{"id":116935,"date":"2024-07-04T15:05:10","date_gmt":"2024-07-04T13:05:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake"},"modified":"2024-07-04T15:05:10","modified_gmt":"2024-07-04T13:05:10","slug":"indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","title":{"rendered":"Indirector \u2014 nowa atak mikroarchitektoniczny, kt\u00f3ry dotyka procesory Intel Raptor Lake i Alder Lake","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Badacze z Uniwersytetu Kalifornijskiego w San Diego zaprezentowali now\u0105 metod\u0119 ataku na mikroarchitektoniczne struktury procesor\u00f3w Intel, kt\u00f3ra ma zastosowanie m.in. do CPU opartych na mikroarchitekturach Raptor Lake i Alder Lake. Atak, kt\u00f3ry otrzyma\u0142 kodow\u0105 nazw\u0119 Indirector, umo\u017cliwia zmian\u0119 przebiegu spekulacyjnego wykonania instrukcji w innych procesach i na innych poziomach uprawnie\u0144 (np. w j\u0105drze lub innej maszynie wirtualnej), kt\u00f3re s\u0105 wykonywane w tym samym w\u0105tku CPU z kodem atakuj\u0105cego. W celu demonstrowania dzia\u0142ania metody przygotowano prototyp exploita, kt\u00f3ry pozwala okre\u015bli\u0107 uk\u0142ad adres\u00f3w pami\u0119ci, aby obej\u015b\u0107 mechanizm ochrony ASLR (Address Space Layout Randomization). Dodatkowo, pod licencj\u0105 MIT opublikowano narz\u0119dzie opracowane do analizy i in\u017cynierii odwrotnej logiki mikroarchitektury CPU. <\/p>\n

Zaproponowano dwie metody organizacji ataku. Pierwsza metoda opiera si\u0119 na zniekszta\u0142ceniu zawarto\u015bci bufora prognozowania przej\u015b\u0107 po\u015brednich IBP (Indirect Branch Predictor), u\u017cywanego do prognozowania przej\u015b\u0107 po\u015brednich w sytuacjach, gdy adres lub przesuni\u0119cie dla przej\u015bcia jeszcze nie s\u0105 znane i s\u0105 obliczane w instrukcjach poprzedzaj\u0105cych instrukcj\u0119 przej\u015bcia. Druga metoda dotyczy bufora prognozowania przej\u015b\u0107 BTB (Branch Target Buffer), kt\u00f3ry zawiera informacje o ostatnich przej\u015bciach.<\/p>\n

\"Indirector<\/center><\/p>\n

\"Indirector<\/center><\/p>\n

Wykryte luki umo\u017cliwiaj\u0105 atakuj\u0105cemu okre\u015blenie zawarto\u015bci wpis\u00f3w w buforach IBP i BTB, zawieraj\u0105cych adresy przej\u015b\u0107 u\u017cywane w zewn\u0119trznych procesach, a tak\u017ce dokonanie podmiany dowolnego adresu przej\u015bcia w tabelach danych bufor\u00f3w. W rezultacie atakuj\u0105cy mo\u017ce osi\u0105gn\u0105\u0107 przekierowanie strumienia wykonania zewn\u0119trznego procesu na po\u017c\u0105dany adres w pami\u0119ci w trakcie spekulacyjnego wykonywania instrukcji. Po okre\u015bleniu b\u0142\u0119dnego prognozy wynik spekulacyjnego wykonania zostanie odrzucony, ale adresy i dane odczytane z pami\u0119ci w trakcie spekulacyjnego wykonywania instrukcji osiedl\u0105 si\u0119 w pami\u0119ci podr\u0119cznej, a ich mo\u017cna b\u0119dzie wydoby\u0107, korzystaj\u0105c z jednego z sposob\u00f3w na okre\u015blenie zawarto\u015bci pami\u0119ci podr\u0119cznej na podstawie analizy zmiany czasu dost\u0119pu do danych w pami\u0119ci podr\u0119cznej i nie w pami\u0119ci podr\u0119cznej. Okre\u015blenie dok\u0142adnych adres\u00f3w po\u015brednich przej\u015b\u0107 w praktyce mo\u017cna wykorzysta\u0107 na przyk\u0142ad do obej\u015bcia mechanizmu ochrony ASLR.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b\u0439 \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043a CPU \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Raptor Lake \u0438 Alder Lake. \u0410\u0442\u0430\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Indirector, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0445\u043e\u0434\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 \u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u044f\u0434\u0440\u0435 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":116936,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116935","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Indirector \u2014 nowa atak mikroarchitektoniczny, dotycz\u0105cy procesor\u00f3w Intel Raptor Lake i Alder Lake | ProHoster","description":"Badacze z Uniwersytetu Kalifornijskiego w San Diego zaprezentowali now\u0105 metod\u0119 ataku na mikroarchitektoniczne struktury procesor\u00f3w Intel, kt\u00f3ra ma zastosowanie mi\u0119dzy innymi do procesor\u00f3w opartych na mikroarchitekturach Raptor Lake i Alder.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Indirector \u2014 \u043d\u043e\u0432\u0430\u044f \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f CPU Intel Raptor Lake \u0438 Alder Lake | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b\u0439 \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043a CPU \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Raptor Lake \u0438 Alder.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/indirector-novaya-mikroarhitekturnaya-ataka-zatragivayushhaya-cpu-intel-raptor-lake-i-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-04T13:05:10+00:00","article:modified_time":"2024-07-04T13:05:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116935","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:28:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:28:22","updated":"2026-01-23 03:28:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/116935","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=116935"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/116935\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/116936"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=116935"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=116935"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=116935"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}