{"id":138938,"date":"2025-07-14T11:11:58","date_gmt":"2025-07-14T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu"},"modified":"2025-07-14T11:11:58","modified_gmt":"2025-07-14T09:11:59","slug":"gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","title":{"rendered":"GPUHammer \u2014 varijanta Rowhammer napada na GPU memoriju","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Istra\u017eiva\u010di sa Sveu\u010dili\u0161ta u Torontu predstavili su prvi Rowhammer napad koji se koristi za manipulaciju sadr\u017eajem grafi\u010dke memorije. Mogu\u0107nost izvo\u0111enja napada koji dovodi do zamjene do 8 bita podataka demonstrirana je na diskretnom GPU NVIDIA A6000 s GDDR6 memorijom. Kao prakti\u010dan primjer pokazano je kako se takva manipulacija mo\u017ee koristiti za ometanje izvr\u0161avanja modela strojnog u\u010denja i zna\u010dajno (s 80% na 0,1%) smanjenje to\u010dnosti rezultata koje oni pru\u017eaju promjenom vrijednosti samo jednog bita.

\"GPUHammer<\/center> <\/p>\n

Do sada je stvaranje Rowhammer napada za grafi\u010dku memoriju bilo ote\u017eano zbog slo\u017eenosti odre\u0111ivanja fizi\u010dkog rasporeda memorije u GDDR \u010dipovima, velikih ka\u0161njenja pri pristupu memoriji (4 puta sporije) i vi\u0161ih frekvencija osvje\u017eavanja memorije. Osim toga, provo\u0111enju istra\u017eivanja ote\u017eavali su za\u0161titni mehanizmi protiv manipulacija koji uzrokuju prerano gubitak naboja u GDDR \u010dipovima, za analizu kojih su bili potrebni posebni hardverski testni sustavi temeljen na FPGA. <\/p>\n

Za prou\u010davanje grafi\u010dke memorije istra\u017eiva\u010di su razvili novu tehniku obrnute in\u017eenjeringa GDDR DRAM-a, a u samom napadu koristili su optimizacije pristupa memoriji primjenjivane za organizaciju paralelnih izra\u010duna, koje su kori\u0161tene kao poja\u010diva\u010di intenziteta pristupa pojedina\u010dnim \u0107elijama. Za izvo\u0111enje napada na NVIDIA GPU kori\u0161ten je niskonivo kod CUDA. <\/p>\n

U korisni\u010dkom kodu CUDA ne dolazi do poziva na fizi\u010dke adrese memorije, ali se u NVIDIA upravlja\u010dkom programu virtualna memorija odra\u017eava u istu fizi\u010dku memoriju, \u0161to su istra\u017eiva\u010di iskoristili za izra\u010dunavanje pomaka virtualne memorije i odre\u0111ivanje rasporeda memorijskih banaka. Prepoznavanje poziva razli\u010ditim bankama memorije izvr\u0161eno je analizom ka\u0161njenja koja su se razlikovala pri pristupu jednoj ili vi\u0161e banaka memorije. <\/p>\n

U sustavima koji zajedni\u010dki koriste GPU, kao \u0161to su servere<\/a> Za izvo\u0111enje modela strojnog u\u010denja, napad omogu\u0107uje jednom korisniku da promijeni sadr\u017eaj video memorije s podacima drugog korisnika. Kao za\u0161titnu mjeru, tvrtka NVIDIA preporu\u010duje uklju\u010divanje k\u00f4dova za ispravak gre\u0161aka (ECC, Error Correction Codes) komandom «nvidia-smi -e 1» ili kori\u0161tenje serija grafi\u010dkih kartica s podr\u0161kom za OD-ECC (On-Die ECC), kao \u0161to su GeForce RTX 50, RTX PRO, GB200, B200, B100, H100, H200, H20 i GH200. <\/p>\n

Prema podacima istra\u017eiva\u010da, uklju\u010divanje ECC na sustavima s GPU A6000 dovodi do smanjenja performansi izvo\u0111enja modela strojnog u\u010denja za otprilike 10% i smanjenja volumena memorije za 6.25%. Alati za izvo\u0111enje napada i provo\u0111enje obrnute in\u017eenjeringa niskonivojske raspodjele video memorije na sustavima s GPU NVIDIA objavljeni su na GitHubu. <\/p>\n

Napad RowHammer omogu\u0107uje iskrivljavanje sadr\u017eaja pojedina\u010dnih bitova DRAM memorije cikli\u010dnim \u010ditanjem podataka iz susjednih \u0107elija memorije. Budu\u0107i da DRAM memorija predstavlja dvodimenzionalnu matricu \u0107elija, od kojih svaka sastoji od kondenzatora i tranzistora, kontinuirano \u010ditanje istog podru\u010dja memorije dovodi do fluktuacije napona i anomalija koje uzrokuju malu gubitak naboja u susjednim \u0107elijama. Ako je intenzitet \u010ditanja velik, susjedna \u0107elija mo\u017ee izgubiti dovoljno velike koli\u010dine naboja i sljede\u0107i ciklus regeneracije ne\u0107e uspjeti obnoviti njezino prvobitno stanje, \u0161to \u0107e rezultirati promjenom vrijednosti spremljenih podataka u \u0107eliji. <\/p>\n

Metoda napada Rowhammer predlo\u017eena je 2014. godine, nakon \u010dega je me\u0111u istra\u017eiva\u010dima sigurnosti i proizvo\u0111a\u010dima opreme zapo\u010dela igra u «ma\u010dke-mice» — proizvo\u0111a\u010di \u010dipova memorije poku\u0161avali su blokirati ranjivost, dok su istra\u017eiva\u010di pronalazili nove na\u010dine za njezino zaobila\u017eenje. Na primjer, za za\u0161titu od RowHammer, proizvo\u0111a\u010di \u010dipova dodali su mehanizam TRR (Target Row Refresh), no pokazalo se da on blokira izobli\u010denje \u0107elija samo u posebnim slu\u010dajevima, ali ne \u0161titi od svih mogu\u0107ih varijanti napada. Metode napada razvijene su za \u010dipove DDR3, DDR4 i DDR5 na sustavima s procesorima Intel, AMD i ARM. Tako\u0111er su prona\u0111eni na\u010dini za zaobila\u017eenje ispravke gre\u0161aka ECC i predstavljene su opcije za izvo\u0111enje napada putem mre\u017ee i pomo\u0107u izvr\u0161avanja JavaScript koda u pregledniku.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0434\u043e 8 \u0431\u0438\u0442 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a\u0440\u0435\u0442\u043d\u043e\u043c GPU NVIDIA A6000 \u0441 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u044c\u044e GDDR6. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e (\u0441 80% \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":138939,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GPUHammer \u2014 varijanta napada Rowhammer na GPU memoriju | ProHoster","description":"Istra\u017eiva\u010di s Univerziteta Toronto predstavili su prvi napad klase Rowhammer, primijenjen za ometanje sadr\u017eaja video memorije.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GPUHammer \u2014 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 Rowhammer \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c GPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-14T09:11:59+00:00","article:modified_time":"2025-07-14T09:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138938","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:49:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:50:21","updated":"2026-02-09 17:49:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/138938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=138938"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/138938\/revisions"}],"predecessor-version":[{"id":159226,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/138938\/revisions\/159226"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/138939"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=138938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=138938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=138938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}