{"id":74201,"date":"2020-03-15T08:42:28","date_gmt":"2020-03-15T05:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu"},"modified":"2020-03-15T08:42:28","modified_gmt":"2020-03-15T05:42:28","slug":"chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","title":{"rendered":"\u00c7ipat e memories DDR4 mbeten vulnerab\u00ebl ndaj sulmeve RowHammer, pavar\u00ebsisht mbrojtjes s\u00eb shtuar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb n\u00eb Amsterdam, Shkolla e Lart\u00eb Teknike e Cyrihut dhe kompania Qualcomm realizuan<\/a><\/noindex> studimi mbi efikasitetin e mbrojtjes s\u00eb aplikuar n\u00eb \u00e7ipat modern\u00eb t\u00eb memorjes DDR4 ndaj sulmeve t\u00eb tipit RowHammer<\/a><\/noindex>, t\u00eb cilat lejojn\u00eb ndryshimin e p\u00ebrmbajtjes s\u00eb bitev individuale t\u00eb memories dinamike t\u00eb operativ\u00ebs (DRAM). Rezultatet u treguan t\u00eb pak\u00ebnaqshme dhe \u00e7ipat DDR4 t\u00eb prodhuesve Kryesor\u00eb mbeten mbesin<\/a><\/noindex> t\u00eb preksh\u00ebm (CVE-2020-10255<\/a><\/noindex>). <\/p>\n

K\u00ebrc\u00ebnimi RowHammer lejon t\u00eb ndryshohet p\u00ebrmbajtja e bitev t\u00eb ve\u00e7ant\u00eb t\u00eb memories duke lexuar n\u00eb m\u00ebnyr\u00eb ciklike t\u00eb dh\u00ebnat nga qelizat fqinje t\u00eb memories. Duke qen\u00eb se memoria DRAM \u00ebsht\u00eb nj\u00eb grumbull dy-dimensional i qelizave, secila prej t\u00eb cilave p\u00ebrb\u00ebhet nga nj\u00eb kondensator dhe nj\u00eb tranzistor, ekzekutimi i leximeve t\u00eb vazhdueshme t\u00eb nj\u00eb t\u00eb nj\u00ebjt\u00eb zone t\u00eb memories sjell n\u00eb ndryshime t\u00eb tensionit dhe anomali, duke shkaktuar humbje t\u00eb vog\u00ebl t\u00eb ngarkes\u00ebs nga qelizat fqinje. N\u00ebse intensiteti i leximit \u00ebsht\u00eb mjaft i lart\u00eb, qeliza mund t\u00eb humbas\u00eb nj\u00eb sasi t\u00eb konsiderueshme ngarkese dhe cikli i ardhsh\u00ebm i rip\u00ebrt\u00ebritjes nuk do t\u00eb ket\u00eb koh\u00eb p\u00ebr t\u00eb rikthyer gjendjen e saj fillestare, gj\u00eb q\u00eb do t\u00eb \u00e7onte n\u00eb ndryshimin e vler\u00ebs s\u00eb t\u00eb dh\u00ebnave t\u00eb ruajtura n\u00eb qeliz\u00eb. <\/p>\n

