{"id":38012,"date":"2019-10-31T22:21:11","date_gmt":"2019-10-31T19:21:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh\/"},"modified":"2019-10-31T22:21:11","modified_gmt":"2019-10-31T19:21:11","slug":"realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","title":{"rendered":"Intel'i DDIO rakendamine lubab v\u00f5rgu r\u00fcnnakut klahvivajutuste m\u00e4\u00e4ratluse kaudu SSH sessioonis.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Amsterdam Free University ja Z\u00fcrichi \u00dclikooli tehnikakooli teadlaste r\u00fchm on v\u00e4lja t\u00f6\u00f6tanud v\u00f5rgu r\u00fcnnaku tehnika NetCAT<\/a><\/noindex> (Network Cache ATtack), mis v\u00f5imaldab andmeanal\u00fc\u00fcsi meetodite kaudu kolmandate kanalite kaudu kaugelt m\u00e4\u00e4rata, milliseid klahve kasutaja SSH-sessiooni jooksul vajutab. Probleem ilmneb ainult serverites, kus kasutatakse tehnoloogiaid RDMA<\/a><\/noindex> (Remote direct memory access) ja DDIO<\/a><\/noindex> (Data-Direct I\/O).<\/p>\n

Intel Corporation Aasta hiljem j\u00f5udsid Red Hat ja IBM uuele kokkuleppele \u2014 nad<\/a><\/noindex>, mist\u00f5ttu on r\u00fcnnak praktikas keeruline teostada, kuna see n\u00f5uab r\u00fcndaja juurdep\u00e4\u00e4su kohalikule v\u00f5rgule, steriilseid tingimusi ja hostide \u00fchenduse korraldamist RDMA ja DDIO tehnoloogiate abil, mida tavaliselt kasutatakse isoleeritud v\u00f5rkudes, nagu need, kus t\u00f6\u00f6tavad arvutiklastrid. Probleemile on m\u00e4\u00e4ratud madal ohtlikkuse tase (CVSS 2.6, CVE-2019-11184<\/a><\/noindex>) ja soovitus mitte lubada DDIO ja RDMA kohalikes v\u00f5rkudes, kus ei ole tagatud turvapiiri ja kus on lubatud \u00fchendus usaldamatute klientidega. DDIO-d kasutatakse Intel serveriprotsessorites alates 2012. aastast (Intel Xeon E5, E7 ja SP). AMD ja teiste tootjate platvormid ei ole probleemile vastuv\u00f5tlikud, kuna nad ei toeta andmete salvestamist CPU vahem\u00e4lus.<\/p>\n

R\u00fcnnakumeetod sarnaneb haavatavusega «Throwhammer<\/a><\/noindex>«, mis v\u00f5imaldab muuta \u00fcksikute bitid sisu RAM-is, manipuleerides v\u00f5rgupakettidega RDMA s\u00fcsteemides. Uus probleem on tagaj\u00e4rg t\u00f6\u00f6s, mille eesm\u00e4rk on viivituste minimeerimine DDIO mehhanismi rakendamisel, mis v\u00f5imaldab otsekontakti v\u00f5rkarte ja teiste perifeersete seadmete vahel sisemise m\u00e4lukahe vahel (v\u00f5rgupakettide t\u00f6\u00f6tlemise k\u00e4igus salvestatakse andmed vahem\u00e4llu ja neid saab vahem\u00e4lust v\u00e4lja t\u00f5mmata, ilma et p\u00f6\u00f6rdutaks m\u00e4lu poole).<\/p>\n

DDIO kaudu satuvad CPU vahem\u00e4llu ka andmed, mis on genereeritud pahatahtlikest v\u00f5rgu tegevustest. NetCAT r\u00fcnnak tugineb sellele, et v\u00f5rgu kaardid kaashoidavad andmeid aktiivselt ning andmepakettide t\u00f6\u00f6tlemise kiirus kaasaegsetes kohalikes v\u00f5rkudes on piisav, et m\u00f5jutada vahem\u00e4lu t\u00e4itmist ja m\u00e4\u00e4rata andmete olemasolu v\u00f5i puudumise vahem\u00e4lus, anal\u00fc\u00fcsides andmete edastamise viivitusi. <\/p>\n

