{"id":101725,"date":"2021-10-22T16:22:55","date_gmt":"2021-10-22T14:22:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave"},"modified":"2021-10-22T16:22:55","modified_gmt":"2021-10-22T14:22:58","slug":"ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave","title":{"rendered":"Sulmi ndaj Intel SGX q\u00eb lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale ose ekzekutimin e kodit n\u00eb enklav\u00eb.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00ebta studiues nga Universiteti Mbrojt\u00ebs s\u00eb Shkenc\u00ebs dhe Teknologjis\u00eb t\u00eb Shkoll\u00ebs Popullore t\u00eb \u00c7lirimit t\u00eb Kin\u00ebs, Universiteti Komb\u00ebtar i Singaporit dhe Shkolla Zvicerane e Teknologjis\u00eb zhvilluan nj\u00eb metod\u00eb t\u00eb re sulmi ndaj enklavave t\u00eb izoluara Intel SGX (Software Guard eXtensions). Sulmi u em\u00ebrua SmashEx dhe shkaktohet nga problemet me ri-\u00ebnjizimin gjat\u00eb trajtimit t\u00eb p\u00ebrjashtimeve n\u00eb komponent\u00ebt runtime p\u00ebr Intel SGX. Metoda e propozuar e sulmit ofron mund\u00ebsin\u00eb, n\u00ebse ka kontroll mbi sistemin operativ, q\u00eb t\u00eb identifikohen t\u00eb dh\u00ebnat konfidenciale t\u00eb vendosura n\u00eb enklav\u00eb ose t\u00eb organizohet kopjimi i kodit t\u00eb tij n\u00eb memorien e enklav\u00ebs dhe ekzekutimi i tij.     <\/p>\n<p>Prototipat e eksploitimeve jan\u00eb p\u00ebrgatitur p\u00ebr enklavat me runtime t\u00eb bazuar n\u00eb Intel SGX SDK (CVE-2021-0186) dhe Microsoft Open Enclave (CVE-2021-33767). N\u00eb rastin e par\u00eb, \u00ebsht\u00eb demonstruar mund\u00ebsia e nxjerrjes s\u00eb \u00e7el\u00ebsit RSA, i p\u00ebrdorur n\u00eb serverin web p\u00ebr HTTPS, nd\u00ebrsa n\u00eb t\u00eb dytin arriti t\u00eb identifikonte p\u00ebrmbajtjen q\u00eb u mor nga utilita cURL, e cila u ekzekutua brenda enklav\u00ebs. Sidoqoft\u00eb, kjo dob\u00ebsi \u00ebsht\u00eb eliminuar programatikisht n\u00eb l\u00ebshimet Intel SGX SDK 2.13 dhe Open Enclave 0.17.1. P\u00ebrve\u00e7 paketave Intel SGX SDK dhe Microsoft Open Enclave, dob\u00ebsia gjithashtu shfaqet n\u00eb SDK-t\u00eb Google Asylo, EdgelessRT, Apache Teaclave, Rust SGX SDK, SGX-LKL, CoSMIX dhe Veracruz.      <\/p>\n<p>Ne e r\u00ebnd\u00ebsishme t\u00eb kujtojm\u00eb se teknologjia SGX (Software Guard Extensions) u shfaq n\u00eb procesor\u00ebt Intel Core t\u00eb gjenerat\u00ebs s\u00eb gjasht\u00eb (Skylake) dhe ofron nj\u00eb s\u00ebr\u00eb instrukcionesh q\u00eb lejojn\u00eb krijimin e zonave t\u00eb mbyllura t\u00eb memorjes p\u00ebr aplikacionet e nivelit p\u00ebrdorues \u2014 enklava, p\u00ebrmbajtja e t\u00eb cilave nuk mund t\u00eb lexohet dhe modifikohet as nga b\u00ebrthama dhe as nga kodi q\u00eb funksionon n\u00eb modet ring0, SMM dhe VMM. T\u00eb transferosh kontrollin n\u00eb kodin brenda enklav\u00ebs nuk \u00ebsht\u00eb e mundur me funksione tradicionale kalimi dhe manipulaci\u00f3n me regjistrat dhe stek\u00ebt \u2014 p\u00ebr t\u00eb kaluar kontrollin n\u00eb enklav\u00eb p\u00ebrdoren instruksione t\u00eb reja t\u00eb krijuara posa\u00e7\u00ebrisht EENTER, EEXIT dhe ERESUME, t\u00eb cilat kryejn\u00eb verifikimin e autorizimeve. Nd\u00ebrsa kodi i vendosur n\u00eb enklav\u00eb mund t\u00eb p\u00ebrdor\u00eb metoda klasike thirrjeje p\u00ebr t\u00eb ndjer\u00eb funksionet brenda enklav\u00ebs dhe nj\u00eb instruksion t\u00eb ve\u00e7ant\u00eb p\u00ebr t\u00eb thirrur funksionet e jashtme. P\u00ebr t\u00eb mbrojtur nga sulmet harduerike, si\u00e7 \u00ebsht\u00eb lidhja me modul t\u00eb DRAM, aplikohet enkriptimi i memories s\u00eb enklav\u00ebs.    <center><img decoding=\"async\" alt=\"Sulmi ndaj Intel SGX q\u00eb lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale ose ekzekutimin e kodit n\u00eb enklav\u00eb.\" src=\"\/wp-content\/uploads\/2021\/10\/02043a311923d63ebb03e4e8a7df76ef.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>Problemi \u00ebsht\u00eb se teknologjia SGX lejon sistemin operativ t\u00eb nd\u00ebrpres\u00eb ekzekutimin e enklav\u00ebs duke gjeneruar nj\u00eb p\u00ebrjashtim harduerik, dhe n\u00eb enklava nuk implementohen si\u00e7 duhet primitiv\u00ebt p\u00ebr p\u00ebrpunimin atomik t\u00eb p\u00ebrjashtimeve t\u00eb tilla. Ndryshe nga b\u00ebrthama e sistemit operativ dhe aplikacionet normale, kodi brenda enklavave nuk ka akses n\u00eb primitiv\u00ebt p\u00ebr organizimin e veprimeve atomike gjat\u00eb trajtimit t\u00eb p\u00ebrjashtimeve q\u00eb ndodhin asinkronisht. Pa k\u00ebta primitiv\u00eb atomik\u00eb, enklava mund t\u00eb nd\u00ebrpritet n\u00eb \u00e7do moment dhe t\u00eb kthehet n\u00eb ekzekutim, madje edhe n\u00eb momentet kur n\u00eb enklav\u00eb po ekzekutohen seksione kritike dhe ajo \u00ebsht\u00eb n\u00eb nj\u00eb gjendje t\u00eb pasigurt (p.sh., kur regjistrat e CPU nuk jan\u00eb ruajtur\/rikthyer).      <center><img decoding=\"async\" alt=\"Sulmi ndaj Intel SGX q\u00eb lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale ose ekzekutimin e kodit n\u00eb enklav\u00eb.\" src=\"\/wp-content\/uploads\/2021\/10\/ce17625514e71876e42e0e86e9ff4fe6.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>P\u00ebr funksionimin normal, teknologjia SGX lejon nd\u00ebrprerjen e ekzekutimit t\u00eb enklav\u00ebs me p\u00ebrjashtime harduerike t\u00eb konfiguruara. Kjo ve\u00e7ori lejon mjediseve runtime t\u00eb enklavave t\u00eb implementojn\u00eb trajtimin e p\u00ebrjashtimeve brenda-enklav\u00eb ose trajtimin e sinjaleve, por gjithashtu mund t\u00eb provokoj\u00eb gabime n\u00eb ri-\u00ebnjizim. Sulmi SmashEx bazohet n\u00eb shfryt\u00ebzimin e mang\u00ebsive n\u00eb SDK, t\u00eb cilat nuk trajtojn\u00eb si\u00e7 duhet situat\u00ebn e thirrjes s\u00eb p\u00ebrs\u00ebritur t\u00eb trajtuesit t\u00eb p\u00ebrjashtimeve. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme q\u00eb p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsin\u00eb, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsi t\u00eb nd\u00ebrpres\u00eb ekzekutimin e enklav\u00ebs, dmth. duhet t\u00eb kontrolloj\u00eb funksionimin e mjedisit sistemor.    <\/p>\n<p>Pas gjenerimit t\u00eb nj\u00eb p\u00ebrjashtimi, sulmuesi merr nj\u00eb dritare t\u00eb vog\u00ebl kohore, gjat\u00eb s\u00eb cil\u00ebs mund t\u00eb kap\u00eb fluxin e ekzekutimit p\u00ebrmes manipulimit t\u00eb paramet\u00ebrve t\u00eb hyrjes. N\u00eb ve\u00e7anti, n\u00ebse ka akses n\u00eb sistem (mjedisi jasht\u00eb enklav\u00ebs), mund t\u00eb krijoj\u00eb nj\u00eb p\u00ebrjashtim t\u00eb ri menj\u00ebher\u00eb pas ekzekutimit t\u00eb instrukcionit t\u00eb hyrjes n\u00eb enklav\u00eb (EENTER), gj\u00eb q\u00eb do t\u00eb \u00e7onte n\u00eb kthimin e kontrollit n\u00eb sistem n\u00eb nj\u00eb faz\u00eb, kur akoma nuk \u00ebsht\u00eb p\u00ebrfunduar konfigurimi i stack-ut p\u00ebr enklav\u00ebn, e cila gjithashtu p\u00ebrfshin ruajtjen e gjendjes s\u00eb regjistrave t\u00eb CPU.     <\/p>\n<p>Sistemi m\u00eb pas mund t\u00eb kthej\u00eb kontrollet p\u00ebrs\u00ebri n\u00eb enklav\u00eb, por pasi steka e enklav\u00ebs gjat\u00eb nd\u00ebrprerjes nuk ishte ngritur, enklava do t\u00eb ekzekutohet me nj\u00eb stek q\u00eb ndodhet n\u00eb memorien e sistemit, gj\u00eb q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb zbatuar metoda shfryt\u00ebzimi t\u00eb bazuara n\u00eb programimin orientuar n\u00eb kthim (ROP \u2014 Return-Oriented Programming). Kur p\u00ebrdoret teknika ROP, sulmuesi nuk p\u00ebrpiqet t\u00eb vendos\u00eb kodin e tij n\u00eb memorien e sistemit, por operon me pjes\u00ebt ekzistuese t\u00eb instrukcioneve makinerike n\u00eb bibliotekat e ngarkuara, t\u00eb cilat p\u00ebrfundojn\u00eb me instruksionin e kthimit t\u00eb kontrolleve (zakonisht, k\u00ebto jan\u00eb p\u00ebrfundimet e funksioneve t\u00eb bibliotekave). Funksionimi i shfryt\u00ebzimit p\u00ebrb\u00ebhet nga nd\u00ebrtimi i nj\u00eb zinxhiri thirrjesh t\u00eb blloqeve t\u00eb ngjashme (t\u00eb quajtura 'gadget') p\u00ebr t\u00eb arritur funksionalitetin e d\u00ebshiruar.         <center><img decoding=\"async\" alt=\"Sulmi ndaj Intel SGX q\u00eb lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale ose ekzekutimin e kodit n\u00eb enklav\u00eb.\" src=\"\/wp-content\/uploads\/2021\/10\/3ffce3d88efaf2dbc576a27b58ab0ced.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <center><img decoding=\"async\" alt=\"Sulmi ndaj Intel SGX q\u00eb lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale ose ekzekutimin e kodit n\u00eb enklav\u00eb.\" src=\"\/wp-content\/uploads\/2021\/10\/ec214f765ca1173f6fd252c1434e5c15.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56008\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u0443\u0447\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041d\u0430\u0440\u043e\u0434\u043d\u043e-\u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0440\u043c\u0438\u0438 \u041a\u0438\u0442\u0430\u044f, \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u043d\u043a\u043b\u0430\u0432\u044b Intel SGX (Software Guard eXtensions). