4 ms·
Couldn't the error rate of the ECC system be monitored, to detect an attack in progress and raise an alarm? Even if the attacker was able to get the flipping c
by femto 8y ago
Couldn't the error rate of the ECC system be monitored, to detect an attack in progress and raise an alarm?
Even if the attacker was able to get the flipping completely reliable, there would presumably be a learning/probing phase with a period of elevated ECC. Either this probe could be detected, or the attacker would be forced to remain below a threshold of detectability slowing the attack down enough to make it impractical?
- jacob019 8y agoIn Linux you can generally check the number of ECC errors that have occurred since boot. /sys/devices/system/edac/mc/mc0/ce_count
- userbinator 8y agoIt would be detected and diagnosed as faulty hardware --- which it is. If it keeps occurring after the RAM is replaced, then perhaps it could be. The problem with characterising it as an "attack" is that it leads to the notion that certain access patterns are "bad", and that's not a slippery slope we should be heading down...