P\u00ebr t\u00eb bllokuar k\u00ebt\u00eb efekt, n\u00eb \u00e7ipat modern\u00eb DDR4 \u00ebsht\u00eb zbatuar teknologjia TRR (Target Row Refresh), e cila \u00ebsht\u00eb e destinuar p\u00ebr t\u00eb parandaluar deformimin e qelizave gjat\u00eb realizimit t\u00eb sulmeve RowHammer. Problemi \u00ebsht\u00eb se nuk ka nj\u00eb qasje t\u00eb vetme p\u00ebr t\u00eb zbatuar TRR dhe \u00e7do prodhues i CPU dhe memories e interpreton TRR n\u00eb m\u00ebnyr\u00ebn e vet, aplikon variante t\u00eb veta mbrojtjeje dhe nuk zbulon detajet e realizimit.
\nStudimi i metodave t\u00eb bllokimit t\u00eb RowHammer t\u00eb aplikuara nga prodhuesit ka lejuar gjetjen e leht\u00eb t\u00eb m\u00ebnyrave p\u00ebr t\u00eb anashkaluar mbrojtjen. Gjat\u00eb verifikimit doli se principi i praktikuar nga prodhuesit \"siguria p\u00ebrmes paqart\u00ebsis\u00eb<\/a><\/noindex> (security by obscurity) gjat\u00eb zbatuarjes s\u00eb TRR ndihmon vet\u00ebm p\u00ebr t\u00eb mbrojtur n\u00eb raste specifike, duke p\u00ebrfshir\u00eb sulme t\u00eb zakonshme, q\u00eb manipulojn\u00eb ndryshimin e ngarkes\u00ebs s\u00eb qelizave n\u00eb nj\u00eb ose dy rreshta fqinje. <\/p>\n

Ullor\u00ebshtuar nga studiuesit, utilita e krijuar lejon t\u00eb testoni ndjeshm\u00ebrin\u00eb e \u00e7ip\u00ebve ndaj varianteve t\u00eb shum\u00ebfishta t\u00eb sulmit RowHammer, ku p\u00ebrpjekja p\u00ebr t\u00eb ndikuar n\u00eb ngarkes\u00eb b\u00ebhet menj\u00ebher\u00eb p\u00ebr disa rreshta t\u00eb qelizave t\u00eb memories. K\u00ebto sulme lejojn\u00eb kalimin e mbrojtjes TRR t\u00eb zbatuar nga disa prodhues dhe \u00e7ojn\u00eb n\u00eb deformatim t\u00eb bit\u00ebve t\u00eb memories edhe n\u00eb pajisje t\u00eb reja me memorie DDR4.
\nNga 42 module DIMM t\u00eb studiuara, 13 module rezultuan t\u00eb ndjeshme ndaj varianteve jo standarde t\u00eb sulmit RowHammer, pavar\u00ebsisht mbrojtjeve t\u00eb deklaruara. Modul\u00ebt problematik\u00eb jan\u00eb prodhuar nga SK Hynix, Micron dhe Samsung, prodhimi i t\u00eb cil\u00ebve p\u00ebrfshin<\/a><\/noindex> 95% t\u00eb tregut DRAM.<\/p>\n

P\u00ebrve\u00e7 DDR4, u studiuan dhe \u00e7ipet LPDDR4 t\u00eb p\u00ebrdorura n\u00eb pajisjet mobile, t\u00eb cilat gjithashtu u d\u00ebshmuan t\u00eb ndjeshme ndaj varianteve t\u00eb avancuara t\u00eb sulmit RowHammer. N\u00eb ve\u00e7anti, problemi preku memorien e p\u00ebrdorur n\u00eb smartphones t\u00eb Google Pixel, Google Pixel 3, LG G7, OnePlus 7 dhe Samsung Galaxy S10.<\/p>\n

Studuesit arrit\u00ebn t\u00eb riprodhojn\u00eb n\u00eb \u00e7ip\u00ebt problematik\u00eb DDR4 disa teknika shfryt\u00ebzimi. P\u00ebr shembull, p\u00ebrdorimi i RowHammer-eksploitit<\/a><\/noindex> p\u00ebr PTE (Page Table Entries) k\u00ebrkonte p\u00ebr t\u00eb fituar privilegjin e kernelit realizimin e sulmit nga 2.3 sekonda deri n\u00eb tre or\u00eb e pes\u00ebmb\u00ebdhjet\u00eb sekonda, var\u00ebsisht nga \u00e7ip\u00ebt e testuar. Sulmi<\/a><\/noindex> p\u00ebr d\u00ebmtimin e \u00e7el\u00ebsit t\u00eb hapur RSA-2048 ruajtur n\u00eb memorie zgjati nga 74.6 sekonda deri n\u00eb 39 minuta e 28 sekonda. Sulmi<\/a><\/noindex> p\u00ebr rrethimin e verifikimit t\u00eb autorizimit p\u00ebrmes modifikimit t\u00eb memories s\u00eb procesit sudo zgjati 54 minuta e 16 sekonda.<\/p>\n

