A Rowhammer Reproduction Study Using the Blacksmith Fuzzer

(2023) A Rowhammer Reproduction Study Using the Blacksmith Fuzzer.

Text blacksmithrepro_esorics23.pdf - Published Version Download (485kB)

Abstract

Rowhammer is a hardware vulnerability that can be exploited to induce bit flips in dynamic random access memory (DRAM), compromising the security of a computer system. Multiple ways of exploiting Rowhammer have been shown and even in the presence of mitigations such as target row refresh (TRR), DRAM modules remain partially vulnerable. In this paper, we present a large-scale reproduction study on the Rowhammer vulnerability using the Blacksmith Rowhammer fuzzer. The main focus of our study is the impact of the fuzzing environment. Our study, uses a diverse set of 10 DRAM chips from various manufacturers, with different capacities and memory frequencies. We show that the runtime, used seeds, and DRAM coverage of the fuzzer have been underestimated in previous work. Additionally, we study the entire hardware setup's impact on the transferability of Rowhammer by fuzzing the same DRAM on 4 identical machines. The transferability study heavily relates to Rowhammer-based physically unclonable functions (PUFs) which rely on the stability of Rowhammer-induced bit flips. Our results confirm the findings of the Blacksmith fuzzer, showing that even modern DRAM chips are vulnerable to Rowhammer. In addition, we show that PUFs are challenging to achieve on commodity systems due to the high variability of Rowhammer bit flips.

Item Type:	Conference or Workshop Item (A Paper) (Paper)
Divisions:	Michael Schwarz (MS)
Conference:	ESORICS European Symposium On Research In Computer Security
Depositing User:	Michael Schwarz
Date Deposited:	17 Aug 2023 09:53
Last Modified:	12 Sep 2023 07:37
Primary Research Area:	NRA3: Threat Detection and Defenses
URI:	https://publications.cispa.saarland/id/eprint/4008

Actions

Actions (login required)

View Item