Interaktiivsete sessioonide, n\u00e4iteks SSH kaudu, kasutamisel saadetakse v\u00f5rgupakett otse p\u00e4rast klahvi vajutamist, st pakettide vahelised viivitused langevad kokku klahvivajutuste vaheliste viivitustega. Kasutades statistilise anal\u00fc\u00fcsi meetodeid ja arvestades, et klahvivajutuste vaheajad s\u00f5ltuvad tavaliselt klahvi asukohast klaviatuuril, saab teatud t\u00f5en\u00e4osusega rekonstrueerida sisestatavat teavet. N\u00e4iteks kirjutavad enamik inimesi tavaliselt «s» p\u00e4rast «a» v\u00f5rreldes «g» p\u00e4rast «s» oluliselt kiiremini.<\/p>\n

Protsessori m\u00e4lukohtadesse kogunev teave v\u00f5imaldab hinnata ka pakettide t\u00e4pset aega, mis saadetakse v\u00f5rguadapteri kaudu selliste \u00fchenduste t\u00f6\u00f6tlemisel nagu SSH. Teatud liiklust genereerides v\u00f5ib r\u00fcndaja m\u00e4\u00e4rata, millal ilmuvad uued andmed m\u00e4lus, mis on seotud konkreetse tegevusega s\u00fcsteemis. M\u00e4lusisalduse anal\u00fc\u00fcsimiseks kasutatakse meetodit Prime+Probe<\/a><\/noindex>, mis h\u00f5lmab m\u00e4lupuhvri t\u00e4itmist referentsv\u00e4\u00e4rtuste kogumiga ja juurdep\u00e4\u00e4suaegade m\u00f5\u00f5tmist korduva t\u00e4itmise k\u00e4igus muudatuste m\u00e4\u00e4ramiseks. <\/p>\n

\"Intel'i<\/a><\/noindex><\/center><\/p>\n

Eemaldada ei saa ettepanekut kasutada pakutud tehnikat mitte ainult klahvivajutuste, vaid ka muude konfidentsiaalsete andmete tuvastamiseks, mis j\u00e4\u00e4vad CPU m\u00e4llu. Potentsiaalselt saab r\u00fcnnaku l\u00e4bi viia ka RDMA v\u00e4lja l\u00fclitades, kuid ilma RDMA taandub efektiivsus ning teostamine muutub oluliselt keerukamaks. Samuti on v\u00f5imalik kasutada DDIO-d, et luua varjatud sidekanal, mida kasutatakse andmete edastamiseks p\u00e4rast serveri kompromiteerimist, m\u00f6\u00f6da turvameetmete s\u00fcsteeme.<\/p>\n

\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 NetCAT (Network Cache ATtack), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0438, \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 RDMA (Remote direct memory access) \u0438 DDIO […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28530,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38012","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DDIO rakendamine Intel'i kiipides v\u00f5imaldab v\u00f5rgu r\u00fcnnakut klahvivajutuste tuvastamiseks SSH seansi k\u00e4igus | ProHoster","description":"Amsterdam Free University ja Z\u00fcrichi \u00dclikooli tehnikakooli teadlaste r\u00fchm on v\u00e4lja t\u00f6\u00f6tanud v\u00f5rgu r\u00fcnnaku tehnika","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f DDIO \u0432 \u0447\u0438\u043f\u0430\u0445 Intel \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043f\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044e \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:11+00:00","article:modified_time":"2019-10-31T19:21:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38012","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 22:50:57","updated":"2026-01-23 20:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38012"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38012\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/28530"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}