Retrospective: Flipping Bits in Memory Without Accessing Them: An Experimental Study of DRAM Disturbance Errors
Retrospective: Flipping Bits in Memory Without Accessing Them: An Experimental Study of DRAM Disturbance Errors
复制标题
DOI：
10.48550/arxiv.2306.16093
复制
发表时间：
2023-06
期刊：
影响因子：
--
通讯作者：
O. Mutlu
中科院分区：
文献类型：
--
作者：
O. Mutlu
我们的ISCA 2014论文提供了第一个科学和详细的特征，分析和现实系统演示，展示了现代商品DRAM芯片中现在通常被称为Rowhammer现象（或脆弱性）系统。它在实验上证明，我们从三个主要DRAM供应商测试的所有DRAM模块中有80％以上容易受到Rowhammer读取干扰现象的攻击：可以预见，可以通过反复访问一个DRAM行，可以预见，一个人可以在真实的DRAM模块中诱导Bitflips（即数据腐败）从而导致电动干扰到物理上附近的行。我们表明，一个简单的无私人用户级程序在多个实际系统中引起的Rowhammer Bitflips，并建议可以使用此证明概念概念构建安全攻击，以劫持对系统的控制或造成其他危害。为了解决Rowhammer问题，我们的论文研究了七种不同的方法（包括一种非常低成本的新型概率方法），其中一些方法影响或在不同的工业产品中被采用。后来的许多研究社区的工作都检查了Rowhammer，建立了真正的安全攻击，提出了新的防御，进一步分析了各种（例如设备/电路，体系结构和系统）级别的问题，并利用Rowhammer来进行各种目的（例如，以逆转 - 工程师DRAM芯片）。行业努力减轻问题，改变内存控制器和DRAM标准/芯片。两家主要的DRAM供应商最终在2023年就该主题撰写了论文，描述了他们当前减轻Rowhammer的方法。在两位学术界的Rowhammer的研究仍然非常活跃和引人入胜。这种简短的回顾性简要分析了我们的ISCA 2014论文及其影响。
Our ISCA 2014 paper provided the first scientific and detailed characterization, analysis, and real-system demonstration of what is now popularly known as the RowHammer phenomenon (or vulnerability) in modern commodity DRAM chips, which are used as main memory in almost all modern computing systems. It experimentally demonstrated that more than 80% of all DRAM modules we tested from the three major DRAM vendors were vulnerable to the RowHammer read disturbance phenomenon: one can predictably induce bitflips (i.e., data corruption) in real DRAM modules by repeatedly accessing a DRAM row and thus causing electrical disturbance to physically nearby rows. We showed that a simple unprivileged user-level program induced RowHammer bitflips in multiple real systems and suggested that a security attack can be built using this proof-of-concept to hijack control of the system or cause other harm. To solve the RowHammer problem, our paper examined seven different approaches (including a novel probabilistic approach that has very low cost), some of which influenced or were adopted in different industrial products. Many later works from various research communities examined RowHammer, building real security attacks, proposing new defenses, further analyzing the problem at various (e.g., device/circuit, architecture, and system) levels, and exploiting RowHammer for various purposes (e.g., to reverse-engineer DRAM chips). Industry has worked to mitigate the problem, changing both memory controllers and DRAM standards/chips. Two major DRAM vendors finally wrote papers on the topic in 2023, describing their current approaches to mitigate RowHammer. Research on RowHammer in both academia continues to be very active and fascinating. This short retrospective provides a brief analysis of our ISCA 2014 paper and its impact.