{"id":74201,"date":"2020-03-15T08:42:28","date_gmt":"2020-03-15T05:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu"},"modified":"2020-03-15T08:42:28","modified_gmt":"2020-03-15T05:42:28","slug":"chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","title":{"rendered":"\u00c7ipat e memories DDR4 mbeten t\u00eb preksh\u00ebm nga sulmet RowHammer, pavar\u00ebsisht mbrojtjes s\u00eb shtuar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Grupi i studiuesve nga Universiteti i Lir\u00eb t\u00eb Amsterdamit, Shkolla e Lart\u00eb Teknike e Zvicr\u00ebs n\u00eb Cyrih dhe kompania Qualcomm kreun<\/a><\/noindex> studimi i efikasitetit t\u00eb mbrojtjes nga sulmet e klas\u00ebs s\u00eb aplikuar n\u00eb \u00e7ipat e memories DDR4 RowHammer<\/a><\/noindex>, t\u00eb cilat lejojn\u00eb ndryshimin e p\u00ebrmbajtjes s\u00eb bit\u00ebve t\u00eb ve\u00e7ant\u00eb n\u00eb memorien dinamike t\u00eb aksesit t\u00eb rastit (DRAM). Rezultatet ishin t\u00eb pak\u00ebnaqshme dhe \u00e7ipat DDR4 t\u00eb prodhuesve kryesor\u00eb mbeten mbeten<\/a><\/noindex> t\u00eb ndjesh\u00ebm (CVE-2020-10255<\/a><\/noindex>). <\/p>\n

Vulnerabiliteti RowHammer lejon t\u00eb ndryshohet p\u00ebrmbajtja e bit\u00ebve t\u00eb ve\u00e7ant\u00eb t\u00eb memories p\u00ebrmes leximit ciclik t\u00eb t\u00eb dh\u00ebnave nga qelizat fqinje t\u00eb memories. Duke qen\u00eb se memoria DRAM p\u00ebrb\u00ebhet nga nj\u00eb matric\u00eb dy-dimensionale e qelizave, secila prej t\u00eb cilave p\u00ebrb\u00ebhet nga nj\u00eb kondensator dhe nj\u00eb transistor, ekzekutimi i leximit t\u00eb vazhduesh\u00ebm t\u00eb nj\u00eb zone t\u00eb nj\u00ebjt\u00eb t\u00eb memories shkakton fluktime tensioni dhe anomali, duke shkaktuar humbje t\u00eb vog\u00ebl t\u00eb ngarkes\u00ebs n\u00eb qelizat fqinje. N\u00ebse intensiteti i leximit \u00ebsht\u00eb mjaft i madh, at\u00ebher\u00eb nj\u00eb qeliz\u00eb mund t\u00eb humbas\u00eb nj\u00eb sasi mjaft t\u00eb madhe ngarkese dhe cikli i rregjenerimit mund t\u00eb mos arrij\u00eb t\u00eb rikthej\u00eb gjendjen e saj origjinale, duke rezultuar n\u00eb ndryshimin e vler\u00ebs s\u00eb t\u00eb dh\u00ebnave t\u00eb ruajtura n\u00eb qeliz\u00eb. <\/p>\n

P\u00ebr bllokimin e efektit t\u00eb till\u00eb n\u00eb \u00e7ipat e sot\u00ebm DDR4, p\u00ebrdoret teknologjia TRR (Target Row Refresh), e cila ka p\u00ebr q\u00ebllim parandalimin e distorsionit t\u00eb qelizave gjat\u00eb nj\u00eb sulmi RowHammer. Problemi \u00ebsht\u00eb se nuk ka nj\u00eb qasje t\u00eb vetme p\u00ebr implementimin e TRR dhe secili prodhues i CPU dhe memories e interpreton TRR n\u00eb m\u00ebnyr\u00ebn e tij, duke p\u00ebrdorur variante t\u00eb veta mbrojtjeje dhe duke mos zbuluar detaje t\u00eb realizimit.
\nStudimi i metodave t\u00eb bllokimit RowHammer t\u00eb aplikuara nga prodhuesit ka lejuar gjetjen e leht\u00eb t\u00eb m\u00ebnyrave p\u00ebr t\u00eb anashkaluar mbrojtjen. Gjat\u00eb kontrollit, u zbulua se parimi i p\u00ebrdorur nga prodhuesit \"siguria p\u00ebrmes pasiguris\u00eb<\/a><\/noindex> (security by obscurity) n\u00eb implementimin e TRR ndihmon vet\u00ebm p\u00ebr mbrojtjen n\u00eb raste t\u00eb ve\u00e7anta, q\u00eb mbulojn\u00eb sulme tipike q\u00eb manipulojn\u00eb ndryshimin e ngarkes\u00ebs s\u00eb qelizave n\u00eb nj\u00eb ose dy rreshta fqinje. <\/p>\n

