{"id":103200,"date":"2022-02-06T03:36:58","date_gmt":"2022-02-06T01:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux"},"modified":"2022-02-06T03:36:58","modified_gmt":"2022-02-06T01:37:00","slug":"dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dostupen-kasper-skaner-problem-so-spekulyativnym-vypolneniem-koda-v-yadre-linux","title":{"rendered":"Kasper \u00ebsht\u00eb n\u00eb dispozicion, skaneri i problemeve me ekzekutimin spekulativ t\u00eb kodit n\u00eb b\u00ebrtham\u00ebn Linux.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb i Amsterdamit publikoi mjetin Kasper, i dedikuar p\u00ebr identifikimin n\u00eb b\u00ebrtham\u00ebn Linux t\u00eb segmenteve t\u00eb kodit q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr shfryt\u00ebzimin e dob\u00ebsive t\u00eb klas\u00ebs Spectre, t\u00eb shkaktuara nga ekzekutimi spekulativ t\u00eb kodit nga procesori. Kodi burimor i mjeteve shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
T\u00eb kujtojm\u00eb se p\u00ebr t\u00eb kryer sulme t\u00eb tilla si Spectre v1, t\u00eb cilat lejojn\u00eb p\u00ebrcaktimin e p\u00ebrmbajtjes s\u00eb memories, k\u00ebrkohet q\u00eb n\u00eb kodin me privilegje t\u00eb ekzistoj\u00eb nj\u00eb rend n\u00eb vijim komandash (gadgetesh) q\u00eb \u00e7on n\u00eb ekzekutimin spekulativ t\u00eb instrukcioneve. N\u00eb q\u00ebllim t\u00eb optimizimit, procesori fillon t\u00eb ekzekutoj\u00eb k\u00ebto gadgete n\u00eb modalitetin spekulativ, pastaj p\u00ebrcakton se parashikimi i deg\u00ebzimit nuk \u00ebsht\u00eb realizuar dhe rikthen operacionet n\u00eb gjendjen e origjin\u00ebs, por t\u00eb dh\u00ebnat e trajtuara gjat\u00eb procesit t\u00eb ekzekutimit spekulativ mbeten n\u00eb cache dhe tampon\u00ebt mikroarkitekturor\u00eb dhe jan\u00eb t\u00eb disponueshme p\u00ebr t'u ekskuruar prej tyre duke p\u00ebrdorur metoda t\u00eb ndryshme p\u00ebr p\u00ebrcaktimin e t\u00eb dh\u00ebnave mbet\u00ebse p\u00ebrmes kanaleve t\u00eb tjera. <\/p>\n
Mjetet e m\u00ebparshme p\u00ebr skanimin e pajisjeve p\u00ebr cenueshm\u00ebrin\u00eb Spectre, t\u00eb bazuara n\u00eb k\u00ebrkimin e modele t\u00eb zakonshme, treguan nj\u00eb nivel shum\u00eb t\u00eb lart\u00eb t\u00eb falsifikimeve, duke l\u00ebn\u00eb pas shum\u00eb pajisje reale (eksperimentet treguan se 99% e pajisjeve q\u00eb u identifikuan nga k\u00ebto mjete nuk mund t\u00eb p\u00ebrdoren p\u00ebr sulme, nd\u00ebrsa 33% e pajisjeve funksionale q\u00eb mund t\u00eb \u00e7onin n\u00eb sulm nuk u vun\u00eb re). <\/p>\n
Gjat\u00eb testimit, b\u00ebrthama lidhet me bibliotekat runtime Kasper dhe kontrollet q\u00eb funksionojn\u00eb n\u00eb nivelin LLVM. Gjat\u00eb prosesit t\u00eb kontrollit, simulon ekzekutimin spekulativ t\u00eb kodit, i realizuar me an\u00eb t\u00eb mekanizmit checkpoint-restore, i cili vepron posa\u00e7\u00ebrisht me deg\u00ebn e kodit q\u00eb \u00ebsht\u00eb parashikuar gabim dhe pastaj kthehet n\u00eb gjendjen fillestare para fillimit t\u00eb deg\u00ebzimit. Kasper gjithashtu p\u00ebrpiqet t\u00eb modeloj\u00eb vulnerabilitetet e ndryshme softuerike dhe harduerike, analizon ndikimin e efekteve arkitektonike dhe mikroarkitektonike, dhe realizon testimin e fuzzing-ut p\u00ebr veprimet e mundshme t\u00eb nj\u00eb sulmuesi. P\u00ebr analizimin e rrjedhave t\u00eb ekzekutimit p\u00ebrdoret porti DataFlowSanitizer p\u00ebr b\u00ebrtham\u00ebn Linux, dhe p\u00ebr testimin e fuzzing-ut nj\u00eb version i modifikuar i paket\u00ebs syzkaller.
<\/center> <\/p>\n
Gjat\u00eb skanimit t\u00eb b\u00ebrtham\u00ebs Linux me ndihm\u00ebn e Kasper u identifikuan 1379 pajisje t\u00eb panjohura m\u00eb par\u00eb, q\u00eb potencialisht mund t\u00eb \u00e7onin n\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave gjat\u00eb ekzekutimit spekulativ t\u00eb instrukcioneve. Vlen t\u00eb theksohet se ndoshta vet\u00ebm nj\u00eb pjes\u00eb e tyre mund t\u00eb paraqes\u00eb probleme reale, por p\u00ebr t\u00eb demonstruar se ka v\u00ebrtet nj\u00eb rrezik dhe jo vet\u00ebm teori, \u00ebsht\u00eb zhvilluar nj\u00eb prototip funksional eksploati q\u00eb \u00e7on n\u00eb rrjedhjen e informacionit nga memorja e b\u00ebrtham\u00ebs p\u00ebr nj\u00eb nga segmentet problematike t\u00eb kodit. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Kasper](\"\/wp-content\/uploads\/2022\/02\/3a6cbda67cad6223d91f3ba63d4c1477.jpg\")
<\/center> <\/p>\n![\"Kasper](\"\/wp-content\/uploads\/2022\/02\/7717c28239ef47fa49b36c3088759185.jpg\")
<\/center> <\/p>\n