rowhammer-revisited-talk

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

rowhammer-revisited-talk

★ 15 Open GitHub ↗

A list of resources for the talk Rowhammer Revisited: From Exploration to Exploitation and Mitigation

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Rowhammer Revisited: From Exploration to Exploitation and Mitigation
 A list of resources for the topics covered in the m0leCon 2023 talk **Rowhammer Revisited: From Exploration to Exploitation and Mitigation**.
 
# Reading Material
- [Flipping bits in memory without accessing them: an experimental study of DRAM disturbance errors](https://dl.acm.org/doi/abs/10.1145/2678373.2665726) first Rowhammer paper also introduces PARA
- [RowHammer: A Retrospective](https://ieeexplore.ieee.org/abstract/document/8708249) overview of the last years of Rowhammer research
- [Drammer: Deterministic Rowhammer Attacks on Mobile Platforms](https://dl.acm.org/doi/abs/10.1145/2976749.2978406) exploits Rowhammer on phones
- [Flip Feng Shui: Hammering a Needle in the Software Stack](https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/razavi) introduces the RSA modulus hammering attack
- [One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks and Privilege Escalation](https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_xiao.pdf) Vm attacks with Rowhammer
- [Exploiting the DRAM rowhammer bug to gain kernel privileges](https://www.cs.umd.edu/class/fall2019/cmsc818O/papers/rowhammer-kernel.pdf) presentation that introduces the page table exploit
- [Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript](https://link.springer.com/chapter/10.1007/978-3-319-40667-1_15) shows that Rowhammer is possible for a javascript envoirement in the browser
- [Throwhammer: Rowhammer Attacks over the Network and Defenses](https://www.usenix.org/conference/atc18/presentation/tatar) Rowhammer attacks by sending packets to network controllers
- [Another Flip in the Wall of Rowhammer Defenses](https://ieeexplore.ieee.org/abstract/document/8418607) introduces single location hammering, also introduces sudo exploit
- [Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks](https://www.usenix.org/conference/usenixsecurity19/presentation/hong) performance dedradation attacks on neural networks using Rowhammer
- [Uncovering In-DRAM RowHammer Protection Mechanisms: A New Methodology, Custom RowHammer Patterns, and Implications](https://dl.acm.org/doi/abs/10.1145/3466752.3480110) reverse engineers and bypasses the TRR mitigation
- [Exploiting Correcting Codes: On the Effectiveness of ECC Memory Against Rowhammer Attacks](https://ieeexplore.ieee.org/abstract/document/8835222) shows ECC DRAM is also vulnerable to Rowhammer
- [TRRespass: Exploiting the Many Sides of Target Row Refresh](https://ieeexplore.ieee.org/abstract/document/9152631) fuzzer to bypass TRR
- [BLACKSMITH: Scalable Rowhammering in the Frequency Domain](https://ieeexplore.ieee.org/abstract/document/9833772) general fuzzing to find new hammering patterns
- [REGA: Scalable Rowhammer Mitigation with Refresh-Generating Activations](https://www.research-collection.ethz.ch/handle/20.500.11850/587835) REGA in DRAM mitigation
- [CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer](https://ieeexplore.ieee.org/abstract/document/10179390) CIS:Rowhammer mitigation

# Code
- [Google Rowhammer Tester](https://github.com/google/rowhammer-test) Rowhammer tester
- [CMU-SAFARI Rowhammer Tester](https://github.com/CMU-SAFARI/rowhammer) Rowhammer tester
- [rowhammer.js](https://github.com/IAIK/rowhammerjs) Rowhammer from the browser
- [drammer](https://github.com/vusec/drammer) Rowhammer on mobile phones
- [Blacksmith](https://github.com/comsec-group/blacksmith) Rowhammer fuzzer
- [Trrespass](https://github.com/vusec/trrespass) Rowhammer fuzzer to break TRR
- [DRAMA](https://github.com/IAIK/drama) Reverse engineering for DRAM functions
- [Hammertime](https://github.com/vusec/hammertime/) Profile based simulator for Rowhammer
- [Hammulator](https://github.com/cispa/hammulator) simulating Rowhammer exploits for rapid prototyping

# Our papers
- [A Rowhammer Reproduction Study Using the Blacksmith Fuzzer](https://publications.cispa.saarland/4008/) tests fuzzing reproducibility and stability of Rowhammer bitflips
- [Hammulator: Simulate Now - Exploit Later ](https://publications.cispa.saarland/3954/) fast prototyping for new Rowhammer exploits using full system emulation

rowhammer-revisited-talk

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README