Siloz: Leveraging DRAM Isolation Domains to Prevent Inter-VM Rowhammer

Reference. Siloz: Leveraging DRAM Isolation Domains to Prevent Inter-VM Rowhammer

Kevin Loughlin, Jonah Rosenblum, Stefan Saroiu, Alec Wolman, Dimitrios Skarlatos, Baris Kasikci · SOSP · 2023 · security · DOI

Cite

Cite as @loughlin-2023-siloz (helia, typst) · \cite{loughlin-2023-siloz} (LaTeX)

BibTeX

bibtex · 1 line

@inproceedings{loughlin-2023-siloz, series={SOSP ’23}, title={Siloz: Leveraging DRAM Isolation Domains to Prevent Inter-VM Rowhammer}, url={http://dx.doi.org/10.1145/3600006.3613143}, DOI={10.1145/3600006.3613143}, booktitle={Proceedings of the 29th Symposium on Operating Systems Principles}, publisher={ACM}, author={Loughlin, Kevin and Rosenblum, Jonah and Saroiu, Stefan and Wolman, Alec and Skarlatos, Dimitrios and Kasikci, Baris}, year={2023}, month=Oct, pages={417–433}, collection={SOSP ’23} }

hayagriva YAML (typst)

yaml · 22 lines

loughlin-2023-siloz:
  type: article
  title: 'Siloz: Leveraging DRAM Isolation Domains to Prevent Inter-VM Rowhammer'
  author:
  - Loughlin, Kevin
  - Rosenblum, Jonah
  - Saroiu, Stefan
  - Wolman, Alec
  - Skarlatos, Dimitrios
  - Kasikci, Baris
  date: 2023-10
  page-range: 417-433
  url: http://dx.doi.org/10.1145/3600006.3613143
  serial-number:
    doi: 10.1145/3600006.3613143
  parent:
    type: proceedings
    title: Proceedings of the 29th Symposium on Operating Systems Principles
    publisher: ACM
    parent:
      type: proceedings
      title: SOSP ’23

Download: loughlin-2023-siloz.bib · loughlin-2023-siloz.yml

Cites 171 works (0 here)

External (171)

