SoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only...
summary
SoftTRR is a software-only defense implemented as a loadable kernel module that protects level-1 page tables by tracking accesses to rows up to six rows away and refreshing target rows when a charge-leak counter exceeds a threshold. It uses the unused reserved PTE bit to force page faults, samples with a 1 ms timer and a count limit of 2, and refreshes via direct physical map reads. Prototype blocks three representative attacks (memory-spray, driver buffer hammer, PT- hammer) across 50 L1PT pages, adds <1% overhead on SPEC2017 and uses under 600 KB RAM in tests.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:02What is Rowhammer?
- 1:40DRAM bank
- 2:17DRAM Refresh
- 3:00Rowhammer Attacks
- 3:25Limitations of the State-of-the-Art Works
- 5:25Key Insights
- 6:15Memory-access Mediation
- 7:10Overview
- 7:35Page Table Collector
- 9:27Adjacent Page Tracer
- 13:00Row Refresher
- 13:49Security Evaluation
- 14:47Performance Evaluation
- 16:00Runtime Memory Consumption
- 16:40System Robustness
- 17:05Conclusion
related talks
29mCAn’t Touch This...
38mCSI:Rowhammer: Closing the Case of Half-Double and Beyond
14mGPUHammer: Rowhammer Attacks on GPU Memories are Practical
15mPosthammer: Pervasive Browser-based Rowhammer Attacks with Postponed...
41mUsing Microarchitectural Design to Break KASLR and More
40mRowhammer Attacks: A Walkthrough Guide
38mKernel Hardening: Protecting the Protection Mechanisms
43mUsing Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the Process