Kev tiv thaiv Foreshadow tshiab cuam tshuam rau Intel, AMD, IBM thiab ARM processors

Ib pawg cov kws tshawb fawb los ntawm Graz University of Technology hauv Austria thiab Helmholtz Center rau Ntaub Ntawv Kev Nyab Xeeb (CISPA), tau pom qhov tshiab Foreshadow nres vector (L1TF), uas tso cai rau koj kom rho tawm cov ntaub ntawv los ntawm lub cim xeeb ntawm Intel SGX enclaves, SMMs, operating system kernel nco chaw, thiab cov tshuab hauv virtual systems.

Tsis zoo li tus thawj Foreshadow nres, Kev hloov pauv tshiab tsis tshwj xeeb rau Intel cov txheej txheem thiab cuam tshuam CPUs los ntawm lwm cov tuam ntxhab xws li ARM, IBM thiab AMD. Tsis tas li, qhov kev xaiv tshiab tsis tas yuav muaj kev ua haujlwm siab thiab kev tawm tsam tuaj yeem nqa tau txawm tias los ntawm kev khiav JavaScript thiab WebAssembly hauv qhov web browser.

Foreshadow yuav siv sij hawm kom zoo dua ntawm qhov tseeb tias thaum lub cim xeeb nkag ntawm qhov chaw nyob virtual, uas ua kom muaj qhov tshwj xeeb (lub davhlau ya nyob twg tsis ua hauj lwm), tus ntaus nqi kwv yees tawm ntawm qhov chaw nyob thiab thauj cov ntaub ntawv yog tias nws nyob hauv L1 cache.

Txoj kev siv mus ua ntej yog ua tiav ua ntej qhov chaw pib no tiav ntawm lub cim xeeb nplooj ntawv nplooj ntawv thiab tsis hais txog lub xeev ntawm lub cim xeeb nplooj ntawv (PTE) nkag, uas yog, ua ntej paub tseeb tias cov ntaub ntawv nyob hauv lub cev qhov cim xeeb thiab nyeem tau.

Tom qab ua tiav lub cim xeeb muaj kos, thaum tsis muaj qhov taw qhia Tam sim no hauv PTE, lub lag luam raug muab pov tseg, tab sis cov ntaub ntawv raug muab khaws cia thiab tuaj yeem tau rov qab siv cov hau kev los txiav txim siab cov ntsiab lus cache los ntawm sab kev sib tham (los ntawm kev txheeb xyuas qhov kev hloov pauv lub sijhawm nkag mus rau cov ntaub ntawv khaws thiab tsis sau)

Cov kws tshawb nrhiav tau pom que txoj kev tiv thaiv tam sim no ntawm Foreshadow yog qhov tsis muaj txiaj ntsig thiab lawv tau nqis tes nrog kev txhais lus tsis raug ntawm qhov teeb meem.

Lub Foreshadow kom tsis txhob muaj zog tuaj yeem siv tau zoo siv tsis hais siv kev tiv thaiv kev tiv thaiv hauv cov ntsiav uas yav tas los txiav txim siab txaus.

Vim li ntawd, Cov kws tshawb fawb tau ua pov thawj pom tias muaj peev xwm ua qhov haujlwm Foreshadow tua ntawm cov kab ke nrog cov kernels qub, nyob rau hauv txhua txhua muaj Foreshadow tiv thaiv hom yog qhib, nrog rau cov kernels tshiab, uas tsuas yog kev tiv thaiv Specter-v2 yog neeg xiam oob khab (siv Linux xaiv lub nospectre_v2).

Cov nyhuv prefetch tau pom tias tsis muaj feem cuam rau software cov lus qhia prefetch lossis kho vajtse prefetch siv thaum lub cim xeeb nkag, tab sis theej tshwm sim los ntawm kev cia siab ntawm tus neeg siv cov chaw sau npe hauv lub ntsiav.

Qhov kev txhais tsis zoo ntawm qhov ua rau muaj qhov tsis zoo pib pib ua rau qhov kev xav tias cov ntaub ntawv rho tawm hauv Foreshadow tuaj yeem tsuas yog tshwm sim los ntawm L1 cache, thaum lub xub ntiag ntawm qee cov cai snippets (prefetch devices) hauv cov ntsiav nws tuaj yeem pab txhawb cov ntaub ntawv xau tawm ntawm L1 cache, piv txwv li hauv L3 Cache.

Qhov qhia tawm tseem ceeb kuj qhib cov sijhawm los tsim kev tawm tsam tshiab. npaj los txhais cov chaw nyob virtual rau cov chaw hauv lub cev hauv sandbox ib puag ncig thiab txiav txim qhov chaw nyob thiab cov ntaub ntawv khaws cia hauv CPU cov ntawv sau npe.

Raws li demos, cov kws tshawb nrhiav pom lub peev xwm siv lub qhia tshwm sim rau extract cov ntaub ntawv los ntawm ib qho txheej txheem mus rau lwm qhov nrog rau kev hla dhau ntawm kwv yees li 10 daim nyob hauv ob ntawm ib qho system nrog Intel Core i7-6500U CPU.

Tseem muaj kev lim cov ntsiab lus ntawm cov ntawv sau cia Intel SGX enclave (nws siv 15 feeb los txiav txim siab 32-ntsis tus nqi sau rau 64-ntsis sau npe).

Txhawm rau Foreshadow qhov kev tawm tsam ntawm L3 cache, Spectre-BTB kev tiv thaiv cov qauv (Ceg Phiaj Tsis Tuaj) siv nyob rau hauv retpoline thaj teeb tau zoo.

Yog li ntawd, cov kws tshawb nrhiav ntseeg hais tias nws yog qhov tsim nyog yuav tsum tawm hauv kev tiv thaiv retpoline txawm nyob hauv lub nruab nrog CPUs tshiab, uas twb muaj kev tiv thaiv tiv thaiv qhov tsis muaj kev cuam tshuam nyob rau hauv kev soj ntsuam kev tua ntawm CPU cov lus qhia.

Rau lwm cov tes, Cov sawv cev Intel tau hais tias lawv tsis npaj yuav ntxiv ib co kev tiv thaiv ntxiv tawm tsam Foreshadow rau cov txheej txheem thiab txiav txim siab nws txaus kom los pab tiv thaiv Spectre V2 thiab L1TF (Foreshadow) kev tawm tsam.

Source: https://arxiv.org


Cov ntsiab lus ntawm tsab xov xwm ua raws li peb cov ntsiab cai ntawm kev tswj hwm kev ncaj nceesCov. Tshaj tawm ib qho yuam kev nyem no.

Yog thawj tus tuaj tawm tswv yim

Tso koj saib

Koj email chaw nyob yuav tsis tsum luam tawm. Yuav tsum tau teb cov cim nrog *

*

*

  1. Lub luag haujlwm rau cov ntaub ntawv: Miguel Ángel Gatón
  2. Lub hom phiaj ntawm cov ntaub ntawv: Tswj SPAM, kev tswj xyuas tawm tswv yim.
  3. Sau raws cai: Koj kev tso cai
  4. Kev sib txuas lus ntawm cov ntaub ntawv: Cov ntaub ntawv yuav tsis raug xa mus rau lwm tus neeg thib peb tsuas yog los ntawm kev txiav txim siab raug cai.
  5. Cov ntaub ntawv khaws cia: Cov Ntaub Ntawv khaws tseg los ntawm Occentus Networks (EU)
  6. Txoj Cai: Txhua lub sijhawm koj tuaj yeem txwv, rov qab thiab tshem tawm koj cov ntaub ntawv.