{"id":103200,"date":"2022-02-06T03:36:58","date_gmt":"2022-02-06T01:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux"},"modified":"2022-02-06T03:36:58","modified_gmt":"2022-02-06T01:37:00","slug":"dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","title":{"rendered":"Saab on Kasper, Linuxi tuuma spekulatiivse koodijooksmise probleemide skanner.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Amsterdam Free University uurimisr\u00fchm on avaldanud Kasper t\u00f6\u00f6riista, mis on m\u00f5eldud Linuxi tuumas asuvate koodil\u00f5ikude tuvastamiseks, mida saab kasutada Spektri r\u00fcnnakute \u00e4ra kasutamiseks, mis tulenevad protsessori spekulatiivsest koodijooksmisest. T\u00f6\u00f6riista l\u00e4htekood on vabastatud Apache 2.0 litsentsi alusel. <\/p>\n

Tuletame meelde, et selliste r\u00fcnnakute, nagu Spectre v1, mis v\u00f5imaldavad tuvastada m\u00e4lusisaldust, teostamiseks on vajalik teatud k\u00e4skude (gad\u017eettide) j\u00e4rjestus privileege saanud koodis, mis viib spekulatiivse k\u00e4skude t\u00e4itmiseni. Protsessor alustab sarnaste gad\u017eettide t\u00e4itmist spekulatiivses re\u017eiimis optimeerimise eesm\u00e4rgil, seej\u00e4rel tuvastab, et harude ennustus ei vastanud t\u00f5ele ja tagastab toimingud algsesse olekusse, kuid spekulatiivse t\u00e4itmise k\u00e4igus t\u00f6\u00f6deldud andmed j\u00e4\u00e4vad vahem\u00e4lu ja mikroarhitektuursete puhverserverite sisse ning neid saab nende seest erinevate j\u00e4\u00e4kandmete tuvastamise meetoditega v\u00e4lja tuua. <\/p>\n

Varem kergesti kergesti valede positiivsete tulemuste t\u00f5ttu Spektri haavatavuste skannimiseks m\u00f5eldud t\u00f6\u00f6riistad, mis p\u00f5hinesid mustrite otsimisel, n\u00e4itasid v\u00e4ga suurt valeh\u00e4irete taset, j\u00e4ttes samas palju tegelikke gad\u017eette tuvastamata (katsetused n\u00e4itasid, et 99% selliste t\u00f6\u00f6riistade tuvastatud gad\u017eettidest ei saanud r\u00fcnnakuteks kasutada, ja 33% t\u00f6\u00f6tavatest gad\u017eettidest, mis v\u00f5iksid r\u00fcnnakute korral toimida, j\u00e4i m\u00e4rkamatuks). <\/p>\n

Kasper modelleerib haavatavusi, mida r\u00fcndaja v\u00f5ib kasutada iga sammu jooksul Spectre klassi r\u00fcnnakutes, et k\u00f5rvaldada probleemid, mis v\u00f5imaldavad andmeid kontrollida (n\u00e4iteks r\u00fcndaja andmete sisestamine mikroarhitektuuri struktuuridesse, et m\u00f5jutada j\u00e4rgmist spekulatiivset t\u00e4itmist LVI r\u00fcnnakute abil), p\u00e4\u00e4seda ligi konfidentsiaalsele informatsioonile (n\u00e4iteks m\u00e4lupiiride \u00fcletamisel v\u00f5i m\u00e4lu kasutamisel p\u00e4rast selle vabastamist) ning korraldada konfidentsiaalse informatsiooni lekkeid (n\u00e4iteks, anal\u00fc\u00fcsides protsessori vahem\u00e4lu olekut v\u00f5i kasutades MDS meetodit).

\"Saab<\/center> <\/p>\n

Testimise k\u00e4igus seondub tuum Kasperi runtime-raamatukogudega ja kontrollide tasemega LLVM. Kontrollimise k\u00e4igus simuleeritakse koodi spekulatiivset t\u00e4itmist, mis on rakendatud mehhanismi checkpoint-restore abil, mis spetsiaalselt t\u00e4idab vale ennustatud koodiharu, seej\u00e4rel tagastub algsesse olekusse enne harude tegemist. Kasper p\u00fc\u00fcab ka modelleerida erinevaid tarkvaralisi ja riistvaralisi haavatavusi, anal\u00fc\u00fcsib arhitektuurilisi ja mikroomarhitektuurilisi efekte ning viib l\u00e4bi h\u00e4kkimise v\u00f5imalike toimingute fuzzing-testimist. T\u00e4itmisvoogude anal\u00fc\u00fcsimiseks kasutatakse Linuxi tuumale m\u00f5eldud DataFlowSanitizer porti, ning fuzzing-testimiseks on kasutatud muudetud versiooni pakist syzkaller.

\"Saab<\/center> <\/p>\n

Linuxi tuuma skaneerimisel Kasperi abil tuvastati 1379 varem tundmatud gadgeti, mis v\u00f5ivad potentsiaalselt p\u00f5hjustada andmelekkeid spekulatiivsete k\u00e4skude t\u00e4itmise k\u00e4igus. T\u00e4heldatakse, et vaid osa neist v\u00f5ib tegelikult esindada reaalseid probleeme, kuid selleks, et demonstreerida, et eksisteerib ka tegelik oht, mitte ainult teoreetiline, on \u00fche probleemse koodi katke jaoks v\u00e4lja t\u00f6\u00f6tatud t\u00f6\u00f6tav protot\u00fc\u00fcp, mis p\u00f5hjustab teabe leket tuuma m\u00e4lust.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Kasper, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0442\u0440\u044b\u0432\u043a\u043e\u0432 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u043a\u0430\u043a Spectre v1, \u0434\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":103201,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103200","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Kaspere, spekulatiivsete koodi t\u00e4itmise probleemide skanner Linuxi tuumas, on saadaval | ProHoster","description":"Amsterdamis asuva vabade \u00fclikooli teadlaste r\u00fchm avaldas Kasperi t\u00f6\u00f6riista, mis on m\u00f5eldud Linuxi tuumas olevate koodikatkete tuvastamiseks, mida saab kasutada haavatavuste \u00e4ra kasutamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d Kasper, \u0441\u043a\u0430\u043d\u0435\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u043e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Kasper, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0442\u0440\u044b\u0432\u043a\u043e\u0432 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-06T01:37:00+00:00","article:modified_time":"2022-02-06T01:37:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103200","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-06 01:37:56","updated":"2022-10-04 19:30:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/103200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=103200"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/103200\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/103201"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=103200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=103200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=103200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}