CRII: SaTC: Rowhammer Attack on Fresh and Recycled Memory Chips: Security Risks and Defenses

CRII：SaTC：对新鲜和回收内存芯片的 Rowhammer 攻击：安全风险和防御

• 批准号: 1850241
• 负责人: Md Rahman
• 金额: $ 17.5万
• 依托单位: University of Alabama in Huntsville
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-03-01 至 2022-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1850241&HistoricalAwards=false
• 关键词: CRII; SaTC; Rowhammer; Attack; Fresh

Rowhammer is a software-assisted cyber attack that causes malicious changes to the target memory cells of dynamic random-access memory (DRAM) due to charge leakage, by crafting memory access patterns which rapidly access the same row multiple times. This research focuses on proper hardware characterization towards a Rowhammer-resistant memory system. This characterization will also inform whether Rowhammer susceptibility increases with aging, and if so, will enable a method for detecting recycled chips.The research will (i) identify the Rowhammer-prone memory cells through hardware characterization, (ii) develop a low-cost system-level technique to build a Rowhammer-resistant memory system, (iii) experimentally study the vulnerability of counterfeit (especially recycled) DRAM chips to Rowhammer, and (iv) develop a framework that identifies recycled DRAM chips, if a relationship between Rowhammer effectiveness and aging is found. The research findings and tools will be of high interest to the individual consumers, federal agencies, data centers, healthcare, enterprise, and automobile systems, that are the targets of Rowhammer attacker. The cross-cutting nature of this research will broaden the advancement of knowledge in the field of computer systems, security, and reliability and will enable collaboration between various communities (systems/device/reliability/hardware-security/algorithms). The graduate and undergraduate students working on this project will receive training and grow expertise in the related fields. The research findings will also be used in existing and new graduate/undergraduate courses on hardware-security for training and education.All publicly released data, source codes, and peer-reviewed research articles will be made available during the period of performance and afterward, and will be posted at https://www.trust-hub.org/data and http://webpages.uah.edu/~mtr0011.This award is jointly funded by the Division of Computer and Network Systems in the Directorate for Computer & Information Science & Engineering and the Established Program to Stimulate Competitive Research in the Office of Integrative Activities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

Rowhammer是一种软件辅助的网络攻击，它由于电荷泄漏而导致动态随机访问存储器（DRAM）的目标存储单元，通过制作内存访问模式多次迅速访问同一行。这项研究重点是针对抗锤锤的内存系统的适当硬件表征。这种表征还将告知罗哈默的敏感性是否随着衰老而增加，如果是的话，将启用一种检测可回收芯片的方法。研究将（i）通过硬件表征确定RowHammer-易于发挥的记忆单元（（ii），（ii）开发一种低成本的系统级技术来建立一种对ROWHAMMER-ROWHAMMER-CORMESTIST-CORMISS-CORMISS cORESIPS cORTERIAMS cORTIENT cORTIENT COLTIENT COLLINVERICTION（III II），（III），（iii contrynernernnersiper）（iii），（iii），（iii），（iii），（iii），（iii），（iii） Rowhammer和（iv）开发一个框架，该框架是否发现了Rowhammer有效性和衰老之间的关系，可以识别回收的DRAM芯片。研究发现和工具将引起个人消费者，联邦机构，数据中心，医疗保健，企业和汽车系统的兴趣，这是Rowhammer攻击者的目标。这项研究的横切性质将扩大计算机系统，安全性和可靠性领域知识的进步，并将能够在各个社区之间进行协作（Systems/设备/可靠性/硬件安全/算法）。从事该项目的研究生和本科生将获得相关领域的培训并发展专业知识。 The research findings will also be used in existing and new graduate/undergraduate courses on hardware-security for training and education.All publicly released data, source codes, and peer-reviewed research articles will be made available during the period of performance and afterward, and will be posted at https://www.trust-hub.org/data and http://webpages.uah.edu/~mtr0011。该奖项由计算机和信息科学与工程局的计算机和网络系统司共同资助，以及在综合活动办公室刺激竞争性研究的既定计划。该奖项通过评估委员会的构成群体的支持师，以反映了综合任务，以反映出范围的范围，以表彰其范围的范围。

项目成果

Towards the Avoidance of Counterfeit Memory: Identifying the DRAM Origin

避免假冒内存：识别 DRAM 来源

• 发表时间: 2020
• 期刊: 2020 IEEE International Symposium on Hardware Oriented Security and Trust (HOST
• 作者: Bahar Talukder, B. M.;Menon, Vineetha;Ray, Biswajit;Neal, Tempestt;Rahman, Md Tauhidur
• 通讯作者: Rahman, Md Tauhidur

PreLatPUF: Exploiting DRAM Latency Variations for Generating Robust Device Signatures

• DOI: 10.1109/access.2019.2923174
• 发表时间: 2019-01-01
• 期刊: IEEE ACCESS
• 影响因子: 3.9
• 作者: Talukder, B. M. S. Bahar;Ray, Biswajit;Rahman, Tauhidur
• 通讯作者: Rahman, Tauhidur

Exploiting DRAM Latency Variations for Generating True Random Numbers

• DOI: 10.1109/icce.2019.8662060
• 发表时间: 2019-01-01
• 期刊: I SYMP CONSUM ELECTR
• 作者: Talukder, B. M. S.;Bahar;Ray, Biswajit
• 通讯作者: Ray, Biswajit