{"id":102301,"date":"2021-11-16T21:36:47","date_gmt":"2021-11-16T19:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/blacksmith-novaya-ataka-na-pamyat-dram-i-chipy-ddr4"},"modified":"2021-11-16T21:36:47","modified_gmt":"2021-11-16T19:36:47","slug":"blacksmith-novaya-ataka-na-pamyat-dram-i-chipy-ddr4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/blacksmith-novaya-ataka-na-pamyat-dram-i-chipy-ddr4","title":{"rendered":"Blacksmith \u2014 nj\u00eb sulm i ri ndaj memories DRAM dhe \u00e7ipave DDR4","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup studiuesish nga Shkolla e Lart\u00eb Teknike Federale e Cyrihut, Universiteti i Lir\u00eb i Amsterdamit dhe kompania Qualcomm kan\u00eb publikuar nj\u00eb metod\u00eb t\u00eb re sulmi t\u00eb klas\u00ebs RowHammer, e cila mund\u00ebson ndryshimin e p\u00ebrmbajtjes s\u00eb biteve t\u00eb ve\u00e7anta n\u00eb memorien dinamike operative (DRAM). Sulmit i \u00ebsht\u00eb dh\u00ebn\u00eb emri i koduar Blacksmith dhe identifikuesi CVE-2021-42114. Problemi prek shum\u00eb \u00e7ipa DDR4, t\u00eb pajisur me mbrojtje ndaj metodave t\u00eb njohura m\u00eb par\u00eb t\u00eb klas\u00ebs RowHammer. Mjetet p\u00ebr testimin e sistemeve tuaja p\u00ebr ndjeshm\u00ebri ndaj k\u00ebsaj cenueshm\u00ebrie jan\u00eb publikuar n\u00eb GitHub. <\/p>\n

Kujtojm\u00eb se sulmet e klas\u00ebs RowHammer mund\u00ebsojn\u00eb shtremb\u00ebrimin e p\u00ebrmbajtjes s\u00eb biteve t\u00eb ve\u00e7anta t\u00eb memories p\u00ebrmes leximit ciklik t\u00eb t\u00eb dh\u00ebnave nga qelizat fqinje t\u00eb memories. Meqen\u00ebse memoria DRAM p\u00ebrb\u00ebn nj\u00eb varg dyp\u00ebrmasor qelizash, ku secila p\u00ebrb\u00ebhet nga nj\u00eb kondensator dhe nj\u00eb transistor, leximi i vazhduesh\u00ebm i s\u00eb nj\u00ebjt\u00ebs zon\u00eb t\u00eb memories \u00e7on n\u00eb luhatje tensioni dhe anomali q\u00eb shkaktojn\u00eb humbje t\u00eb vogla t\u00eb ngarkes\u00ebs n\u00eb qelizat fqinje. N\u00ebse intensiteti i leximit \u00ebsht\u00eb i lart\u00eb, qeliza fqinje mund t\u00eb humbas\u00eb nj\u00eb sasi mjaft t\u00eb madhe ngarkese dhe cikli i radh\u00ebs i rigjenerimit nuk arrin ta rikthej\u00eb gjendjen e saj fillestare, gj\u00eb q\u00eb sjell ndryshimin e vler\u00ebs s\u00eb t\u00eb dh\u00ebnave t\u00eb ruajtura n\u00eb qeliz\u00eb. <\/p>\n

P\u00ebr t\u00eb mbrojtur nga RowHammer, prodhuesit e \u00e7ipave propozuan mekanizmin TRR (Target Row Refresh), i cili mbron nga deformimi i qelizave n\u00eb rreshta fqinje, por pasi mbrojtja bazohej n\u00eb parimin e 'siguris\u00eb p\u00ebrmes paqart\u00ebsis\u00eb' (security by obscurity), ajo nuk zgjidhte problemin n\u00eb thelb, duke mbrojtur vet\u00ebm nga raste t\u00eb njohura specifike, \u00e7ka lejonte t\u00eb gjejn\u00eb leht\u00ebsisht rrug\u00ebt p\u00ebr t'i shkaktuar d\u00ebm mbrojtjes. P\u00ebr shembull, n\u00eb maj, kompania Google propozoi metod\u00ebn Half-Double, e cila nuk ishte e prekshme nga mbrojtja TRR, pasi gjat\u00eb sulmit prekenin qelizat q\u00eb nuk ishin ngjitur direkt me objektivin. <\/p>\n

