SaTC: CORE: Small: Leveraging Physical Side-Channel Information to Build Detection-Based Rowhammer Defenses

防止进程修改其不拥有的内存是安全的基石。然而，由于最近发现了一个漏洞，即动态随机存取存储器(DRAM)的Rowhammer漏洞，这一基本保护受到了威胁。现已发现，该漏洞普遍存在于DRAM芯片中，可被利用来形成范围广泛的强大攻击。防御Rowhammer攻击仍然是一个具有挑战性的问题。该项目旨在通过开发新的基于检测的防御技术来解决这一问题。该项目有三个主要推动力。推力1将分析计算的某些不可避免的物理副作用(例如，电磁辐射、声发射和功率消耗)，以发现恶意锤击。推力2将基于发现的物理侧通道信息设计和实施可部署的防御技术，该技术可以强有力地检测并迅速挫败任何潜在的Rowhammer攻击，包括隐藏在可信执行环境中的难以捉摸的攻击。推力3涉及实验和评估，以量化和论证该项目的意义。该项目开发的技术可能会对行业产生影响，并帮助从业者设计更安全、更可靠的系统。代码、数据、出版物、演示文稿将公开发布。一个项目库将在CPS-VO(https://cps-vo.org/))上维护至少5年。这一奖励反映了国家科学基金会的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Preventing a process from modifying a memory it does not own is a cornerstone of security. However, this essential protection has recently come under threat due to the discovery of a vulnerability, known as the Rowhammer for dynamic random-access memory (DRAM). It has been found that this vulnerability commonly exists in DRAM chips and can be exploited to form a wide range of powerful attacks. Defending against Rowhammer attack remains a challenging problem. This project aims to solve this problem by developing novel detection-based defense techniques. The project has 3 major thrusts. Thrust 1 will analyze certain inevitable physical side effects of computation (e.g., electromagnetic radiation, acoustic emanation, and power consumption) to discover malicious hammering. Thrust 2 will design and implement deployable defense techniques based on the discovered physical side-channel information which can robustly detect and promptly thwart any potential Rowhammer attacks, including elusive ones hidden inside trusted execution environments. Thrust 3 concerns experiments and evaluation to quantify and demonstrate the significance of the project. The techniques developed in this project may impact industry and help practitioners design more secure and dependable systems. Code, data, publications, presentations, will be released publicly. A project repository will be maintained on CPS-VO (https://cps-vo.org/) for at least 5 years.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.