{"id":38012,"date":"2019-10-31T22:21:11","date_gmt":"2019-10-31T19:21:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh\/"},"modified":"2019-10-31T22:21:11","modified_gmt":"2019-10-31T19:21:11","slug":"realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","title":{"rendered":"Implementimi i DDIO n\u00eb \u00e7ipat Intel lejon n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar nj\u00eb sulm n\u00eb rrjet p\u00ebr regjistrimin e shtypjeve t\u00eb \u00e7el\u00ebsave n\u00eb seanc\u00ebn SSH.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb i Amsterdamit dhe Politeknika Federale e Zyrihut zhvilluan nj\u00eb teknik\u00eb sulmi n\u00eb rrjet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vusec.net\/projects\/netcat\/\">NetCAT<\/a><\/noindex> (Sulmi n\u00eb Kujtes\u00ebn e Rrjetit) q\u00eb, duke p\u00ebrdorur metoda t\u00eb analiz\u00ebs s\u00eb t\u00eb dh\u00ebnave p\u00ebrmes kanaleve an\u00ebsore, mund\u00ebson p\u00ebrcaktimin n\u00eb distanc\u00eb t\u00eb \u00e7el\u00ebsave q\u00eb p\u00ebrdoruesi shtyp gjat\u00eb pun\u00ebs n\u00eb nj\u00eb seanc\u00eb SSH. Problemi shfaqet vet\u00ebm n\u00eb servera q\u00eb p\u00ebrdorin teknologjit\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Remote_direct_memory_access\">RDMA<\/a><\/noindex> (Qasje e drejtp\u00ebrdrejt\u00eb n\u00eb memorje) dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Direct_memory_access#DDIO\">DDIO<\/a><\/noindex> (Input\/Output i drejtp\u00ebrdrejt\u00eb t\u00eb t\u00eb dh\u00ebnave).<\/p>\n<p>Kompania Intel  <noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/insights\/more-information-netcat\">beson<\/a><\/noindex>, \u00e7ka e b\u00ebn t\u00eb v\u00ebshtir\u00eb realizimin e sulmit n\u00eb praktik\u00eb, pasi k\u00ebrkon aksesin e sulmuesit n\u00eb rrjetin lokal, kushte sterile dhe organizimin e lidhjeve nd\u00ebrmjet hosteve duke p\u00ebrdorur teknologjit\u00eb RDMA dhe DDIO, t\u00eb cilat zakonisht p\u00ebrdoren n\u00eb rrjete t\u00eb izoluar, si ato n\u00eb t\u00eb cilat operojn\u00eb klasteret e kompjuter\u00ebve. Problemit i \u00ebsht\u00eb caktuar nj\u00eb nivel i vog\u00ebl rrezikshm\u00ebrie (CVSS 2.6, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00290.html\">CVE-2019-11184<\/a><\/noindex>) dhe u dha rekomandimi q\u00eb t\u00eb mos p\u00ebrfshihen DDIO dhe RDMA n\u00eb rrjetet lokale ku nuk ofrohet nj\u00eb perimeter sigurie dhe lejohet lidhja e klient\u00ebve t\u00eb dyshimt\u00eb. DDIO aplikohet n\u00eb procesor\u00ebt e server\u00ebve Intel q\u00eb nga viti 2012 (Intel Xeon E5, E7 dhe SP). Sistemet mbi baz\u00ebn e procesor\u00ebve AMD dhe prodhuesve t\u00eb tjer\u00eb nuk jan\u00eb t\u00eb ekspozuara ndaj k\u00ebsaj problemi, pasi nuk mb\u00ebshtesin ruajtjen e t\u00eb dh\u00ebnave t\u00eb transmetuara p\u00ebrmes rrjetit n\u00eb cache t\u00eb CPU-s\u00eb.<\/p>\n<p>\u041f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043c\u0435\u0442\u043e\u0434 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48591\">Throwhammer<\/a><\/noindex>&#171;, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e  \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0431\u0438\u0442\u043e\u0432 \u0432 \u041e\u0417\u0423 \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 RDMA. \u041d\u043e\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c  \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 DDIO, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u044f\u043c\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u043a\u044d\u0448\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 (\u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u044b, \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u043a\u044d\u0448 \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u0438\u0437 \u043a\u044d\u0448\u0430, \u0431\u0435\u0437 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043f\u0430\u043c\u044f\u0442\u0438).