{"id":181791,"date":"2026-05-29T02:48:54","date_gmt":"2026-05-29T00:48:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera"},"modified":"2026-05-29T02:48:54","modified_gmt":"2026-05-29T00:48:55","slug":"opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","title":{"rendered":"K\u00fclastatavade saitide m\u00e4\u00e4ramine SSD tegevuse anal\u00fc\u00fcsi kaudu veebibrauseris","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Graz'i tehnika\u00fclikooli uurijate r\u00fchm on v\u00e4lja t\u00f6\u00f6tanud k\u00fclgkanali r\u00fcnnete tehnika FROST (Fingerprinting Remotely using OPFS-based SSD Timing), mis v\u00f5imaldab anal\u00fc\u00fcsida SSD-m\u00e4luseadmest saadud andmeid, et JavaScript-koodi kaudu tuvastada, milliseid veebisaite kasutajad avavad, t\u00e4psusega 88,95%, ning k\u00e4ivitatud rakendusi s\u00fcsteemis 95,83% t\u00e4psusega. Meetodit saab kasutada ka varjatud suhtluse kanali loomiseks kohaliku rakenduse ja JavaScript-koodi vahel. Sellise andmevahetuse efektiivsus Linuxis oli 661 bit\/s ja macOS-is 892 bit\/s.<\/p>\n

R\u00fcnnak p\u00f5hineb sellel, et SSD-m\u00e4lu juurdep\u00e4\u00e4su aegade muutumise iseloom veebilehe avamisel v\u00f5i veebirakenduse k\u00e4ivitamisel on konkreetse veebisaidi ja rakenduse jaoks spetsiifiline. Kasutades t\u00fc\u00fcpilisi juurdep\u00e4\u00e4suaja muutuste koopiaid eelnevalt m\u00f5\u00f5detud veebisaitide ja rakenduste jaoks, saab eristada nende iseloomulikku aktiivsust teiste sisend-\/v\u00e4ljundtoimingute taustal. R\u00fcnnaku kontekstis s\u00fcnkroonitakse sisend-\/v\u00e4ljunde latentsuse v\u00f5rreldes veebisaitide ja rakenduste signatuuridega.
\nkasutatakse konvolutsioonilist n\u00e4rviv\u00f5rku, mis suudab m\u00fcra taustal mustreid tuvastada, mida tekitavad v\u00e4lised sisend-\/v\u00e4ljundtoimingud.<\/p>\n

Meetodi t\u00f6\u00f6ks brauseris kasutatakse API-d OPFS (Origin-Private FileSystem), mis v\u00f5imaldab luua faile kohalikus failiss\u00fcsteemis (failid luuakse veebisaidiga seotud isoleeritud osa FS-is). SSD-m\u00e4lu juurdep\u00e4\u00e4su aegade anal\u00fc\u00fcs toimub andmete samaaegsete operatsioonide latentsuse m\u00f5\u00f5tmise teel. Failide operatsioonide k\u00e4tkesa hoidmiseks r\u00fcnnaku k\u00e4igus on vajalik luua v\u00e4ga suuri faile, mis \u00fcletavad saadaval oleva t\u00f6\u00f6tamise m\u00e4lu suuruse. <\/p>\n

Kuna meetmena brauseri r\u00fcnnakute vastu on tootjatele soovitatud k\u00fcsida kasutajalt eraldi kinnitust OPFS API-le juurde p\u00e4\u00e4semiseks v\u00f5i piirata maksimaalset faili suurust v\u00e4\u00e4rtusega, mis ei \u00fcleta muutm\u00e4lu suurust. Praegu v\u00f5imaldavad Chrome ja Safari l\u00e4bi OPFS API luua faile, mis v\u00f5tavad kuni 60% olemasolevast ketta ruumist.<\/p>\n

Google'i Chromiumi arendajad ei tunnista selliseid r\u00fcnnakuid kolmandate osapoolte kaudu haavatavustena. Apple'i Safari arendajad ei v\u00e4lista tulevikus r\u00fcnnakute vastu meetodite rakendamist. Mozilla ettev\u00f5te tunnustas probleemi olemasolu, kuid pole veel paranduseta.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c FROST (Fingerprinting Remotely using OPFS-based SSD Timing), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f \u0438\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 JavaScript-\u043a\u043e\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u0439\u0442\u044b \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 88.95%, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 95.83%. \u041c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181791","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47K\u00fclastatavate veebisaitide m\u00e4\u00e4ramine SSD tegevuse anal\u00fc\u00fcsi kaudu veebibrauserist | ProHoster","description":"Grazinseni tehnika \u00fclikoolist koosnev teadlaste grupp on v\u00e4lja t\u00f6\u00f6tanud FROST (Fingerprinting Remotely using OPFS-based SSD Timing) kanali r\u00fcnnakutehnika, mis v\u00f5imaldab JavaScript-koodi kaudu, anal\u00fc\u00fcsides SSD-m\u00e4luseadmest saadud tegevust, m\u00e4\u00e4rata kasutajate k\u00fclastatavaid veebisaite t\u00e4psusega 88,95% ning s\u00fcsteemis jooksvaid rakendusi t\u00e4psusega 95,83%. Meetodit saab kasutada ka peidetud suhtluskanali korraldamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u0435\u043c\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD \u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c FROST (Fingerprinting Remotely using OPFS-based SSD Timing), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f \u0438\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 JavaScript-\u043a\u043e\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u0439\u0442\u044b \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 88.95%, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 95.83%. \u041c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-29T00:48:55+00:00","article:modified_time":"2026-05-29T00:48:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181791"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181791\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}