{"id":121204,"date":"2025-01-02T09:46:09","date_gmt":"2025-01-02T07:46:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer"},"modified":"2025-01-02T09:46:09","modified_gmt":"2025-01-02T07:46:09","slug":"flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer","title":{"rendered":"FlippyRAM \u2014 distrib\u00facia na testovanie \u00fatoku Rowhammer","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Na konferencii 38C3 bol predstaven\u00fd r\u00e1mec FlippyRAM, ur\u010den\u00fd na kontrolu zranite\u013enost\u00ed, ktor\u00e9 umo\u017e\u0148uj\u00fa \u00fatoky typu Rowhammer na zmenu obsahu opera\u010dnej pam\u00e4te. K\u00f3d nastroja je nap\u00edsan\u00fd v C++ a je distribuovan\u00fd pod licenciou MIT. Na zjednodu\u0161enie testovania je vytvoren\u00e1 hotov\u00e1 live-distro (1 GB), ktor\u00e1 umo\u017e\u0148uje vykona\u0165 kontrolu po nabootovan\u00ed z USB Flash, ako aj image kontajnera pre Docker. <\/p>\n

Cie\u013eom projektu je zapojenie pou\u017e\u00edvate\u013eov do v\u00fdskumu, ktor\u00fd sa sna\u017e\u00ed zhroma\u017edi\u0165 \u0161tatistiku o tom, ako sa zranite\u013enosti typu Rowhammer prejavuj\u00fa v be\u017ene pou\u017e\u00edvan\u00fdch syst\u00e9moch. \u00dadaje o v\u00fdsledkoch testovania je mo\u017en\u00e9 odosla\u0165 bu\u010f z na\u010d\u00edtan\u00e9ho disku, alebo ich ru\u010dne prida\u0165 na str\u00e1nku v\u00fdskumu. <\/p>\n

\u00datokov\u00e1 met\u00f3da Rowhammer bola navrhnut\u00e1 pred 10 rokmi, po \u010dom medzi bezpe\u010dnostn\u00fdmi v\u00fdskumn\u00edkmi a v\u00fdrobcami hardv\u00e9ru za\u010dala hra na \"ma\u010dku a my\u0161\" \u2014 v\u00fdrobcovia pam\u00e4\u0165ov\u00fdch \u010dipov sa sna\u017eili zablokova\u0165 zranite\u013enos\u0165, zatia\u013e \u010do v\u00fdskumn\u00edci nach\u00e1dzali nov\u00e9 sp\u00f4soby, ako ju ob\u00eds\u0165. Okrem \u010dipov DDR3 na Intel x86 syst\u00e9moch boli identifikovan\u00e9 met\u00f3dy \u00fatoku na \u010dipy DDR4 a DDR5, syst\u00e9my s procesormi AMD a ARM, varianty obch\u00e1dzania korekcie ch\u00fdb ECC, sp\u00f4soby vykonania \u00fatoku cez sie\u0165 a prostredn\u00edctvom vykon\u00e1vania JavaScript k\u00f3du v prehliada\u010di. <\/p>\n

\u00datok RowHammer umo\u017e\u0148uje skresli\u0165 obsah jednotliv\u00fdch bitov pam\u00e4te DRAM cyklick\u00fdm \u010d\u00edtan\u00edm \u00fadajov z susedn\u00fdch pam\u00e4\u0165ov\u00fdch buniek. Ke\u010f\u017ee pam\u00e4\u0165 DRAM predstavuje dvojdimenzion\u00e1lny mrie\u017ekov\u00fd syst\u00e9m buniek, z ktor\u00fdch ka\u017ed\u00e1 sa sklad\u00e1 z kondenz\u00e1tora a tranzistora, vykon\u00e1vanie nepretr\u017eit\u00e9ho \u010d\u00edtania tej istej oblasti pam\u00e4te vedie k fluktu\u00e1ci\u00e1m nap\u00e4tia a anom\u00e1li\u00e1m, ktor\u00e9 sp\u00f4sobuj\u00fa miernu stratu n\u00e1boja susedn\u00fdch buniek. Ak je intenzita \u010d\u00edtania vysok\u00e1, m\u00f4\u017ee susedn\u00e1 bunka strati\u0165 dostato\u010dn\u00e9 mno\u017estvo n\u00e1boja a nasleduj\u00faci regenera\u010dn\u00fd cyklus nemus\u00ed stihn\u00fa\u0165 obnovi\u0165 jej p\u00f4vodn\u00fd stav, \u010do povedie k zmene hodnoty ulo\u017een\u00fdch \u00fadajov v bunke. Na ochranu proti RowHammer v\u00fdrobcovia \u010dipov pridali mechanizmus TRR (Target Row Refresh), ktor\u00fd blokuje skreslenie buniek v osobn\u00fdch pr\u00edpadoch, ale neochr\u00e1ni pred v\u0161etk\u00fdmi mo\u017en\u00fdmi variantmi \u00fatokov.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 38C3 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a FlippyRAM, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041a\u043e\u0434 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u0421++ \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0433\u043e\u0442\u043e\u0432\u044b\u0439 live-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 (1 \u0413\u0411), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432\u0448\u0438\u0441\u044c \u0441 USB Flash, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0440\u0430\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043b\u044f Docker. \u0426\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121204","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47FlippyRAM \u2014 distrib\u00facia na testovanie \u00fatoku Rowhammer | ProHoster","description":"Na konferencii 38C3 bol predstaven\u00fd r\u00e1mec FlippyRAM, ur\u010den\u00fd na kontrolu zranite\u013enost\u00ed umo\u017e\u0148uj\u00facich vykon\u00e1va\u0165 \u00fatoky typu Rowhammer na zmenu obsahu opera\u010dnej pam\u00e4te.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47FlippyRAM \u2014 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Rowhammer | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 38C3 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a FlippyRAM, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/flippyram-distributiv-dlya-testirovaniya-ataki-rowhammer","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-02T07:46:09+00:00","article:modified_time":"2025-01-02T07:46:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121204","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 09:21:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:21:20","updated":"2026-01-23 09:21:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/121204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=121204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/121204\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=121204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=121204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=121204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}