{"id":138938,"date":"2025-07-14T11:11:58","date_gmt":"2025-07-14T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu"},"modified":"2025-07-14T11:11:58","modified_gmt":"2025-07-14T09:11:59","slug":"gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","title":{"rendered":"GPUHammer \u2014 varianta \u00fatoku Rowhammer na pam\u00e4\u0165 GPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vedci z Torontskej univerzity predstavili prv\u00fd \u00fatok typu Rowhammer, aplikovan\u00fd na skreslenie obsahu grafickej pam\u00e4te. Mo\u017enos\u0165 vykonania \u00fatoku, ktor\u00fd m\u00f4\u017ee nahradi\u0165 a\u017e 8 bitov d\u00e1t, bola demon\u0161trovan\u00e1 na diskr\u00e9tnom GPU NVIDIA A6000 s pam\u00e4\u0165ou GDDR6. Ako praktick\u00fd pr\u00edklad je uk\u00e1zan\u00e9, ak\u00fdm sp\u00f4sobom mo\u017eno vyu\u017ei\u0165 tak\u00e9to skreslenie na zasahovanie do vykon\u00e1vania modelov strojov\u00e9ho u\u010denia a podstatn\u00e9 zn\u00ed\u017eenie presnosti (z 80 % na 0,1 %) v\u00fdsledkov, ke\u010f sa zmen\u00ed hodnota iba jedn\u00e9ho bitu.

\"GPUHammer<\/center> <\/p>\n

Doteraz bolo vytv\u00e1ranie \u00fatokov typu Rowhammer na grafick\u00fa pam\u00e4\u0165 komplikovan\u00e9 kv\u00f4li \u0165a\u017ekostiam pri ur\u010dovan\u00ed fyzick\u00e9ho usporiadania pam\u00e4te v \u010dipoch GDDR, dlh\u00fdmi latenciami pri pr\u00edstupe do pam\u00e4te (4-kr\u00e1t pomal\u0161ie) a vy\u0161\u0161ou frekvenciou obnovovania pam\u00e4te. Okrem toho v\u00fdskumu br\u00e1nili propriet\u00e1rne mechanizmy ochrany pred manipul\u00e1ciou, ktor\u00e9 sa v \u010dipoch GDDR pou\u017e\u00edvali na predch\u00e1dzanie pred\u010dasnej strate n\u00e1boja, a na ich anal\u00fdzu bolo potrebn\u00e9 vytvori\u0165 \u0161peci\u00e1lne hardv\u00e9rov\u00e9 testovacie st\u00e1nky na b\u00e1ze FPGA. <\/p>\n

Na \u0161t\u00fadium grafickej pam\u00e4te vedci vytvorili nov\u00fa techniku reverzn\u00e9ho in\u017einierstva GDDR DRAM, pri\u010dom v samotnom \u00fatoku boli vyu\u017eit\u00e9 optimaliz\u00e1cie pr\u00edstupu do pam\u00e4te ur\u010den\u00e9 na paraleln\u00e9 v\u00fdpo\u010dty, ktor\u00e9 sl\u00fa\u017eili ako zosil\u0148ova\u010de intenzity pr\u00edstupu k jednotliv\u00fdm bunk\u00e1m. Na vykonanie \u00fatoku na GPU NVIDIA bol pou\u017eit\u00fd low-level k\u00f3d CUDA. <\/p>\n

V pou\u017e\u00edvate\u013eskom k\u00f3de CUDA sa nevykon\u00e1va pr\u00edstup na z\u00e1klade fyzick\u00fdch adries pam\u00e4te, ale v ovl\u00e1da\u010di NVIDIA sa virtu\u00e1lna pam\u00e4\u0165 mapovala na rovnak\u00fa fyzick\u00fa pam\u00e4\u0165, \u010do vedci vyu\u017eili na v\u00fdpo\u010det posunutia virtu\u00e1lnej pam\u00e4te a ur\u010denie usporiadania pam\u00e4\u0165ov\u00fdch bankov. Rozpoznanie pr\u00edstupov k r\u00f4znym bankom pam\u00e4te bolo vykonan\u00e9 anal\u00fdzou latenci\u00ed, ktor\u00e9 sa l\u00ed\u0161ili pri pr\u00edstupe k jedn\u00e9mu alebo viacer\u00fdm bankom pam\u00e4te. <\/p>\n

V syst\u00e9moch, ktor\u00e9 spolo\u010dne vyu\u017e\u00edvaj\u00fa GPU, ako s\u00fa servery<\/a> Na vykon\u00e1vanie modelov strojov\u00e9ho u\u010denia \u00fatok umo\u017e\u0148uje jedn\u00e9mu pou\u017e\u00edvate\u013eovi zmeni\u0165 obsah video pam\u00e4te s \u00fadajmi in\u00e9ho pou\u017e\u00edvate\u013ea. Ako opatrenie proti tomu spolo\u010dnos\u0165 NVIDIA odpor\u00fa\u010da povoli\u0165 k\u00f3dy na opravu ch\u00fdb (ECC, Error Correction Codes) pr\u00edkazom «nvidia-smi -e 1» alebo pou\u017ei\u0165 s\u00e9rie grafick\u00fdch kariet s podporou OD-ECC (On-Die ECC), ako s\u00fa GeForce RTX 50, RTX PRO, GB200, B200, B100, H100, H200, H20 a GH200. <\/p>\n

