SaTC: CORE: Small: Leveraging Physical Side-Channel Information to Build Detection-Based Rowhammer Defenses

防止进程修改不属于它的内存是安全性的基石。然而，由于动态随机存取存储器（DRAM）的Rowhammer漏洞的发现，这种基本保护最近受到了威胁。研究发现，该漏洞普遍存在于DRAM芯片中，可被利用形成大范围的强大攻击。防御Rowhammer攻击仍然是一个具有挑战性的问题。该项目旨在通过开发新的基于检测的防御技术来解决这一问题。该项目有三大重点。Thrust 1将分析计算过程中某些不可避免的物理副作用（如电磁辐射、声发射和功耗），以发现恶意敲打。Thrust 2将根据发现的物理侧信道信息设计和实施可部署的防御技术，该技术可以健壮地检测并迅速挫败任何潜在的“Rowhammer”攻击，包括隐藏在可信执行环境中的难以捉摸的攻击。推力3涉及实验和评估，以量化和展示项目的意义。在这个项目中开发的技术可能会影响行业，并帮助从业者设计更安全可靠的系统。代码、数据、出版物、演示文稿将公开发布。将在CPS-VO （https://cps-vo.org/）上维持一个项目储存库至少5年。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Preventing a process from modifying a memory it does not own is a cornerstone of security. However, this essential protection has recently come under threat due to the discovery of a vulnerability, known as the Rowhammer for dynamic random-access memory (DRAM). It has been found that this vulnerability commonly exists in DRAM chips and can be exploited to form a wide range of powerful attacks. Defending against Rowhammer attack remains a challenging problem. This project aims to solve this problem by developing novel detection-based defense techniques. The project has 3 major thrusts. Thrust 1 will analyze certain inevitable physical side effects of computation (e.g., electromagnetic radiation, acoustic emanation, and power consumption) to discover malicious hammering. Thrust 2 will design and implement deployable defense techniques based on the discovered physical side-channel information which can robustly detect and promptly thwart any potential Rowhammer attacks, including elusive ones hidden inside trusted execution environments. Thrust 3 concerns experiments and evaluation to quantify and demonstrate the significance of the project. The techniques developed in this project may impact industry and help practitioners design more secure and dependable systems. Code, data, publications, presentations, will be released publicly. A project repository will be maintained on CPS-VO (https://cps-vo.org/) for at least 5 years.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.