首页 资讯 安全 查看内容

研究人员发现SpectrePrime和MeltdownPrime新变种

2018-2-16 18:15 |来自: 互联网 5169 2

摘要: 作为近年来曝出的最严重的计算机硬件安全漏洞,别有用心的攻击者可以利用处理器的“幽灵”(Spectre)和“熔毁”(Meltdown)漏洞来访问计算机上受保护的内存信息,比如浏览器中保存的账号密码、或者电子邮件等隐私 ...

作为近年来曝出的最严重的计算机硬件安全漏洞,别有用心的攻击者可以利用处理器的“幽灵”(Spectre)和“熔毁”(Meltdown)漏洞来访问计算机上受保护的内存信息,比如浏览器中保存的账号密码、或者电子邮件等隐私内容。尴尬的是,尽管全行业软硬件厂商在努力制作补丁,有关这两个安全漏洞的新变种攻击还是不断涌现。

英特尔、AMD 等软硬件厂商推出了修复补丁,但对计算机性能造成了一定程度的不利影响。深受影响的英特尔表示,该公司承诺在后续 CPU 中消除这一漏洞。

然而英伟达和普林斯顿大学的一支研究团队,刚刚在一份新报告(PDF)中揭示了两个 Meltdown 和 Spectre 漏洞利用的新方法,分别叫做“MeltdownPrime”和“SpectrePrime”。

据悉,攻击者可以让 CPU 的两个核心互相敌对,以欺骗多核系统放弃缓存数据。下面是这份研究报告总结部分的摘录:

Spectre 和 Meltdown 存在的情况下,相干失效使得一种 Prime+Probe 攻击成为了可能,精度可达到与 Flush+Reload 攻击的相同级别,以及泄露相同的信息类型。

利用缓存的失效,变种 Meltdown 和 Spectre 在使用 Prime+Probe 旁路信道攻击时,能够以相同的细粒度来泄露受害者的内存。

基于某种无效的一致性协议,MeltdownPrime 和 SpectrePrime 由系统中发起的写入请求引起。

总而言之,当前可用的补丁和安全更新有可能已经解决了变种攻击的问题。但是基于最新的状况,英特尔和 AMD 或需要考虑对其即将推出的 CPU 硬件加以调整。

[编译自:TechSpot]

对文章打分

研究人员发现SpectrePrime和MeltdownPrime新变种

1 (50%)

1 (50%)

已有 条意见

最新资讯

今日最热

, groupId: 6522988862396957192, itemId: 6522988862396957192, type: 2, subInfo: { isOriginal: false, source: cnBeta.COM, time: 2018-02-16 11:26:00 }, tagInfo: { tags: [{"name":"信息安全"},{"name":"网络安全"},{"name":"英特尔"},{"name":"CPU"},{"name":"超微半导体"}], groupId: 6522988862396957192, itemId: 6522988862396957192, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6522988862396957192, itemId: 6522988862396957192, comments_count: 0, ban_comment: 0 }, mediaInfo: { uid: 5924685662, name: cnBeta.COM, avatar: //p2.pstatp.com/large/12460/7193798703, openUrl: /c/user/5924685662/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/5924685662/","avatar_url":"https://p2.pstatp.com/large/12460/7193798703","media_id":5924685662,"name":"cnBeta.COM","user_verified":false},"articles":[{"item_id":"6523083426105393671","url":"/item/6523083426105393671","title":"FCC发现比特币挖矿对700MHz无线通信频率带来干扰"},{"item_id":"6523070688855589379","url":"/item/6523070688855589379","title":"微软不再将Candy Crush Saga等游戏作为Windows 10 Pro预装应用"},{"item_id":"6523048148850442755","url":"/item/6523048148850442755","title":"微软Surface Pen最新专利公布 触控滚动新设计"},{"item_id":"6523025247761859076","url":"/item/6523025247761859076","title":"一块五万年前的陨铁 刚以23.75万美元的价格被拍卖"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":44,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"阿里发现微信高危漏洞立即通知腾讯,腾讯发现支付宝安全漏洞揶揄一番,对此你怎么看?","single_mode":true,"gallary_image_count":2,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6522610713192562947/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/666c000102990bf49ac7","group_id":"6522610713192562947"},{"comments_count":143,"media_avatar_url":"//p1.pstatp.com/large/6cb0000d8ccd3d4d031","is_feed_ad":false,"is_diversion_page":false,"title":"不知newifi数字黄金为何物,谈何数字黄金衍生价值?","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6520366639056159240/","source":"高端视角","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/6163000242b8816cd863","group_id":"6520366639056159240","is_related":true,"media_url":"/c/user/5892663737/"},{"comments_count":19,"media_avatar_url":"//p1.pstatp.com/large/ef6000de662feaddc5c","is_feed_ad":false,"is_diversion_page":false,"title":"区块链(Block Chain)浅论","single_mode":true,"gallary_image_count":2,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6521599904312197639/","source":"五味坛","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/616a0004f2127f7fa7dc","group_id":"6521599904312197639","is_related":true,"media_url":"/c/user/52116998320/"},{"comments_count":0,"media_avatar_url":"//p2.pstatp.com/large/2597/5780884853","is_feed_ad":false,"is_diversion_page":false,"title":"肝病不再可怕!生物迷你肝为人类健康打开希望之门","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6522416957667410436/","source":"来宝网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/61720002cc831fc157c7","group_id":"6522416957667410436","is_related":true,"media_url":"/c/user/4128981912/"},{"comments_count":84,"media_avatar_url":"//p3.pstatp.com/large/2c61000059f9ff8e2887","is_feed_ad":false,"is_diversion_page":false,"title":"科学家通过激光雷达技术发现,玛雅文明的先进程度令人无法想象","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6522315733152563719/","source":"环球趣看点","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/617000036f09d7e4d648","group_id":"6522315733152563719","is_related":true,"media_url":"/c/user/63411472953/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/item/6522988862396957192/, abstract: 2018年02月16日11:26次阅读稿源:cnBeta.COM条评论作为近年来曝出的最严重的计算机硬件安全漏洞。
声明:文章版权归原作者所有 部分文章转自互联网 如有侵权请联系 [邮箱地址] 删除

路过

雷人

握手

鲜花

鸡蛋

返回顶部