P\u00ebr t\u00eb verifikuar \u00e7ip\u00ebt e memories DDR4 q\u00eb p\u00ebrdorin p\u00ebrdoruesit, \u00ebsht\u00eb publikuar nj\u00eb utilit\u00eb TRRespass<\/a><\/noindex>. P\u00ebr t\u00eb realizuar me sukses sulmin, nevojitet informacion mbi shp\u00ebrndarjen fizike t\u00eb adresave n\u00eb controllerin e memories n\u00eb lidhje me bankat dhe rreshtat e qelizave t\u00eb memories. P\u00ebr t\u00eb p\u00ebrcaktuar shp\u00ebrndarjen, \u00ebsht\u00eb zhvilluar gjithashtu nj\u00eb utilit\u00eb drama<\/a><\/noindex>, e cila k\u00ebrkon ekzekutim me t\u00eb drejtat root. N\u00eb nj\u00eb t\u00eb ardhme t\u00eb af\u00ebrt gjithashtu parashihet<\/a><\/noindex> do t\u00eb publikohet nj\u00eb aplikacion p\u00ebr testimin e memories s\u00eb smartphones.<\/p>\n

Kompani Intel<\/a><\/noindex> dhe AMD<\/a><\/noindex> I rekomanduan q\u00eb t\u00eb p\u00ebrdorim memori me korrigjim gabimesh (ECC), kontroler memorie mb\u00ebshtetje p\u00ebr Maximum Activate Count (MAC) dhe t\u00eb aplikojm\u00eb nj\u00eb frekuenc\u00eb m\u00eb t\u00eb lart\u00eb regenerimi. Megjithat\u00eb, hulumtuesit mendojn\u00eb se p\u00ebr \u00e7ipat e l\u00ebshuar tashm\u00eb nuk ka nj\u00eb zgjidhje p\u00ebr mbrojtje t\u00eb garantuar nga Rowhammer, dhe p\u00ebrdorimi i ECC dhe rritja e frekuenc\u00ebs s\u00eb regenerimit t\u00eb memories kan\u00eb rezultuar t\u00eb jen\u00eb t\u00eb paefektsh\u00ebm. P\u00ebr shembull, \u00ebsht\u00eb propozuar m\u00eb par\u00eb nj\u00eb metod\u00eb<\/a><\/noindex> sulmi ndaj memories DRAM p\u00ebr t\u00eb anashkaluar mbrojtjen ECC, si dhe \u00ebsht\u00eb demonstruar mund\u00ebsia e kryerjes s\u00eb nj\u00eb sulmi ndaj DRAM p\u00ebrmes rrjetit lokal<\/a><\/noindex>, nga sistemi i mysafir\u00ebve<\/a><\/noindex> dhe me ndihm\u00ebn e<\/a><\/noindex> duke ekzekutuar JavaScript n\u00eb shfletues.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualcomm \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0447\u0438\u043f\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438 DDR4 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0431\u0438\u0442\u043e\u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (DRAM). \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0443\u0442\u0435\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0438 \u0447\u0438\u043f\u044b DDR4 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b (CVE-2020-10255). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RowHammer \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043a\u0430\u0437\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-74201","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7ipat e memories DDR4 mbeten t\u00eb ndjesh\u00ebm ndaj sulmeve RowHammer, pavar\u00ebsisht mbrojtjes s\u00eb shtuar | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb n\u00eb Amsterdam, Shkolla e Lart\u00eb Teknike e Cyrihut dhe kompania Qualcomm","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043f\u044b \u043f\u0430\u043c\u044f\u0442\u0438 DDR4 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a RowHammer, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualcomm","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-15T05:42:28+00:00","article:modified_time":"2020-03-15T05:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74201","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:19:29","updated":"2022-09-30 02:28:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=74201"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74201\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=74201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=74201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=74201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}