selectivamente ciertos niveles de protecci\u00f3n para reducir el impacto negativo en el rendimiento. <\/p>\n

En las pruebas realizadas, la aplicaci\u00f3n de la protecci\u00f3n SESES para el paquete BoringSSL result\u00f3 en una reducci\u00f3n de 14 veces en el n\u00famero de operaciones realizadas por la biblioteca por segundo; el rendimiento de la versi\u00f3n de la biblioteca protegida fue, en promedio, solo del 7.1% en comparaci\u00f3n con la versi\u00f3n sin protecci\u00f3n (con una variaci\u00f3n dependiendo de la prueba de entre el 4% y el 23%). <\/p>\n

Para comparar, proporcionado<\/a><\/noindex> anteriormente, para GNU Assembler, el mecanismo que realiza la sustituci\u00f3n de LFENCE despu\u00e9s de cada operaci\u00f3n de carga de memoria y antes de ciertas instrucciones de bifurcaci\u00f3n mostr\u00f3 una disminuci\u00f3n del rendimiento de aproximadamente 5 veces (22% del c\u00f3digo sin protecci\u00f3n). Este m\u00e9todo de protecci\u00f3n tambi\u00e9n se propone<\/a><\/noindex> y el modo \u00abBACKUP LOCK\u00bb, que se puede utilizar durante la copia de seguridad de archivos de la base de datos;<\/a><\/noindex> fue ideado por ingenieros de Intel, pero los resultados de las pruebas de rendimiento para \u00e9l a\u00fan no se han publicado. Inicialmente, los investigadores que descubrieron el ataque LVI pronosticaron una disminuci\u00f3n del rendimiento al aplicar la protecci\u00f3n completa de entre 2 a 19 veces. <\/p>\n

<\/a><\/noindex><\/p>\n

Fuente: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Zola Bridges \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0434\u043b\u044f \u043d\u0430\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u043e\u0432 LLVM \u043f\u0430\u0442\u0447 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0437\u0430\u0449\u0438\u0442\u044b SESES (Speculative Execution Side Effect Suppression), \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0449\u0435\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 CPU Intel, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 LVI. \u041c\u0435\u0442\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u0430 \u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 LFENCE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0434 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0435\u0439 \u0447\u0442\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-74882","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47La protecci\u00f3n de software propuesta por Google contra el ataque LVI mostr\u00f3 una disminuci\u00f3n del rendimiento en 14 veces | ProHoster","description":"Zola Bridges de Google propuso un parche para el conjunto de compiladores LLVM que implementa la protecci\u00f3n SESES (Ejecuci\u00f3n Especulativa).","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/predlozhennaya-google-programmnaya-zashhita-ot-ataki-lvi-pokazala-snizhenie-proizvoditelnosti-v-14-raz","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f Google \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 LVI \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 14 \u0440\u0430\u0437 | ProHoster","og:description":"Zola Bridges \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0434\u043b\u044f \u043d\u0430\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440\u043e\u0432 LLVM \u043f\u0430\u0442\u0447 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0437\u0430\u0449\u0438\u0442\u044b SESES (Speculative Execution Side.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/predlozhennaya-google-programmnaya-zashhita-ot-ataki-lvi-pokazala-snizhenie-proizvoditelnosti-v-14-raz","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-21T11:41:55+00:00","article:modified_time":"2020-03-21T11:41:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74882","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:06:23","updated":"2022-10-02 00:09:41","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/74882","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=74882"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/74882\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=74882"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=74882"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=74882"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}