<\/p>\n<p>Me fal\u00ebnderimi i DDIO, n\u00eb cache-in e procesorit p\u00ebrfshihen gjithashtu t\u00eb dh\u00ebna q\u00eb jan\u00eb gjeneruar gjat\u00eb aktivitetit t\u00eb d\u00ebmsh\u00ebm n\u00eb rrjet. Sulmi NetCAT bazohen n\u00eb faktin se kartat rrjetit aktivisht e ruajn\u00eb t\u00eb dh\u00ebnat, dhe shpejt\u00ebsia e p\u00ebrpunimit t\u00eb paketeve n\u00eb rrjetet moderne lokale \u00ebsht\u00eb e mjaftueshme p\u00ebr t\u00eb ndikuar n\u00eb mbushjen e cache-it dhe p\u00ebr t\u00eb p\u00ebrcaktuar n\u00ebse t\u00eb dh\u00ebnat jan\u00eb ose jo n\u00eb cache p\u00ebrmes analiz\u00ebs s\u00eb vonesave gjat\u00eb transmetimit t\u00eb t\u00eb dh\u00ebnave. <\/p>\n<p>\u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 SSH, \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448\u0438, \u0442.\u0435. \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u043a\u043e\u0440\u0440\u0435\u043b\u0438\u0440\u0443\u044e\u0442 \u0441 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430\u043c\u0438 \u043c\u0435\u0436\u0434\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u044f\u043c\u0438 \u043a\u043b\u0430\u0432\u0438\u0448. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0438 \u043c\u0435\u0436\u0434\u0443 \u043d\u0430\u0436\u0430\u0442\u0438\u044f\u043c\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u043d\u0430 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u0435, \u043c\u043e\u0436\u043d\u043e \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0432\u043e\u0434\u0438\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043b\u044e\u0434\u0435\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0442 &#171;s&#187; \u043f\u043e\u0441\u043b\u0435 &#171;a&#187; \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435, \u0447\u0435\u043c &#171;g&#187; \u043f\u043e\u0441\u043b\u0435 &#171;s&#187;.<\/p>\n<p>Informacioni q\u00eb akumulohet n\u00eb caches-in e procesorit gjithashtu lejon t\u00eb gjykohet koha e sakt\u00eb e paketave t\u00eb d\u00ebrguara nga karta rrjetit gjat\u00eb p\u00ebrpunimit t\u00eb lidhjeve si SSH. Duke gjeneruar nj\u00eb trafik t\u00eb caktuar, sulmuesi mund t\u00eb p\u00ebrcaktoj\u00eb momentin e shfaqjes s\u00eb t\u00eb dh\u00ebnave t\u00eb reja n\u00eb cache, t\u00eb lidhura me aktivitet t\u00eb caktuar n\u00eb sistem. P\u00ebr analiz\u00ebn e p\u00ebrmbajtjes s\u00eb caches p\u00ebrdoret metoda  <noindex><a rel=\"nofollow\" href=\"http:\/\/ieeexplore.ieee.org\/document\/7363305\/\">Prime+Probe<\/a><\/noindex>, q\u00eb parashikon mbushjen e caches me nj\u00eb set referencash dhe matjen e koh\u00ebs s\u00eb aksesit ndaj tyre gjat\u00eb mbushjes s\u00eb p\u00ebrs\u00ebritur p\u00ebr t\u00eb p\u00ebrcaktuar ndryshimet. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.vusec.net\/wp-content\/uploads\/2019\/09\/pasted-image-0-2-1.png\"><img decoding=\"async\" alt=\"Implementimi i DDIO n\u00eb \u00e7ipat Intel lejon n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar nj\u00eb sulm n\u00eb rrjet p\u00ebr regjistrimin e shtypjeve t\u00eb \u00e7el\u00ebsave n\u00eb seanc\u00ebn SSH.\" src=\"\/wp-content\/uploads\/2019\/09\/94cfe014f7db5a164cfbde4493290c61.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Nuk p\u00ebrjashtohet p\u00ebrdorimi i teknik\u00ebs s\u00eb propozuar p\u00ebr t\u00eb p\u00ebrcaktuar jo vet\u00ebm goditjet e tastier\u00ebs, por edhe lloje t\u00eb tjera t\u00eb dh\u00ebnash konfidenciale, q\u00eb akumulohen n\u00eb cache-in e CPU. Potencialisht, sulmi mund t\u00eb realizohet edhe kur RDMA \u00ebsht\u00eb i \u00e7aktivizuar, por pa RDMA, efikasiteti zvog\u00eblohet dhe ekzekutimi b\u00ebhet ndjesh\u00ebm m\u00eb i komplikuar. Gjithashtu, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrdoret DDIO p\u00ebr organizimin e nj\u00eb kanali t\u00eb fsheht\u00eb t\u00eb komunikimit, i cili p\u00ebrdoret p\u00ebr t\u00eb transmetuar t\u00eb dh\u00ebna pas kompromiseve t\u00eb serverit, duke anashkaluar sistemet p\u00ebr mbrojtjen e siguris\u00eb.