Inget knusslande här, utan enda riktiga lösningen är underförstått att byta ut all hårdvara.
"It is important to note that both vulnerabilities are a result of design flaws in the hardware. Properly dealing with these flaws will require a fix at the hardware level. The patch for Meltdown addressed the problem at the level of the operating system, and only against known attacks. This means that the patch does not address the problem at its core. It is still unclear if and when such a fix will be implemented."
Detection of the Meltdown and Spectre Vulnerabilities Using CheckPoint CPU-Level Technology
. . .
As explained above, Meltdown and Spectre leave measurable anomalies in the process behavior when trying to exfiltrate secret data using a side channel. Additionally, it is evident that Spectre and Meltdown also exhibit anomalies in the flow of speculative and out-of-order execution.
These vulnerabilities are a perfect example of attacks that are essentially invisible to the operating system (as they don’t involve any operating system call), but can be detected when monitoring patterns and events at the CPU level.
By monitoring the occurrences and patterns of these cache misses/cache hits during a process execution, and by monitoring the execution of speculative code which is later reverted, we can identify with high certainty any attempt to subvert the system using the Meltdown and the Spectre vulnerabilities.
Last edited: 9 januari 2018
Fello: Halva priset i 6 månader på alla mobilabonnemang från Fello. T.ex. 10 GB för 90 kr/mån i 6 mån, därefter 180 kr/mån.Stäng notis
Registrera ett konto hos Sveriges trevligaste techcommunity!Stäng notis
