{"id":103200,"date":"2022-02-06T03:36:58","date_gmt":"2022-02-06T01:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux"},"modified":"2022-02-06T03:36:58","modified_gmt":"2022-02-06T01:37:00","slug":"dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","title":{"rendered":"Kasper \u00ebsht\u00eb n\u00eb dispozicion, nj\u00eb skaner p\u00ebr probleme me ekzekutimin spekulativ t\u00eb kodit n\u00eb b\u00ebrtham\u00ebn Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb i Amsterdamit publikoi mjetin Kasper, i cili \u00ebsht\u00eb i dizajnuar p\u00ebr t\u00eb identifikuar n\u00eb b\u00ebrtham\u00ebn Linux fragmente kodi q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr shfryt\u00ebzimin e dob\u00ebsive t\u00eb klas\u00ebs Spectre, t\u00eb shkaktuara nga ekzekutimi spekulativ t\u00eb kodit nga procesori. Tekstet burimore t\u00eb mjeteve shp\u00ebrndahen n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
P\u00ebr t'i kujtuar, p\u00ebr t\u00eb kryer sulme t\u00eb tilla si Spectre v1, t\u00eb cilat mund\u00ebsojn\u00eb identifikimin e p\u00ebrmbajtjes s\u00eb memories, k\u00ebrkohet nj\u00eb sekuenc\u00eb specifike komandash (gadxhetash) n\u00eb kodin me privilegje, e cila \u00e7on n\u00eb ekzekutimin spekulativ t\u00eb udh\u00ebzimeve. Me q\u00ebllim optimizimi, procesori fillon t\u00eb ekzekutoj\u00eb k\u00ebto gadxheta n\u00eb modin spekulativ, m\u00eb pas p\u00ebrcakton se parashikimi i deg\u00ebzimit nuk ishte i sakt\u00eb dhe i kthen operacionet n\u00eb gjendjen fillestare, por t\u00eb dh\u00ebnat e p\u00ebrpunuara gjat\u00eb ekzekutimit spekulativ mbeten n\u00eb cache dhe n\u00eb buferat mikroarkitekturor\u00eb dhe jan\u00eb t\u00eb disponueshme p\u00ebr t'u nxjerr\u00eb me metoda t\u00eb ndryshme p\u00ebr t\u00eb identifikuar t\u00eb dh\u00ebna mbet\u00ebse p\u00ebrmes kanaleve t\u00eb jashtme. <\/p>\n
Mjetet e m\u00ebparshme p\u00ebr skanimin e gadxhetave p\u00ebr dob\u00ebsin\u00eb Spectre, t\u00eb bazuara n\u00eb k\u00ebrkimin e modeleve tipike, treguan nj\u00eb nivel shum\u00eb t\u00eb lart\u00eb t\u00eb njoftimeve fals, duke l\u00ebn\u00eb n\u00eb harres\u00eb shum\u00eb gadxheta reale (eksperimentet treguan se 99% e gadxhetave t\u00eb identifikuara nga k\u00ebto mjete nuk mund t\u00eb p\u00ebrdoren p\u00ebr sulme, nd\u00ebrsa 33% e gadxhetave funksionale, t\u00eb cilat mund t\u00eb \u00e7onin n\u00eb sulm, nuk u vun\u00eb re). <\/p>\n
Gjat\u00eb testimit, b\u00ebrthamja lidhet me bibliotekat runtime Kasper dhe kontrollin q\u00eb punon n\u00eb nivelin LLVM. N\u00eb procesin e verifikimit, simulimi i ekzekutimit spekulativ t\u00eb kodit realizohet me an\u00eb t\u00eb mekanizmit checkpoint-restore, i cili specifikisht ekzekuton deget e kodit q\u00eb jan\u00eb parashikuar gabim, pastaj kthehet n\u00eb gjendjen fillestare p\u00ebrpara fillimit t\u00eb deges. Kasper gjithashtu p\u00ebrpiqet t\u00eb modeloj\u00eb vulnerabilitetet e ndryshme softuerike dhe harduerike, analizon ndikimin e efekteve arkitektonike dhe mikroarkitektonike, dhe kryen testim fuzzing p\u00ebr veprimet e mundshme t\u00eb sulmuesit. P\u00ebr analiz\u00ebn e rrjedhave t\u00eb ekzekutimit p\u00ebrdoret porta DataFlowSanitizer p\u00ebr b\u00ebrtham\u00ebn Linux, dhe p\u00ebr testimin fuzzing nj\u00eb version i modifikuar i paket\u00ebs syzkaller.
<\/center> <\/p>\n
Gjat\u00eb skanimit t\u00eb b\u00ebrtham\u00ebs Linux me an\u00eb t\u00eb Kasper jan\u00eb zbuluar 1379 gadgets t\u00eb panjohur m\u00eb par\u00eb, potencialisht q\u00eb mund t\u00eb shkaktojn\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave gjat\u00eb ekzekutimit spekulativ t\u00eb instructioneve. V\u00ebrehet se ndoshta vet\u00ebm nj\u00eb pjes\u00eb e tyre mund t\u00eb paraqesin probleme reale, por p\u00ebr t\u00eb demonstruar se ekziston rreziku real dhe jo vet\u00ebm teorik, p\u00ebr nj\u00eb nga segmentet problematike t\u00eb kodit \u00ebsht\u00eb zhvilluar nj\u00eb prototip funksional i eksploitit q\u00eb \u00e7on n\u00eb rrjedhjen e informacionit nga memoria e b\u00ebrtham\u00ebs. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Kasper](\"\/wp-content\/uploads\/2022\/02\/3a6cbda67cad6223d91f3ba63d4c1477.jpg\")
<\/center> <\/p>\n![\"Kasper](\"\/wp-content\/uploads\/2022\/02\/7717c28239ef47fa49b36c3088759185.jpg\")
<\/center> <\/p>\n