{"id":181791,"date":"2026-05-29T02:48:54","date_gmt":"2026-05-29T00:48:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera"},"modified":"2026-05-29T02:48:54","modified_gmt":"2026-05-29T00:48:55","slug":"opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","title":{"rendered":"Determinarea site-urilor vizitate prin analiza activit\u0103\u021bii SSD din browserul web","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Tehnic\u0103 din Graz (Austria) a dezvoltat o tehnic\u0103 de atac prin canale colaterale numit\u0103 FROST (Fingerprinting Remotely using OPFS-based SSD Timing), care permite, prin analiza activit\u0103\u021bii unui SSD, s\u0103 determine site-urile accesate de utilizatori cu o precizie de 88,95%, precum \u0219i aplica\u021biile care ruleaz\u0103 pe sistem, cu o precizie de 95,83%. Metoda poate fi folosit\u0103 \u0219i pentru a organiza un canal de comunicare ascuns \u00eentre o aplica\u021bie care func\u021bioneaz\u0103 local \u0219i codul JavaScript care ruleaz\u0103 \u00een browser. Performan\u021ba acestui schimb de date \u00een Linux a fost de 661 bit\/s, iar \u00een macOS \u2013 892 bit\/s.<\/p>\n

Atacul se bazeaz\u0103 pe faptul c\u0103 caracterul modific\u0103rii timpului de acces la SSD \u00een timpul deschiderii unui site sau rul\u0103rii unei aplica\u021bii web este specific pentru un anumit site \u0219i aplica\u021bie. Folosind tipare standardizate ale modific\u0103rii timpului de acces pentru site-uri \u0219i aplica\u021bii m\u0103surate anterior, se poate eviden\u021bia activitatea specific\u0103 acestora \u00een contextul altor opera\u021biuni de intrare\/ie\u0219ire. \u00cen contextul atacului implementat, pentru corelarea \u00eent\u00e2rzierilor \u00een intrare\/ie\u0219ire cu semn\u0103turile site-urilor \u0219i aplica\u021biilor.
\na fost utilizat\u0103 o re\u021bea neuronal\u0103 convolu\u021bional\u0103 capabil\u0103 s\u0103 identifice modele \u00een fundalul zgomotului generat de intr\u0103ri\/ie\u0219iri externe.<\/p>\n

Pentru func\u021bionarea metodei \u00een browser, a fost implicat API-ul OPFS (Origin-Private FileSystem), care permite crearea de fi\u0219iere \u00een sistemul de fi\u0219iere local (fi\u0219ierele sunt create \u00eentr-o parte izolat\u0103 a sistemului de fi\u0219iere asociat\u0103 cu site-ul). Analiza timpului de acces la SSD se realizeaz\u0103 prin m\u0103surarea \u00eent\u00e2rzierilor \u00een timpul opera\u021biunilor identice cu datele. Pentru a evita influen\u021ba asupra opera\u021biunilor cu fi\u0219ierele din cache-ul paginilor, \u00een timpul atacului este necesar\u0103 crearea de fi\u0219iere de dimensiuni foarte mari, care dep\u0103\u0219esc dimensiunea memoriei RAM disponibile. <\/p>\n

Ca m\u0103sur\u0103 pentru a contracara atacul, produc\u0103torilor de browsere li s-a sugerat s\u0103 solicite utilizatorului o confirmare separat\u0103 pentru accesul la API-ul OPFS sau s\u0103 limiteze dimensiunea maxim\u0103 a fi\u0219ierului la o valoare care s\u0103 nu dep\u0103\u0219easc\u0103 dimensiunea memoriei RAM. \u00cen prezent, Chrome \u0219i Safari permit, prin API-ul OPFS, crearea de fi\u0219iere care ocup\u0103 p\u00e2n\u0103 la 60% din spa\u021biul de disc disponibil.<\/p>\n

Dezvoltatorii Chromium de la Google nu recunosc aceste atacuri prin canale laterale ca fiind vulnerabilit\u0103\u021bi. Dezvoltatorii Safari de la Apple nu exclud implementarea \u00een viitor a metodelor de contracarare a acestor atacuri. Compania Mozilla a recunoscut existen\u021ba problemei, dar nu a implementat \u00eenc\u0103 o solu\u021bie.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c FROST (Fingerprinting Remotely using OPFS-based SSD Timing), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f \u0438\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 JavaScript-\u043a\u043e\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0430\u0439\u0442\u044b \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 88.95%, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c\u044e 95.83%. \u041c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181791","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Determinarea site-urilor vizitate prin analiza activit\u0103\u021bii SSD din browserul web | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Tehnic\u0103 din Graz (Austria) a dezvoltat o tehnic\u0103 de atac prin canale laterale numit\u0103 FROST (Fingerprinting Remotely using OPFS-based SSD Timing), care permite analiza activit\u0103\u021bii.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u0435\u043c\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 SSD \u0438\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c FROST (Fingerprinting Remotely using OPFS-based SSD Timing), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/opredelenie-poseshhaemyh-sajtov-cherez-analiz-aktivnosti-ssd-iz-web-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-29T00:48:55+00:00","article:modified_time":"2026-05-29T00:48:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=181791"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181791\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=181791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=181791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=181791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}