Ushtrimi i zhvilluar nga studiuesit lejon t\u00eb kontrollohet ndjeshm\u00ebria e \u00e7ip\u00ebve ndaj varianteve t\u00eb shumta t\u00eb sulmit RowHammer, n\u00eb t\u00eb cilat p\u00ebrpjekja p\u00ebr t\u00eb ndikuar n\u00eb ngarkes\u00eb b\u00ebhet menj\u00ebher\u00eb p\u00ebr disa rreshta qelizash t\u00eb memories. K\u00ebto sulme lejojn\u00eb anashkalimin e mbrojtjes s\u00eb realizuar nga disa prodhues TRR dhe \u00e7ojn\u00eb n\u00eb deformimin e bit\u00ebve t\u00eb memories edhe n\u00eb pajisjet e reja me memorien DDR4.
\nNga 42 module DIMM t\u00eb shqyrtuara, 13 module rezultuan t\u00eb ndjesh\u00ebm ndaj varianteve jo standarde t\u00eb sulmit RowHammer, pavar\u00ebsisht mbrojtjes s\u00eb pretenduar. Modul\u00ebt problematik\u00eb jan\u00eb prodhuar nga SK Hynix, Micron dhe Samsung, produkte t\u00eb cil\u00ebve p\u00ebrfshijn\u00eb<\/a><\/noindex> 95% t\u00eb tregut DRAM.<\/p>\n

P\u00ebrve\u00e7 DDR4, u shqyrtuan dhe \u00e7ipat e p\u00ebrdorur n\u00eb pajisjet mobile LPDDR4, t\u00eb cil\u00ebt gjithashtu doli se jan\u00eb t\u00eb ndjesh\u00ebm ndaj varianteve t\u00eb zgjeruara t\u00eb sulmit RowHammer. N\u00eb ve\u00e7anti, memoria e p\u00ebrdorur n\u00eb smartphone-t Google Pixel, Google Pixel 3, LG G7, OnePlus 7 dhe Samsung Galaxy S10 ka rezultuar problematike.<\/p>\n

Studuesit arrit\u00ebn t\u00eb riprodhojn\u00eb n\u00eb \u00e7ipat problematik\u00eb DDR4 disa teknika shfryt\u00ebzimi. P\u00ebr shembull, p\u00ebrdorimi i RowHammer-exploita<\/a><\/noindex> p\u00ebr PTE (Page Table Entries) k\u00ebrkonte p\u00ebrfitimin e privilegjeve t\u00eb kernelit duke avantazhuar sulmin nga 2.3 sekonda deri n\u00eb tre or\u00eb e pes\u00ebmb\u00ebdhjet\u00eb sekonda, var\u00ebsisht nga \u00e7ipat e testuar. Sulmi<\/a><\/noindex> sulmi p\u00ebr d\u00ebmtimin e \u00e7el\u00ebsit publik RSA-2048 t\u00eb ruajtur n\u00eb memory zgjati nga 74.6 sekonda deri n\u00eb 39 minuta e 28 sekonda. Sulmi<\/a><\/noindex> p\u00ebr anashkalimin e verifikimit t\u00eb autorizimit p\u00ebrmes modifikimit t\u00eb memories s\u00eb procesit sudo zgjati 54 minuta e 16 sekonda.<\/p>\n

