Rabin-Biyu, sabon nau'in harin RowHammer a DRAM

Masu binciken Google sun saki 'Yan kwanaki da suka gabata sabuwar fasahar kai hari ta RowHammer da ake kira "Rabin-Biyu", cewa yana canza abubuwan da ke cikin abubuwan ƙwaƙwalwar ajiya bazuwar isa (DRAM) An sake haifar da harin a cikin wasu kwakwalwan DRAM na zamani, waɗanda masana'antun su suka sami nasarar rage yanayin yanayin kwayar halitta.

Ga waɗanda ba su san irin harin da RowHammer yake ba, ya kamata ku sani cewa yana ba da damar gurɓata abubuwan da ke cikin ragowar RAM karanta bayanai ta kowane lokaci daga ƙwayoyin ƙwaƙwalwar maƙwabta.

Tunda DRAM yana da tsaka-tsakin kwayoyin halitta, kowanne daga cikinsu yana kunshe da capacitor da transistor, shan karatun gaba daya a cikin wannan yankin ƙwaƙwalwar yana haifar da canjin lantarki da rashin daidaito, wanda hakan ke haifar da ƙaramar asarar caji. Idan ƙarfin karatun ya isa sosai, to kwayar maƙwabta na iya rasa adadi mai yawa da yawa kuma tsarin sake sabuntawa na gaba ba zai sami lokaci don dawo da asalin sa ba, wanda zai haifar da canji a ƙimar bayanan da aka adana.

Hammer jere
Labari mai dangantaka:
An ƙirƙiri sabuwar hanyar RowHammer don ƙeta kariya ta ECC

Don kariya daga RowHammer, masu kirkirar dare sun aiwatar da tsarin TRR (Target Row Refresh), wanda ke kariya daga gurɓatar da ƙwayoyin halitta a layuka da ke kusa da su.

Yayin da DDR4 ya zama karɓaɓɓe, sai ya zama kamar Rowhammer ya dusashe saboda godiya ga waɗancan hanyoyin kariya. Koyaya, a cikin 2020, daftarin aiki na TRRespass ya nuna yadda za a juya injiniya da kawar da tsaro ta hanyar rarraba hanyoyin shiga, yana nuna cewa dabarun Rowhammer har yanzu suna aiki. A farkon wannan shekarar, binciken SMASH ya ci gaba da mataki ɗaya kuma ya nuna amfani da JavaScript, ba tare da kiran magabata na farko ba ko kiran tsarin.

Masu binciken Google sun ambaci cewa bisa ga al'ada, an fahimci RowHammer yana aiki a nesa da jere guda: idan aka shiga jere na DRAM akai-akai ("mai kai hari"), ana samun canje-canjen kaɗan kawai a layuka biyu da ke kusa da su ("Wadanda Aka Ci") .

Amma wannan ya canza kamar yadda wasu nau'ikan harin RowHammer suka bayyana kuma wannan saboda matsalar ita ce babu wata hanyar hada kai don aiwatar da TRR kuma kowane mai sana'anta yana fassara TRR ta yadda suke, ta amfani da hanyoyin kariyar kansu kuma ba tare da bayyana ayyukan aiwatarwa ba.

Kuma ana nuna wannan ta hanyar Half-Double hanya wanda ke ba da damar kauce wa waɗannan kariyar ta hanyar sarrafa su ta yadda gurɓataccen ba zai iyakance ga layukan da ke kusa da shi ba kuma ya bazu zuwa wasu layukan ƙwaƙwalwar, kodayake zuwa kaɗan.

Injiniyoyin Google sun nuna cewa:

Don layukan ƙwaƙwalwar ajiya na jere "A", "B da C", yana yiwuwa a kai hari layin "C" tare da samun damar shiga layin "A" da ƙananan ayyukan da ke shafar layin "B". Samun dama ga layin «B» «yayin kai hari, yana kunna layin da ba layi ba kuma yana ba da damar amfani da igiyar» B «azaman safara don fassara tasirin Rowhammer na igiyar» A «zuwa» C «.

Ba kamar harin TRRespass ba, wanda ke ɗaukar lahani a cikin aiwatarwa daban-daban na tsarin rigakafin gurbataccen salon salula, harin Rabin-Biyu ya dogara ne da kaddarorin jiki na sinadarin silicon. Rabin-Biyu yana nuna cewa tasirin tasirin zubewar caji da zai kai ga RowHammer dogaro ne daga nesa, maimakon mannewar salula kai tsaye.

Tare da raguwar yanayin yanayin kwayar halitta a cikin kwakwalwan zamani, radius na tasirin hargitsi shima yana ƙaruwa, saboda haka yana yiwuwa ana iya lura da tasirin a nesa da layi sama da biyu. An lura cewa, tare da kungiyar JEDEC, an samar da shawarwari da yawa don nazarin hanyoyin da za a bi don toshe irin wannan harin.

An bayyana hanyar saboda Google yayi imanin cewa binciken da aka gudanar ya fadada fahimtar lamarin Rowhammer sannan ya jaddada mahimmancin tara masu bincike, masu kirkirar dare, da sauran masu ruwa da tsaki don samar da cikakkiyar hanyar tsaro mai dorewa.

Finalmente Idan kuna da sha'awar sanin game da shi, zaka iya duba bayanan A cikin mahaɗin mai zuwa.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Alhakin bayanai: AB Internet Networks 2008 SL
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.