Pod\u013ea v\u00fdskumn\u00edkov zapnutie ECC na syst\u00e9moch s GPU A6000 vedie k zn\u00ed\u017eeniu v\u00fdkonu vykon\u00e1vania modelov strojov\u00e9ho u\u010denia pribli\u017ene o 10 % a zn\u00ed\u017eeniu objemu pam\u00e4te o 6,25 %. N\u00e1stroje na vykonanie \u00fatoku a vykon\u00e1vanie reverzn\u00e9ho in\u017einierstva n\u00edzkoleve\u013eovej rozlo\u017eenia videopam\u00e4te na syst\u00e9moch s GPU NVIDIA boli uverejnen\u00e9 na GitHube. <\/p>\n

\u00datok RowHammer umo\u017e\u0148uje skresli\u0165 obsah jednotliv\u00fdch bitov pam\u00e4te DRAM prostredn\u00edctvom cyklick\u00e9ho \u010d\u00edtania \u00fadajov zo susedn\u00fdch pam\u00e4\u0165ov\u00fdch buniek. Ke\u010f\u017ee pam\u00e4\u0165 DRAM predstavuje dvojrozmern\u00e9 pole buniek, z ktor\u00fdch ka\u017ed\u00e1 pozost\u00e1va z kondenz\u00e1tora a tranzistora, nepretr\u017eit\u00e9 \u010d\u00edtanie tej istej oblasti pam\u00e4te vedie k kol\u00edsaniu nap\u00e4tia a anom\u00e1li\u00e1m, ktor\u00e9 sp\u00f4sobuj\u00fa mal\u00fa stratu n\u00e1boja susedn\u00fdch buniek. Ak je intenzita \u010d\u00edtania vysok\u00e1, susedn\u00e1 bunka m\u00f4\u017ee strati\u0165 dostato\u010dne ve\u013ek\u00e9 mno\u017estvo n\u00e1boja a \u010fal\u0161\u00ed cyklus regener\u00e1cie nesta\u010d\u00ed obnovi\u0165 jej p\u00f4vodn\u00fd stav, \u010do vedie k zmene hodnoty ulo\u017een\u00fdch \u00fadajov v bunke. <\/p>\n

Met\u00f3da \u00fatoku Rowhammer bola navrhnut\u00e1 v roku 2014, po \u010dom medzi vedcami v oblasti bezpe\u010dnosti a v\u00fdrobcami hardv\u00e9ru za\u010dala hra 'ma\u010dka a my\u0161' \u2014 v\u00fdrobcovia pam\u00e4\u0165ov\u00fdch \u010dipov sa sna\u017eili zablokova\u0165 zranite\u013enos\u0165, zatia\u013e \u010do vedci nach\u00e1dzali nov\u00e9 sp\u00f4soby, ako ju ob\u00eds\u0165. Napr\u00edklad na ochranu pred RowHammer v\u00fdrobcovia \u010dipov pridali mechanizmus TRR (Target Row Refresh), no uk\u00e1zalo sa, \u017ee blokuje skreslenie buniek len v osobitn\u00fdch pr\u00edpadoch, ale nechr\u00e1nili pred v\u0161etk\u00fdmi mo\u017en\u00fdmi variantmi \u00fatoku. Met\u00f3dy \u00fatoku boli vyvinut\u00e9 pre \u010dipy DDR3, DDR4 a DDR5 na syst\u00e9moch s procesormi Intel, AMD a ARM. Boli tie\u017e n\u00e1jden\u00e9 sp\u00f4soby, ako ob\u00eds\u0165 opravy ch\u00fdb ECC a navrhnut\u00e9 mo\u017enosti realiz\u00e1cie \u00fatoku cez sie\u0165 a vykon\u00e1van\u00edm JavaScript k\u00f3du v prehliada\u010di.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0434\u043e 8 \u0431\u0438\u0442 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a\u0440\u0435\u0442\u043d\u043e\u043c GPU NVIDIA A6000 \u0441 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u044c\u044e GDDR6. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e (\u0441 80% \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":138939,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GPUHammer \u2014 varianta \u00fatoku Rowhammer na pam\u00e4\u0165 GPU | ProHoster","description":"Vedci z Torontskej univerzity predstavili prv\u00fd typ \u00fatoku Rowhammer, ktor\u00fd sa pou\u017e\u00edva na manipul\u00e1ciu s obsahom grafickej pam\u00e4te.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GPUHammer \u2014 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 Rowhammer \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c GPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-14T09:11:59+00:00","article:modified_time":"2025-07-14T09:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138938","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:49:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:50:21","updated":"2026-02-09 17:49:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/138938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=138938"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/138938\/revisions"}],"predecessor-version":[{"id":159226,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/138938\/revisions\/159226"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/138939"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=138938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=138938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=138938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}