Metoda e re Blacksmith ofron nj\u00eb m\u00ebnyr\u00eb tjet\u00ebr p\u00ebr t\u00eb anashkaluar mbrojtjen TRR, e bazuar n\u00eb qasje jo uniforme me frekuenc\u00eb t\u00eb ndryshme ndaj dy ose m\u00eb shum\u00eb rreshtave agresor\u00eb p\u00ebr t\u00eb shkaktuar rrjedhje t\u00eb ngarkes\u00ebs. P\u00ebr t\u00eb p\u00ebrcaktuar modelin e qasjes n\u00eb memorie q\u00eb \u00e7on n\u00eb rrjedhje t\u00eb ngarkes\u00ebs, \u00ebsht\u00eb zhvilluar nj\u00eb fuzzer i posa\u00e7\u00ebm q\u00eb p\u00ebrzgjedh automatikisht parametrat e sulmit p\u00ebr nj\u00eb \u00e7ip t\u00eb caktuar, duke ndryshuar rendin, intensitetin dhe rregullsin\u00eb e qasjes ndaj qelizave. <\/p>\n

Nj\u00eb qasje e till\u00eb, q\u00eb nuk lidhet me ndikimin mbi t\u00eb nj\u00ebjtat qeliza, i b\u00ebn joefektive metodat aktuale t\u00eb mbrojtjes TRR, t\u00eb cilat n\u00eb nj\u00eb form\u00eb apo tjet\u00ebr bazohen n\u00eb num\u00ebrimin e aksesimeve t\u00eb p\u00ebrs\u00ebritura te qelizat dhe, pas arritjes s\u00eb pragjeve t\u00eb caktuara, nisin rikarikimin e qelizave fqinje. Te Blacksmith, modeli i aksesit shp\u00ebrndahet menj\u00ebher\u00eb n\u00eb disa qeliza nga an\u00eb t\u00eb ndryshme t\u00eb qeliz\u00ebs s\u00eb synuar, gj\u00eb q\u00eb lejon arritjen e rrjedhjes s\u00eb ngarkes\u00ebs pa arritur vlerat prag. <\/p>\n

Metoda rezultoi t\u00eb ishte ndjesh\u00ebm m\u00eb e efektshme se m\u00ebnyrat e m\u00ebparshme t\u00eb anashkalimit t\u00eb TRR - hulumtuesit arrit\u00ebn t\u00eb provokonin deformimin e bit\u00ebve n\u00eb t\u00eb gjith\u00eb 40 \u00e7ipat e ndrysh\u00ebm t\u00eb kujtes\u00ebs DDR4 t\u00eb bler\u00eb rishtazi nga Samsung, Micron, SK Hynix dhe nj\u00eb prodhues t\u00eb panjohur (p\u00ebr 4 \u00e7ipa, prodhuesi nuk ishte i specifikuar). P\u00ebr krahasim, metoda e m\u00ebparshme e propozuar nga t\u00eb nj\u00ebjtit hulumtues, TRRespass, rezultoi e efektshme vet\u00ebm p\u00ebr 13 nga 42 \u00e7ipat e testuar at\u00ebher\u00eb. <\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, supozohet se metoda Blacksmith \u00ebsht\u00eb e zbatueshme p\u00ebr 94% t\u00eb t\u00eb gjith\u00eb \u00e7ipave DRAM q\u00eb gjenden n\u00eb treg, por sipas studiuesve, disa \u00e7ipa jan\u00eb m\u00eb t\u00eb cenuesh\u00ebm dhe m\u00eb t\u00eb leht\u00eb p\u00ebr t'u sulmuar se t\u00eb tjer\u00ebt. P\u00ebrdorimi n\u00eb \u00e7ipa i kodeve p\u00ebr korrigjimin e gabimeve (ECC) dhe dyfishimi i frekuenc\u00ebs s\u00eb rifreskimit t\u00eb memories nuk sigurojn\u00eb mbrojtje t\u00eb plot\u00eb, por e v\u00ebshtir\u00ebsojn\u00eb shfryt\u00ebzimin. Vlen t\u00eb theksohet se problemi nuk mund t\u00eb bllokohet n\u00eb \u00e7ipat tashm\u00eb t\u00eb prodhuar dhe k\u00ebrkon zbatimin e nj\u00eb mbrojtjeje t\u00eb re n\u00eb nivel hardware, prandaj sulmi do t\u00eb mbetet aktual edhe p\u00ebr shum\u00eb vite. <\/p>\n

