Re:Nethammer: Inducing Rowhammer Faults Through Network Requ...
by nanis on Tuesday May 15, 2018 @11:42AM
(#17074797)
> Throwhammer works by registering a large amount of memory space called a buffer on the network card of the targeted device. [1]
> Nethammer is the first truly remote Rowhammer attack, without a single attacker-controlled
line of code on the targeted system. Systems that use uncached memory or flush instructions while handling network requests, e.g., for interaction with the network device, can be attacked using
Nethammer. Other systems can still be attacked if they are protected with quality-of-service techniques like Intel CAT. We demonstrate that the frequency of the cache misses is in all three cases high
enough to induce bit flips. [2]
> Nethammer is the first truly remote Rowhammer attack, without a single attacker-controlled line of code on the targeted system. Systems that use uncached memory or flush instructions while handling network requests, e.g., for interaction with the network device, can be attacked using Nethammer. Other systems can still be attacked if they are protected with quality-of-service techniques like Intel CAT. We demonstrate that the frequency of the cache misses is in all three cases high enough to induce bit flips. [2]
[1]: https://arstechnica.com/information-technology/2018/05/attac...
[2]: https://arxiv.org/pdf/1805.04956.pdf