P\u00ebr t\u00eb testuar \u00e7ipat e memories DDR4 t\u00eb p\u00ebrdorur nga individ\u00ebt, \u00ebsht\u00eb publikuar nj\u00eb utilitar TRRespass<\/a><\/noindex>. P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm k\u00ebrkohet informacion n\u00eb lidhje me organizimin e adresave fizike n\u00eb lidhje me bankat dhe rreshtat e qelizave t\u00eb memories q\u00eb p\u00ebrdoret n\u00eb kontrollorin e memories. P\u00ebr t\u00eb p\u00ebrcaktuar organizimin \u00ebsht\u00eb zhvilluar gjithashtu nj\u00eb utilitar drama<\/a><\/noindex>, i cili k\u00ebrkon q\u00eb t\u00eb iniciohet me t\u00eb drejta root. N\u00eb nj\u00eb koh\u00eb t\u00eb af\u00ebrt do t\u00eb planohet<\/a><\/noindex> publikojm\u00eb nj\u00eb aplikacion p\u00ebr testimin e memories s\u00eb smartphone-ve.<\/p>\n

Kompania Intel<\/a><\/noindex> dhe AMD<\/a><\/noindex> k\u00ebshilluan p\u00ebr mbrojtje t\u00eb p\u00ebrdorin memorien me korrigjim gabimesh (ECC), kontrollor\u00ebt e memories me mb\u00ebshtetje p\u00ebr Maximum Activate Count (MAC) dhe t\u00eb aplikojn\u00eb nj\u00eb frekuenc\u00eb m\u00eb t\u00eb lart\u00eb rregjenerimi. Megjithat\u00eb, studiuesit besojn\u00eb se p\u00ebr \u00e7ipat e l\u00ebshuar m\u00eb par\u00eb nuk ka nj\u00eb zgjidhje p\u00ebr mbrojtjen e garantuar nga Rowhammer, dhe p\u00ebrdorimi i ECC dhe rritja e frekuenc\u00ebs s\u00eb rregjenerimit t\u00eb memories ishin t\u00eb paefektsh\u00ebm. P\u00ebr shembull, m\u00eb par\u00eb ishte propozuar nj\u00eb metod\u00eb<\/a><\/noindex> sulmi n\u00eb memorien DRAM p\u00ebr t\u00eb anashkaluar mbrojtjen ECC, si dhe \u00ebsht\u00eb treguar mund\u00ebsia e realizimit t\u00eb sulmit n\u00eb DRAM p\u00ebrmes rrjetit lokal<\/a><\/noindex>, nga sistemi mik<\/a><\/noindex> dhe me ndihm\u00ebn e<\/a><\/noindex> n\u00ebp\u00ebrmjet aktivizimit t\u00eb JavaScript n\u00eb shfletues.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualcomm \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0447\u0438\u043f\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438 DDR4 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0430 RowHammer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0431\u0438\u0442\u043e\u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (DRAM). \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0443\u0442\u0435\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0438 \u0447\u0438\u043f\u044b DDR4 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b (CVE-2020-10255). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RowHammer \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043a\u0430\u0437\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-74201","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7ipat e memories DDR4 mbeten t\u00eb cenuesh\u00ebm ndaj sulmeve RowHammer, pavar\u00ebsisht mbrojtjes s\u00eb shtuar | ProHoster","description":"Grupi i studiuesve nga Universiteti i Lir\u00eb t\u00eb Amsterdamit, Shkolla e Lart\u00eb Teknike e Zvicr\u00ebs n\u00eb Cyrih dhe kompania Qualcomm","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0438\u043f\u044b \u043f\u0430\u043c\u044f\u0442\u0438 DDR4 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a RowHammer, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430, \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u043e\u0439 \u0432\u044b\u0441\u0448\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0448\u043a\u043e\u043b\u044b \u0426\u044e\u0440\u0438\u0445\u0430 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualcomm","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/chipy-pamyati-ddr4-ostayutsya-uyazvimy-dlya-atak-rowhammer-nesmotrya-na-dobavlennuyu-zashhitu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-15T05:42:28+00:00","article:modified_time":"2020-03-15T05:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74201","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:19:29","updated":"2022-09-30 02:28:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=74201"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74201\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=74201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=74201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=74201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}