{"id":103200,"date":"2022-02-06T03:36:58","date_gmt":"2022-02-06T01:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux"},"modified":"2022-02-06T03:36:58","modified_gmt":"2022-02-06T01:37:00","slug":"dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","title":{"rendered":"Saadaval on Kasper, spekulatiivse koodi t\u00e4itmise probleemide skanner Linuxi tuumas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Amsterdam Free University teadlaste grupp avaldas t\u00f6\u00f6riista Kasper, mille eesm\u00e4rk on tuvastada Linuxi tuumas koode, mida saab kasutada Spectre klassi haavatavuste \u00e4rakasutamiseks, mida p\u00f5hjustab protsessorite spekulatiivne koodide t\u00e4itmine. T\u00f6\u00f6riista l\u00e4htekood on levitatud Apache 2.0 litsentsi all. <\/p>\n

Tuletame meelde, et selliste r\u00fcnnakute, nagu Spectre v1, mille abil on v\u00f5imalik m\u00e4\u00e4rata m\u00e4lu sisu, l\u00e4biviimiseks on vajalik, et privileegitud koodis oleks teatud k\u00e4skude (gadgetide) j\u00e4rjestus, mis viib spekulatiivse k\u00e4skude t\u00e4itmiseni. Protsessori optimeerimise eesm\u00e4rgil hakkab see spekulatiivselt t\u00e4itma selliseid gadgete, seej\u00e4rel tuvastab, et haru ennustamine ei \u00f5igustanud end ja tagastab toimingud algsesse seisu. Kuid spekulatiivse t\u00e4itmise k\u00e4igus t\u00f6\u00f6tlemine andmed j\u00e4\u00e4vad vahem\u00e4lu ja mikroarhitektuuriliste puhvers\u00fcsteemide sisse ning on saadaval erinevate meetodite abil j\u00e4\u00e4kandmete m\u00e4\u00e4ramiseks kolmandate osapoolte kanalite kaudu. <\/p>\n

Varem kergesti juurdep\u00e4\u00e4setavad seadmete skannimise t\u00f6\u00f6riistad Spectre haavatavuse osas, mis p\u00f5hinesid mudelite mustrite otsimisel, n\u00e4itasid v\u00e4ga k\u00f5rget valeh\u00e4irete taset, samas kui paljusid t\u00f5elisi seadmeid j\u00e4eti t\u00e4helepanuta (katsetused n\u00e4itasid, et 99% nende t\u00f6\u00f6riistade tuvastatud seadmetest ei saanud r\u00fcnnakute jaoks kasutada ja 33% t\u00f6\u00f6kindlatest seadmetest, mis v\u00f5iksid r\u00fcnnaku p\u00f5hjustada, j\u00e4i m\u00e4rkamatuks). <\/p>\n

Kasper modelleerib haavatavusi, mida r\u00fcndaja saab iga sammuga Spectre r\u00fcnnakute klassi teostamisel kasutada, et parandada probleemsete seadmete tuvastamise kvaliteeti \u2014 mudeldatakse probleeme, mis v\u00f5imaldavad kontrollida andmeid (nt r\u00fcndaja andmete sisestamine mikroarhitektuuri struktuuridesse spekulatiivse t\u00e4itmise m\u00f5jutamiseks LVI r\u00fcnnakute kaudu), p\u00e4\u00e4seda ligi konfidentsiaalsele teabele (nt m\u00e4luaadresside \u00fcletamine v\u00f5i m\u00e4lust vabastatud m\u00e4lu kasutamine) ja korraldada konfidentsiaalse teabe v\u00e4ljavoolu (nt anal\u00fc\u00fcsides protsessori vahem\u00e4lu olekut v\u00f5i kasutades MDS meetodit).

\"Saadaval<\/center> <\/p>\n

Tuuringu ajal on tuuma side runtime-raamatukogudega Kasper ja LLVM-tasandi kontrollidega. Kontrollimise k\u00e4igus simuleeritakse spekulatiivset koodi t\u00e4itmist, kasutades checkpoint-restore mehhanismi, mis t\u00e4idab vale ennustatud koodiharu ja seej\u00e4rel naaseb algsesse olekusse enne harude teket. Kasper p\u00fc\u00fcab samuti mudeldada erinevaid tarkvara- ja riistvaraj\u00f5ueteid, anal\u00fc\u00fcsib arhitektuurilisi ja mikroarhitektuurilisi efekte ning viib l\u00e4bi r\u00fcnnaku simulatsiooniks fuzzy-testimist. T\u00e4itmisvoogude anal\u00fc\u00fcsimiseks kasutatakse Linuxi tuuma DataFlowSanitizerit ja fuzzy-testimiseks on muudetud versioon syzkaller paketist.

\"Saadaval<\/center> <\/p>\n

Kasperi abil Linuxi tuuma skaneerimise k\u00e4igus tuvastati 1379 varem tundmat gadgeti, mis v\u00f5ivad potentsiaalselt p\u00f5hjustada andmete leket spekulatiivsete k\u00e4skude t\u00e4itmise k\u00e4igus. T\u00f5detakse, et vaid osa neist v\u00f5ib esindada reaalseid probleeme, kuid demonstreerimiseks, et risk on olemas, mitte ainult teoreetiline, arendati \u00fche probleemse koodil\u00f5igu jaoks t\u00f6\u00f6protot\u00fc\u00fcp, mis p\u00f5hjustab teabe lekke tuuma m\u00e4lust.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Kasper, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0442\u0440\u044b\u0432\u043a\u043e\u0432 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u043a\u0430\u043a Spectre v1, \u0434\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":103201,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103200","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kasper, spekulatiivsete koodit\u00f6\u00f6tluse probleemide skanner Linuxi tuumas, on n\u00fc\u00fcd saadaval | ProHoster","description":"Amsterdamis asuva Vaba \u00dclikooli teadlaste r\u00fchm avaldas t\u00f6\u00f6riistas\u00fcsteemi Kasper, mis on m\u00f5eldud tuvastama Linuxi tuumas koodil\u00f5ike, mida saab kasutada spekulatiivsete koodit\u00f6\u00f6tlemise t\u00f5ttu tekkivate Spectre klassi haavatavuste \u00e4ra kasutamiseks. T\u00f6\u00f6riistas\u00fcsteemi l\u00e4htekood jaotatakse Apache 2.0 litsentsi alusel. Tuletame meelde, et selliste r\u00fcnnakute, nagu Spectre v1, mis v\u00f5imaldab m\u00e4\u00e4rata m\u00e4lusisaldust, teostamiseks on vajalik...","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d Kasper, \u0441\u043a\u0430\u043d\u0435\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u043e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Kasper, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0442\u0440\u044b\u0432\u043a\u043e\u0432 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u043a\u0430\u043a Spectre v1, \u0434\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-06T01:37:00+00:00","article:modified_time":"2022-02-06T01:37:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103200","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-06 01:37:56","updated":"2022-10-04 19:30:20"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/103200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=103200"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/103200\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/103201"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=103200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=103200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=103200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}