Скачать или смотреть Remote Memory-Deduplication Attacks

Cloud providers use memory deduplication to reduce the memory utilization of their systems. Memory deduplication merges memory pages with identical content and maps them under a copy-on-write semantic. Previous work showed that memory deduplication can be exploited in a local scenario to perform ASLR breaks, Rowhammer attacks and fingerprint applications.
Countermeasures have been proposed to disable memory deduplication across security domains. Memory deduplication was re-enabled within a security domain on Windows as well as on Linux server systems.

By: Erik Kraft, Daniel Gruss & Martin Schwarzl

Full Abstract & Presentation Materials: https://www.blackhat.com/asia-22/brie...