{"id":114581,"date":"2024-03-26T12:25:42","date_gmt":"2024-03-26T10:25:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/zenhammer-metod-ataki-dlya-iskazheniya-soderzhimogo-pamyati-na-platformah-amd-zen"},"modified":"2024-03-26T12:25:42","modified_gmt":"2024-03-26T10:25:43","slug":"zenhammer-metod-ataki-dlya-iskazheniya-soderzhimogo-pamyati-na-platformah-amd-zen","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/zenhammer-metod-ataki-dlya-iskazheniya-soderzhimogo-pamyati-na-platformah-amd-zen","title":{"rendered":"ZenHammer \u2014 r\u00fcnne m\u00e4lu sisu moonutamiseks AMD Zen platvormidel.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Z\u00fcrihi Tehnika\u00fclikooli teadlased on v\u00e4lja t\u00f6\u00f6tanud ZenHammer r\u00fcnnaku, mis on RowHammer t\u00fc\u00fcpi r\u00fcnnaku variant, mis muudab d\u00fcnaamilise juhusliku m\u00e4lus (DRAM) \u00fcksikute bittide sisu ning on kohandatud AMD protsessoritega platvormide jaoks. Varasemad RowHammer t\u00fc\u00fcpi r\u00fcnnakud piirdusid Intel protsessorip\u00f5histe s\u00fcsteemidega, kuid uuring on n\u00e4idanud, et m\u00e4lurakkude moonutusi on v\u00f5imalik saavutada ka AMD m\u00e4lukontrolleritega platvormidel. <\/p>\n

Meetodi efektiivsust on demonstreeritud AMD Zen 2 ja Zen 3 s\u00fcsteemides, kus on kasutatud kolme peamise tootja (Samsung, Micron ja SK Hynix) DDR4 m\u00e4lusid. R\u00fcnnak suudab edukalt \u00fcletada m\u00e4lukruntides rakendatavat TRR (Target Row Refresh) mehhanismi, mis kaitseb k\u00f5rvutised m\u00e4lurakudest tuleneva moonutamise eest. Teadlaste hinnangul on AMD Zen 3 p\u00f5hised s\u00fcsteemid oluliselt haavatavamad kui Intel Coffee Lake protsessoritega s\u00fcsteemid, olles r\u00fcnnatavamad ja efektiivsemad. AMD Zen 2 s\u00fcsteemides \u00f5nnestus moonutusi saavutada 7-l 10-st testitud DDR4 kiibist, samas kui Zen 3 s\u00fcsteemides 6-l 10-st. Teadlased anal\u00fc\u00fcsisid ka v\u00f5imalust r\u00fcnnata AMD Zen 4 s\u00fcsteeme DDR5 m\u00e4ludega, kuid DDR4-le loodud r\u00fcnnakumeetodi \u00f5nnestus edastada vaid 1-l 10-st testitud DDR5 m\u00e4lu kiibist, samas kui r\u00fcnnaku v\u00f5imalus ei ole v\u00e4listatud; see vajab aga t\u00f5husamate lugemismudelite v\u00e4ljat\u00f6\u00f6tamist, mis sobivad DDR5 seadmetele. <\/p>\n

AMD kiipide t\u00f6\u00f6tlemiseks \u00f5nnestus varem arendatud eksploidid kohandada, et muuta m\u00e4lulehtede tabeli (PTE, page table entry) kande sisu, et saavutada kernel'i privileeg, \u00fcletades parooli\/volituste kontrollimist sudo protsessi m\u00e4lus oleva sisu muutmise kaudu ja kahjustades OpenSSH-s salvestatud RSA-2048 avalikku v\u00f5tmega, et taasluua privaatv\u00f5ti. M\u00e4lulehtede r\u00fcnnak \u00f5nnestus paljastada 7-st 10-st testitud DDR4 kiibist, RSA v\u00f5tme r\u00fcnnakus 6 kiibis, ja sudo r\u00fcnnakus 4 kiibis, samas kui r\u00fcnnaku aeg oli vastavalt 164, 267 ja 209 sekundit.

\"ZenHammer<\/center> <\/p>\n

Meetod v\u00f5ib samuti rakenduda r\u00fcnnaku elluviimiseks s\u00fcsteemile veebibrauserite kaudu, et teha muudatusi. virtuaalmasinate<\/a> v\u00f5i r\u00fcnnaku korraldamiseks v\u00f5rgus. GitHub'is on MIT litsentsi all avaldatud DARE t\u00f6\u00f6riistarikka l\u00e4htekood DRAMi m\u00e4luaadresside tagasiv\u00f5tmise jaoks, samuti kaks komplekti utiliite bitide moonutamise fuzzing-testi jaoks \u2014 ddr4_zen2_zen3_pub DDR4 kiipide (Zen 2 ja Zen 3) ja ddr5_zen4_pub DDR5 kiipide (Zen 4) jaoks, mida saab kasutada oma s\u00fcsteemide r\u00fcnnaku m\u00f5ju testimiseks.