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SmashEx \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441 \u0440\u0435\u0435\u043d\u0442\u0435\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b runtime-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f Intel SGX. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101726,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u0443\u0447\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041d\u0430\u0440\u043e\u0434\u043d\u043e-\u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0440\u043c\u0438\u0438 \u041a\u0438\u0442\u0430\u044f, \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u043d\u043a\u043b\u0430\u0432\u044b Intel SGX (Software Guard eXtensions). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SmashEx \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441 \u0440\u0435\u0435\u043d\u0442\u0435\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b runtime-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f Intel SGX. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 Intel SGX, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0430\u043d\u043a\u043b\u0430\u0432\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u0443\u0447\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041d\u0430\u0440\u043e\u0434\u043d\u043e-\u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0440\u043c\u0438\u0438 \u041a\u0438\u0442\u0430\u044f, \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u043d\u043a\u043b\u0430\u0432\u044b Intel SGX (Software Guard eXtensions). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SmashEx \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441 \u0440\u0435\u0435\u043d\u0442\u0435\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b runtime-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f Intel SGX. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-10-22T14:22:58+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-10-22T14:22:58+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sulmi ndaj Intel SGX, q\u00eb lejon nxjerrjen e t\u00eb dh\u00ebnave konfidenciale ose ekzekutimin e kodit n\u00eb enklav\u00eb | ProHoster","description":"Hulumtuesit nga Universiteti Nd\u00ebrkomb\u00ebtar i Shkencave Teknologjike t\u00eb Shkenc\u00ebs s\u00eb Mbrojtjes t\u00eb Ushtris\u00eb Popullore t\u00eb Kin\u00ebs, Universiteti Komb\u00ebtar i Singaporit dhe Shkolla Politeknike Federale e Zyrihut kan\u00eb zhvilluar nj\u00eb metod\u00eb t\u00eb re sulmi ndaj enklavave t\u00eb izoluara Intel SGX (Software Guard eXtensions). Sulmi mori emrin SmashEx dhe shkaktohet nga problemet me rip\u00ebrdorshm\u00ebrin\u00eb gjat\u00eb trajtimit t\u00eb p\u00ebrjashtimeve gjat\u00eb pun\u00ebs s\u00eb komponent\u00ebve runtime p\u00ebr Intel SGX. Metoda e propozuar e sulmit ofron mund\u00ebsin\u00eb p\u00ebr","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 Intel SGX, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u0430\u043d\u043a\u043b\u0430\u0432\u0435 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u0443\u0447\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041d\u0430\u0440\u043e\u0434\u043d\u043e-\u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0440\u043c\u0438\u0438 \u041a\u0438\u0442\u0430\u044f, \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u043d\u043a\u043b\u0430\u0432\u044b Intel SGX (Software Guard eXtensions). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SmashEx \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441 \u0440\u0435\u0435\u043d\u0442\u0435\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b runtime-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f Intel SGX. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/ataka-na-intel-sgx-pozvolyayushhaya-izvlech-konfidenczialnye-dannye-ili-vypolnit-kod-v-anklave","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-22T14:22:58+00:00","article:modified_time":"2021-10-22T14:22:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-22 14:25:41","updated":"2022-09-28 00:18:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101725"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101725\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/101726"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}