4 ms·
I see where you're going with this. dmidecode seems to indicate that the description from the actual RAM is lacking transparency about it's internal geometry.
by mjevans 10y ago
I see where you're going with this.
dmidecode seems to indicate that the description from the actual RAM is lacking transparency about it's internal geometry.
I can get the ranking for slot-level interleaving from dmidecode on my systems (which means a kernel could or already has it as well).
Thinking about the inside-chip geometry issue as well as the current on-list proposal in the news item I've reached a different potential solution.
If page faults are tracked /by process/, the top N faulting processes could be put in to a mode where the following happens on a page fault:
* Some semi-random process (theoretically not discover-able or predictable by user processes) picks a number between 1 and some limit (say 16).
* The faulting page, and the next N pages, are read in (which should pull them in to the cache).
This would help by making it harder to mount a /successive/ attack on different memory locations. Processes chewing through large arrays of objects in memory legitimately shouldn't be impacted that much by such a solution; surely less so than a hard pause on the process.
- ecma 10y agoAre you potentially confusing a page fault which results in the page being pulled into main memory with a cache miss which pulls a line from memory into on-CPU memory? My understanding is that the cache miss is managed by the MMU without much kernel involvement and we're relying on non task aware PMU statistics local to a single CPU for the proposed mitigation. Am I missing some aspect of page mapping/cache management?
- moyix 10y agoIf you want a bit more info about the scrambling process, see: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/pessl https://www.usenix.org/conference/usenixsecurity16/technical...