Lors de la conf\u00e9rence 38C3, le framework FlippyRAM a \u00e9t\u00e9 pr\u00e9sent\u00e9 pour v\u00e9rifier la pr\u00e9sence de vuln\u00e9rabilit\u00e9s permettant des attaques de type Rowhammer visant \u00e0 modifier le contenu de la m\u00e9moire vive. Le code de l'outil est \u00e9crit en C++ et distribu\u00e9 sous licence MIT. Pour faciliter les tests, une distribution live pr\u00eate \u00e0 l'emploi (1 Go) a \u00e9t\u00e9 cr\u00e9\u00e9e, permettant de r\u00e9aliser des v\u00e9rifications en se bootant depuis une cl\u00e9 USB, ainsi qu'une image de conteneur pour Docker. <\/p>\n
L'objectif du projet est d'impliquer les utilisateurs dans une recherche visant \u00e0 rassembler des statistiques sur la mani\u00e8re dont les vuln\u00e9rabilit\u00e9s de type Rowhammer se manifestent dans les syst\u00e8mes couramment utilis\u00e9s. Les donn\u00e9es de test peuvent \u00eatre envoy\u00e9es directement depuis la distribution charg\u00e9e ou ajout\u00e9es manuellement sur le site de recherche. <\/p>\n
La m\u00e9thode d'attaque Rowhammer a \u00e9t\u00e9 propos\u00e9e il y a 10 ans, apr\u00e8s quoi un jeu du chat et de la souris a commenc\u00e9 entre les chercheurs en s\u00e9curit\u00e9 et les fabricants de mat\u00e9riel. Les fabricants de puces m\u00e9moire ont tent\u00e9 de bloquer la vuln\u00e9rabilit\u00e9, tandis que les chercheurs ont trouv\u00e9 de nouvelles fa\u00e7ons de l'exploiter. En plus des puces DDR3 sur des syst\u00e8mes Intel x86, des m\u00e9thodes d'attaque ont \u00e9t\u00e9 identifi\u00e9es sur les puces DDR4 et DDR5, ainsi que sur les syst\u00e8mes avec des processeurs AMD et ARM, des variantes contournant la correction d'erreurs ECC, des moyens d'effectuer des attaques via le r\u00e9seau et par l'ex\u00e9cution de code JavaScript dans le navigateur. <\/p>\n
L'attaque Rowhammer permet de perturber le contenu des bits de m\u00e9moire DRAM en lisant cycliquement les donn\u00e9es des cellules de m\u00e9moire adjacentes. \u00c9tant donn\u00e9 que la m\u00e9moire DRAM est un tableau bidimensionnel de cellules, chacune compos\u00e9e d'un condensateur et d'un transistor, la lecture continue d'une m\u00eame zone de m\u00e9moire entra\u00eene une fluctuation de tension et des anomalies, provoquant une l\u00e9g\u00e8re perte de charge dans les cellules voisines. Si l'intensit\u00e9 de lecture est \u00e9lev\u00e9e, une cellule voisine peut perdre une quantit\u00e9 suffisante de charge, et le cycle de r\u00e9g\u00e9n\u00e9ration suivant ne parvient pas \u00e0 restaurer son \u00e9tat initial, ce qui entra\u00eene un changement de la valeur des donn\u00e9es stock\u00e9es dans la cellule. Pour se prot\u00e9ger contre Rowhammer, les fabricants de puces ont ajout\u00e9 le m\u00e9canisme TRR (Target Row Refresh), qui bloque la d\u00e9formation des cellules dans certaines situations, mais ne prot\u00e8ge pas contre toutes les variantes d'attaques. \u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 38C3 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a FlippyRAM, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041a\u043e\u0434 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u0421++ \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0433\u043e\u0442\u043e\u0432\u044b\u0439 live-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 (1 \u0413\u0411), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432\u0448\u0438\u0441\u044c \u0441 USB Flash, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0440\u0430\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043b\u044f Docker. \u0426\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121204","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47FlippyRAM \u2014 distribution pour tester l'attaque Rowhammer | ProHoster","description":"Lors de la conf\u00e9rence 38C3, le framework FlippyRAM a \u00e9t\u00e9 pr\u00e9sent\u00e9, permettant de v\u00e9rifier la pr\u00e9sence de vuln\u00e9rabilit\u00e9s pouvant mener \u00e0 des attaques de type Rowhammer pour modifier le contenu de la m\u00e9moire vive.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47FlippyRAM \u2014 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Rowhammer | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 38C3 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a FlippyRAM, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-02T07:46:09+00:00","article:modified_time":"2025-01-02T07:46:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121204","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 09:21:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:21:20","updated":"2026-01-23 09:21:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/121204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=121204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/121204\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=121204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=121204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=121204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"