Si shembuj praktik\u00eb jan\u00eb paraqitur metoda t\u00eb p\u00ebrdorimit t\u00eb Blacksmith p\u00ebr t\u00eb ndryshuar p\u00ebrmbajtjen e hyrjeve n\u00eb tabel\u00ebn e faqeve t\u00eb memories (PTE, page table entry) p\u00ebr t\u00eb marr\u00eb privilegje t\u00eb kernelit, p\u00ebr t\u00eb d\u00ebmtuar \u00e7el\u00ebsin publik RSA-2048 t\u00eb ruajtur n\u00eb memorie n\u00eb OpenSSH (mund t\u00eb p\u00ebrshtatet \u00e7el\u00ebsi publik i dikujt tjet\u00ebr makin\u00ebn virtuale<\/a> me \u00e7el\u00ebsin privat t\u00eb sulmuesit p\u00ebr t'u lidhur me VM-n\u00eb e viktim\u00ebs) dhe p\u00ebr t\u00eb anashkaluar verifikimin e autorizimit p\u00ebrmes modifikimit t\u00eb memories s\u00eb procesit sudo p\u00ebr t\u00eb marr\u00eb privilegje root. N\u00eb var\u00ebsi t\u00eb \u00e7ipit, p\u00ebr t\u00eb ndryshuar nj\u00eb bit t\u00eb vet\u00ebm t\u00eb synuar nevojiten nga 3 sekonda deri n\u00eb disa or\u00eb sulmi.

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

Ve\u00e7an\u00ebrisht mund t\u00eb p\u00ebrmendet publikimi i framework-ut t\u00eb hapur LiteX Row Hammer Tester p\u00ebr verifikimin e metodave t\u00eb mbrojtjes s\u00eb memories nga sulmet t\u00eb klas\u00ebs RowHammer, i zhvilluar nga kompania Antmicro me porosi t\u00eb Google. Framework-u bazohet n\u00eb p\u00ebrdorimin e FPGA p\u00ebr kontroll t\u00eb plot\u00eb mbi komandat q\u00eb d\u00ebrgohen drejtp\u00ebrdrejt te \u00e7ipi DRAM, duke eliminuar ndikimin e kontrolluesit t\u00eb memories. P\u00ebr nd\u00ebrveprim me FPGA ofrohet nj\u00eb paket\u00eb mjetesh n\u00eb gjuh\u00ebn Python. Gateway-i i bazuar n\u00eb FPGA p\u00ebrfshin nj\u00eb modul p\u00ebr transmetimin n\u00eb paket\u00eb t\u00eb t\u00eb dh\u00ebnave (p\u00ebrcakton modelet e qasjes n\u00eb memorie), Payload Executor, nj\u00eb kontrollues t\u00eb bazuar n\u00eb LiteDRAM (p\u00ebrpunon t\u00eb gjith\u00eb logjik\u00ebn e nevojshme p\u00ebr DRAM, p\u00ebrfshir\u00eb aktivizimin e rreshtave dhe rifreskimin e memories) dhe CPU VexRiscv. Zhvillimet e projektit shp\u00ebrndahen n\u00ebn licenc\u00ebn Apache 2.0. Mb\u00ebshtetet p\u00ebrdorimi i platformave t\u00eb ndryshme FPGA, p\u00ebrfshir\u00eb Lattice ECP5, Xilinx Series 6, 7, UltraScale dhe UltraScale+.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430, \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualcomm \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0431\u0438\u0442\u043e\u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (DRAM). \u0410\u0442\u0430\u043a\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Blacksmith \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2021-42114. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u0438\u0435 \u0447\u0438\u043f\u044b DDR4, \u0441\u043d\u0430\u0431\u0436\u0451\u043d\u043d\u044b\u0435 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102301","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Blacksmith \u2014 sulm i ri ndaj memories DRAM dhe \u00e7ipave DDR4 | ProHoster","description":"Nj\u00eb grup studiuesish nga Instituti Federal i Teknologjis\u00eb i Cyrihut, Vrije Universiteit Amsterdam dhe kompania Qualcomm kan\u00eb publikuar nj\u00eb metod\u00eb t\u00eb re sulmi t\u00eb klas\u00ebs RowHammer, q\u00eb lejon ndryshimin e p\u00ebrmbajtjes.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/blacksmith-novaya-ataka-na-pamyat-dram-i-chipy-ddr4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Blacksmith \u2014 \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c DRAM \u0438 \u0447\u0438\u043f\u044b DDR4 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430, \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualcomm \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/blacksmith-novaya-ataka-na-pamyat-dram-i-chipy-ddr4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-16T19:36:47+00:00","article:modified_time":"2021-11-16T19:36:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102301","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-16 19:37:42","updated":"2022-10-05 17:04:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102301"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102301\/revisions"}],"predecessor-version":[{"id":164192,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102301\/revisions\/164192"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}