{"id":103200,"date":"2022-02-06T03:36:58","date_gmt":"2022-02-06T01:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux"},"modified":"2022-02-06T03:36:58","modified_gmt":"2022-02-06T01:37:00","slug":"dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","title":{"rendered":"Este disponibil Kasper, scanner pentru problemele legate de execu\u021bia speculativ\u0103 a codului \u00een nucleul Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Liber\u0103 din Amsterdam a publicat instrumentul Kasper, destinat identific\u0103rii \u00een nucleul Linux a secven\u021belor de cod care pot fi utilizate pentru a exploata vulnerabilit\u0103\u021bile de tip Spectre, cauzate de execu\u021bia speculativ\u0103 a codului de c\u0103tre procesor. Codurile surs\u0103 ale instrumentului sunt distribuite sub licen\u021ba Apache 2.0. <\/p>\n

Reamintim c\u0103 pentru a efectua atacuri precum Spectre v1, care permit determinarea con\u021binutului memoriei, este necesar ca \u00een codul privilegiat s\u0103 existe o anumit\u0103 secven\u021b\u0103 de instruc\u021biuni (gadget-uri) care duce la execu\u021bia speculativ\u0103 a instruc\u021biunilor. \u00cen scopul optimiz\u0103rii, procesorul \u00eencepe s\u0103 execute astfel de gadget-uri \u00een mod speculativ, apoi determin\u0103 c\u0103 predic\u021bia sucursal\u0103 nu a fost corect\u0103 \u0219i revine la starea ini\u021bial\u0103, dar datele procesate \u00een timpul execu\u021biei speculative r\u0103m\u00e2n \u00een cache \u0219i \u00een bufferele microarhitecturale \u0219i sunt accesibile pentru extragere prin diferite metode de determinare a datelor reziduale prin canale externe. <\/p>\n

Instrumentele anterioare pentru scanarea gadget-urilor pentru vulnerabilitatea Spectre, bazate pe c\u0103utarea de tipare standard, au ar\u0103tat un nivel foarte ridicat de fals pozitive, omis\u00e2nd multe gadget-uri reale (experimentele au ar\u0103tat c\u0103 99% din gadget-urile identificate de astfel de instrumente nu puteau fi utilizate pentru atacuri, iar 33% din gadget-urile func\u021bionale, capabile s\u0103 duc\u0103 la un atac, nu au fost detectate). <\/p>\n

Pentru a \u00eembun\u0103t\u0103\u021bi calitatea identific\u0103rii gadgeturilor problematice, Kasper modeleaz\u0103 vulnerabilit\u0103\u021bile pe care un atacator le poate utiliza \u00een fiecare etap\u0103 a atacurilor din clasa Spectre - se modeleaz\u0103 probleme care permit controlul datelor (de exemplu, introducerea datelor atacatorului \u00een structurile microarhitecturale pentru a influen\u021ba execu\u021bia speculativ\u0103 ulterioar\u0103 prin atacuri din clasa LVI), accesul la informa\u021bii confiden\u021biale (de exemplu, prin dep\u0103\u0219irea limitelor bufferului sau utilizarea memoriei dup\u0103 eliberare) \u0219i organizarea scurgerii informa\u021biilor confiden\u021biale (de exemplu, prin analiza st\u0103rii cache-ului procesorului sau utiliz\u00e2nd metoda MDS).

\"Este<\/center> <\/p>\n

\u00cen timpul test\u0103rii, nucleul se leag\u0103 de bibliotecile runtime Kasper \u0219i de verific\u0103rile care func\u021bioneaz\u0103 la nivelul LLVM. \u00cen cadrul verific\u0103rii, se realizeaz\u0103 o emulare a execu\u021biei speculative a codului, implementat\u0103 prin intermediul mecanismului de checkpoint-restore, care execut\u0103 ramura de cod prezis gre\u0219it \u0219i se \u00eentoarce apoi la starea ini\u021bial\u0103 \u00eenainte de ramificare. Kasper \u00eencearc\u0103, de asemenea, s\u0103 modeleze diferite vulnerabilit\u0103\u021bi software \u0219i hardware, analizeaz\u0103 influen\u021ba efectelor arhitecturale \u0219i microarhitecturale \u0219i efectueaz\u0103 teste fuzzing asupra posibilelor ac\u021biuni ale unui atacator. Pentru analiza fluxurilor de execu\u021bie este utilizat portul DataFlowSanitizer pentru nucleul Linux, iar pentru testarea fuzzing este folosit\u0103 o versiune modificat\u0103 a pachetului syzkaller.

\"Este<\/center> <\/p>\n

\u00cen timpul scan\u0103rii nucleului Linux cu ajutorul Kasper, au fost descoperite 1379 de gadgeturi anterior necunoscute, care pot duce la scurgeri de date \u00een timpul execu\u021biei speculative a instruc\u021biunilor. Se men\u021bioneaz\u0103 c\u0103, probabil, doar o parte dintre ele pot reprezenta probleme reale, dar pentru a ilustra c\u0103 exist\u0103 \u0219i un adev\u0103rat pericol, nu doar unul teoretic, a fost dezvoltat un prototip func\u021bional al unui exploit pentru unul dintre fragmentele de cod problematice, care duce la scurgerea informa\u021biilor din memoria nucleului.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Kasper, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0442\u0440\u044b\u0432\u043a\u043e\u0432 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u043a\u0430\u043a Spectre v1, \u0434\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":103201,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103200","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kasper este disponibil, scanner pentru probleme cu execu\u021bia speculative a codului \u00een nucleul Linux | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Liber\u0103 din Amsterdam a publicat instrumentul Kasper, destinat detect\u0103rii \u00een nucleul Linux a fragmentelor de cod care pot fi utilizate pentru exploatarea vulnerabilit\u0103\u021bilor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d Kasper, \u0441\u043a\u0430\u043d\u0435\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u043e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Kasper, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0442\u0440\u044b\u0432\u043a\u043e\u0432 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-06T01:37:00+00:00","article:modified_time":"2022-02-06T01:37:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103200","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-06 01:37:56","updated":"2022-10-04 19:30:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103200","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=103200"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/103200\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/103201"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=103200"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=103200"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=103200"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}