\"ZenHammer<\/center> <\/p>\n

Bite h\u00e4vitamiseks kasutatakse RowHammeri meetodit, mis p\u00f5hineb asjaolul, et DRAM-is, mis on kahes m\u00f5\u00f5tmes akude ja transistoride rakkudest koosnev massiiv, sama m\u00e4luala pidev lugemine p\u00f5hjustab pinge k\u00f5ikumisi ja anomaaliaid, mis p\u00f5hjustavad naaberakkude v\u00e4ikese koormuse kadumise. Kui lugemise intensiivsus on suur, v\u00f5ib naaberakk kaotada piisavalt suurt kogust koormust ja j\u00e4rgmine regenereerimise ts\u00fckkel ei suuda taastada selle algset olekut, mis viib andmete v\u00e4\u00e4rtuste muutumiseni, mis on salvestatud rakku. Uurija on tuvastanud AMD protsessorite f\u00fc\u00fcsilise m\u00e4luga kaardistamise ja m\u00e4lu v\u00e4rskendamise s\u00fcnkroniseerimise mehhanismide omadused, mis v\u00f5imaldasid rekonstrueerida madala taseme DRAM-aadressimist, m\u00e4\u00e4rata naaberakkude aadresse, v\u00e4lja t\u00f6\u00f6tada k\u00e4tkestamise kava, arvutada mustrid ja operatsioonide sageduse, mis p\u00f5hjustavad koormuse kadumise. <\/p>\n

RowHammeri kaitseks kasutavad kiibitootjad TRR (Target Row Refresh) mehhanismi, mis blokeerib rakkude h\u00e4vitamise teatud juhtudel, kuid ei kaitse k\u00f5igi v\u00f5imalike r\u00fcnnakute variantide eest. K\u00f5ige t\u00f5husam kaitsemeetod j\u00e4\u00e4b m\u00e4lu kasutamine vigade parandamise koodidega (ECC), mis muudab r\u00fcnnakute teostamise oluliselt keeruliseks, kuid ei k\u00f5rvalda neid t\u00e4ielikult. Samuti aitab r\u00fcnnaku edukuse t\u00f5en\u00e4osust v\u00e4hendada m\u00e4lu regenereerimise sageduse suurendamine. <\/p>\n

Ettev\u00f5te AMD avaldas probleemi aruande, kus on \u00f6eldud, et AMD protsessorites on olemas m\u00e4lukontrollerid, mis vastavad DDR spetsifikatsioonidele, ja kuna r\u00fcnnaku edukus s\u00f5ltub peamiselt s\u00fcsteemi ja DRAM-m\u00e4lu seadistustest, tuleks probleemide lahendamise k\u00fcsimustes p\u00f6\u00f6rduda m\u00e4lu ja s\u00fcsteemide tootjate poole. Eksisteerivatest meetoditest Rowhammer klassi r\u00fcnnaku keerukuse suurendamiseks mainitakse ECC-m\u00e4lu kasutamist, m\u00e4lu regeneratsiooni sageduse suurendamist, viivituse regeneratsiooni re\u017eiimi keelamist ja protsessorite kasutamist, millel on DDR4 (1, 2 ja 3 AMD EPYC «Naple», «Rome» ja «Milan») jaoks MAC (Maximum Activate Count) re\u017eiimi toega ja DDR5 (4. p\u00f5lvkonna AMD EPYC) jaoks RFM (Refresh Management).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 ZenHammer, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0431\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0431\u0438\u0442\u043e\u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (DRAM), \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 AMD. \u041f\u0440\u043e\u0448\u043b\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u044f\u0447\u0435\u0435\u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":114582,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114581","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ZenHammer \u2014 r\u00fcnnakumeetod, mis moonutab m\u00e4lusisu AMD Zen platvormidel | ProHoster","description":"\u0160veitsi F\u00f6deraalne Tehnoloogiauuringute Instituut on v\u00e4lja t\u00f6\u00f6tanud ZenHammer r\u00fcnnakumeetodi, mis on variant RowHammeri r\u00fcnnakutest, et muuta d\u00fcnaamilise RAM'i \u00fcksikute bittide sisu.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/zenhammer-metod-ataki-dlya-iskazheniya-soderzhimogo-pamyati-na-platformah-amd-zen","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ZenHammer \u2014 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 AMD Zen | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 ZenHammer, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0431\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0431\u0438\u0442\u043e\u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/zenhammer-metod-ataki-dlya-iskazheniya-soderzhimogo-pamyati-na-platformah-amd-zen","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-26T10:25:43+00:00","article:modified_time":"2024-03-26T10:25:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114581","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 17:11:05","updated":"2026-02-09 17:11:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=114581"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114581\/revisions"}],"predecessor-version":[{"id":159263,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114581\/revisions\/159263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/114582"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=114581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=114581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=114581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}