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"QXut1XBymAk\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/QXut1XBymAk\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51467\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 NetCAT (Network Cache ATtack), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0438, \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 RDMA (Remote direct memory access) \u0438 DDIO [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28530,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38012","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 NetCAT (Network Cache ATtack), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0438, \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 RDMA (Remote direct memory access) \u0438 DDIO\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f DDIO \u0432 \u0447\u0438\u043f\u0430\u0445 Intel \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043f\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044e \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 NetCAT (Network Cache ATtack), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0438, \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 RDMA (Remote direct memory access) \u0438 DDIO\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Realizimi i DDIO n\u00eb \u00e7ipat Intel lejon nj\u00eb sulm n\u00eb rrjet p\u00ebr identifikimin e shtypjeve t\u00eb \u00e7el\u00ebsave n\u00eb nj\u00eb sesion SSH | ProHoster","description":"Nj\u00eb grup k\u00ebrkuesish nga Universiteti i Lir\u00eb i Amsterdami dhe Politeknika Federale e Zvicr\u00ebs n\u00eb Cyrihka ka zhvilluar nj\u00eb teknik\u00eb sulmi n\u00eb rrjet, NetCAT (Network Cache ATtack), e cila, duke p\u00ebrdorur metoda analize t\u00eb t\u00eb dh\u00ebnave p\u00ebrmes kanaleve t\u00eb jashtme, lejon identifikimin n\u00eb distanc\u00eb t\u00eb \u00e7el\u00ebsave t\u00eb shtypur nga p\u00ebrdoruesi gjat\u00eb nj\u00eb sesioni SSH. Problemi shfaqet vet\u00ebm n\u00eb server\u00ebt q\u00eb p\u00ebrdorin teknologjit\u00eb RDMA (Access t\u00eb drejtp\u00ebrdrejt\u00eb t\u00eb memories n\u00eb distanc\u00eb) dhe DDIO.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f DDIO \u0432 \u0447\u0438\u043f\u0430\u0445 Intel \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043f\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044e \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 NetCAT (Network Cache ATtack), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0438, \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0441\u0435\u0430\u043d\u0441\u0435 SSH. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 RDMA (Remote direct memory access) \u0438 DDIO","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/realizatsiya-ddio-v-chipah-intel-dopuskaet-setevuyu-ataku-po-opredeleniyu-nazhatij-klavish-v-seanse-ssh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:11+00:00","article:modified_time":"2019-10-31T19:21:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38012","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 22:50:57","updated":"2026-01-23 20:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38012"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38012\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28530"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}