HammerScope: observing DRAM Power consumption using rowhammer - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

HammerScope: observing DRAM Power consumption using rowhammer

Résumé

The constant reduction in memory cell sizes has increased memory density and reduced power consumption, but has also affected its reliability. The Rowhammer attack exploits this reduced reliability to induce bit flips in memory, without directly accessing these bits. Most Rowhammer attacks target software integrity, but some recent attacks demonstrated its use for compromising confidentiality. Continuing this trend, in this paper we observe that the \rh attack strongly correlates with the memory instantaneous power consumption. We exploit this observation to design HammerScope, a Rowhammer-based attack technique for measuring the power consumption of the memory unit. Because the power consumption correlates with the level of activity of the memory, \hs allows an attacker to infer memory activity. To demonstrate the offensive capabilities of HammerScope, we use it to mount three information leakage attacks. We first show that \hs can be used to break kernel address-space layout randomization (KASLR). Our second attack uses memory activity as a covert channel for a Spectre attack, allowing us to leak information from the operating system kernel. Finally, we demonstrate the use of HammerScope for performing website fingerprinting, compromising user privacy. Our work demonstrates the importance of finding systematic solutions for Rowhammer attacks.

Dates et versions

hal-03863034 , version 1 (21-11-2022)

Identifiants

Citer

Yaakov Cohen, Kevin Sam Tharayil, Arie Haenel, Daniel Genkin, Angelos Keromytis, et al.. HammerScope: observing DRAM Power consumption using rowhammer. The 2022 ACM SIGSAC Conference on Computer and Communications Security(ACM CCS), Nov 2022, Los Angeles CA USA, United States. pp.547-561, ⟨10.1145/3548606.3560688⟩. ⟨hal-03863034⟩
19 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More