基于知识的DRAM地址映射发现工具DRAMDig
DRAMDig: A Knowledge-assisted Tool to Uncover DRAM Address Mapping
摘要:
由于最近出现的rowhammer漏洞需要无证的DRAM地址映射,我们提出了一个通用的知识辅助工具,DRAMDig,它需要考虑到领域知识,有效地和确定性地发现任何基于英特尔的机器上的DRAM地址映射。我们在一些机器上测试了DRAM Dig,这些机器具有不同的DRAM芯片和微架构组合,从英特尔Sandy Bridge到Coffee Lake。与以前的工作相比,DRAMDig确定性地反向工程DRAM地址映射在所有测试机器上,平均只有7.8分钟。基于未覆盖的映射,我们进行了双侧Rowhammer测试,结果表明,DRAMDig诱导显着更多的位翻转比以前的作品,证明了未覆盖的DRAM地址映射的正确性。
英文摘要:
As recently emerged rowhammer exploits require undocumented DRAM address mapping, we propose a generic knowledge-assisted tool, DRAMDig, which takes domain knowledge into consideration to efficiently and deterministically uncover the DRAM address mappings on any Intel-based machines. We test DRAMDig on a number of machines with different combinations of DRAM chips and microarchitectures ranging from Intel Sandy Bridge to Coffee Lake. Comparing to previous works, DRAMDig deterministically reverse-engineered DRAM address mappings on all the test machines with only 7.8 minutes on average. Based on the uncovered mappings, we perform double-sided rowhammer tests and the results show that DRAMDig induced significantly more bit flips than previous works, justifying the correctness of the uncovered DRAM address mappings.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。