3 ms·
Using the OS to do this is unlikely to be effective; the attacker with this access could usually halt the CPU before they remove RAM. As in the article, the bes
by bri3d 3y ago
Using the OS to do this is unlikely to be effective; the attacker with this access could usually halt the CPU before they remove RAM. As in the article, the best mitigation against this kind of attack is memory encryption, either in hardware or software (although in software, you have to figure out how to keep your keys out of RAM).
There are security oriented ICs of various types (flash, RAM, secure element) which do clear data with a tripwire in a lot of ways; some even have onboard current storage of some kind which allows them to clear all data as a "dying breath" when the package is tampered with. But COTS DDR RAM needs to be cheap and doesn't usually have this kind of threat model.
- josephg 3y ago> although in software, you have to figure out how to keep your keys out of RAM I think you can do this with modern “trusted computing” modules.