A Systematic Study of DDR4 DRAM Faults in the Field (2023)
Intel TDX Demystified: A Top-Down Approach (2023)
Copy-on-Flip: Hardening ECC Memory Against Rowhammer Attacks (2023)
DSAC: Low-Cost Rowhammer Mitigation using In-Dram Stochastic and Approximate Counting Algorithm (2023)
DDR5 Registering Clock Driver Definition (DDR5RCD02) (2023)
Machine learning-based rowhammer mitigation (2023)
CSI:Rowhammer – Cryptographic Security and Integrity against Rowhammer (2023)
A 1.1 V 16Gb DDR5 DRAM with Probabilistic-Aggressor Tracking, Refresh-Management Functionality, Per-Row Hammer Tracking, a Multi-Step Precharge, and Core-Bias Modulation for Security and Reliability Enhancement (2023)
Pond: CXL-Based Memory Pooling Systems for Cloud Platforms (2023)
Siloz Source Code. github.com/efeslab/siloz (2023)
RowPress: Amplifying Read Disturbance in Modern DRAM Chips (2023)
Hyrax: Fail-in-Place Server Operation in Cloud Platforms (2023)
High Performance Computing VM Sizes (2023)
X-ray: Discovering DRAM Internal Structure and Error Characteristics by Issuing Memory Commands (2023)
An Experimental Analysis of RowHammer in HBM2 DRAM Chips (2023)
PT-Guard: Integrity-Protected Page Tables to Defend Against Breakthrough Rowhammer Attacks (2023)
Linux Source Code (2023)
SHADOW: Preventing Row Hammer in DRAM with Intra-Subarray Row Shuffling (2023)
Scalable and Secure Row-Swap: Efficient and Safe Row Hammer Mitigation in Memory Systems (2023)
Contiguitas: The Pursuit of Physical Memory Contiguity in Datacenters (2023)
DNN-Defender: An in-DRAM Deep Neural Network Defense Mechanism for Adversarial Weight Attack (2023)
BLASTER: Characterizing the Blast Radius of Rowhammer (2023)
NeuroPots: Realtime Proactive Defense against Bit-Flip Attacks in Neural Networks (2023)
REGA: Scalable Rowhammer Mitigation with Refresh-Generating Activations (2023)
HammerScope: Observing DRAM Power Consumption Using Rowhammer (2022)
DAGguise: Mitigating Memory Timing Side Channels (2022)
The Memory API. qemu.readthedocs.io/en/latest/devel/memory.html (2022)
When Frodo Flips: End-to-End Key Recovery on FrodoKEM via Rowhammer (2022)
SafeGuard: Reducing the Security Risk from Row-Hammer via Low-Cost Integrity Protection (2022)
SecDDR: Enabling Low-Cost Secure Memories by Protecting the DDR Interface (2022)
Intel Trust Domain Extensions (Intel TDX) (2022)
Introduction to Memory Bandwidth Allocation. intel.com/content/www/us/en/developer/articles/technical/introduction-to-memory-bandwidth-allocation.html (2022)
SKX EDAC Linux Driver. github.com/torvalds/linux/blob/master/drivers/edac/skx_base.c (2022)
Blacksmith: Scalable Rowhammering in the Frequency Domain (2022)
NUMA Memory Policy. kernel.org/doc/html/latest/admin-guide/mm/numa_memory_policy.html (2022)
Half-Double: Hammering From the Next Row Over (2022)
Software-Defined Memory Controllers: An Idea Whose Time Has Come (2022)
MOESI-prime: Preventing Coherence-Induced Hammering in Commodity Workloads (2022)
ProTRR: Principled yet Optimal In-DRAM Target Row Refresh (2022)
Jolt: Recovering TLS Signing Keys via Rowhammer Faults (2022)
Fundamentally Understanding and Solving RowHammer (2022)
The Price of Secrecy: How Hiding Internal DRAM Topologies Hurts Rowhammer Defenses (2022)
AQUA: Scalable Rowhammer Mitigation by Quarantining Aggressor Rows at Runtime (2022)
Parallel virtualized memory translation with nested elastic cuckoo page tables (2022)
SpecHammer: Combining Spectre and Rowhammer for New Speculative Attacks (2022)
Understanding RowHammer Under Reduced Wordline Voltage: An Experimental Study Using Real DRAM Devices (2022)
HiRA: Hidden Row Activation for Reducing Refresh Latency of Off-the-Shelf DRAM Chips (2022)
Mitigating Targeted Bit-Flip Attacks via Data Augmentation: An Empirical Study (2022)
A case for self-managing DRAM chips: improving performance, efficiency, reliability, and security via autonomous in-DRAM maintenance operations (2022)
Hydra: Enabling Low-Overhead Mitigation of Row-Hammer at Ultra-Low Thresholds via Hybrid Tracking (2022)
Randomized Row-Swap: Mitigating Row Hammer by Breaking Spatial Correlation Between Aggressor and Victim Rows (2022)
NUMA Aware Page Table's Page Allocation (2022)
Using NUMA Systems with ESXi (2022)
TMO: Transparent Memory Offloading in Datacenters (2022)
SoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only Target Row Refresh (2022)
Panopticon: A Complete In-DRAM Rowhammer Mitigation (2021)
Uncovering In-DRAM RowHammer Protection Mechanisms: A New Methodology, Custom RowHammer Patterns, and Implications (2021)
Mithril: Cooperative Row Hammer Protection on Commodity DRAM Leveraging Managed Refresh (2021)
Stop! Hammer time: rethinking our approach to rowhammer mitigations (2021)
Authentication of Sub-NUMA Clustering Effect on Intel Skylake for Memory Latency and Bandwidth (2021)
A Deeper Look into RowHammer’s Sensitivities: Experimental Analysis of Real DRAM Chips and Implications on Future Attacks and Defenses (2021)
Paratick: Reducing Timer Overhead in Virtual Machines (2021)
Security Analysis of the Silver Bullet Technique for RowHammer Prevention (2021)
BlockHammer: Preventing RowHammer at Low Cost by Blacklisting Rapidly-Accessed DRAM Rows (2021)
SMASH: Synchronized Many-sided Rowhammer Attacks from JavaScript (2021)
5 Years of Cgroup v2: The Future of Linux Resource Control (2021)
Intel Memory Latency Checker v3.9a (2021)
Can "Micro VM" Become the Next Generation Computing Platform?: Performance Comparison Between Light Weight Virtual Machine, Container, and Traditional Virtual Machine (2021)
Firecracker: Lightweight Virtualization for Serverless Applications (2020)
AMD Secure Encrypted Virtualization (SEV) (2020)
Are We Susceptible to Rowhammer? An End-to-End Methodology for Cloud Providers (2020)
TRRespass: Exploiting the Many Sides of Target Row Refresh (2020)
Rethinking Isolation Mechanisms for Datacenter Multitenancy (2020)
Architecture Specification: Intel Trust Domain Extensions (Intel TDX) Module (2020)
Double Data Rate 5 (DDR5) SDRAM Standard (2020)
Revisiting RowHammer: An Experimental Analysis of Modern DRAM Devices and Mitigation Techniques (2020)
RAMBleed: Reading Bits in Memory Without Accessing Them (2020)
Nethammer: Inducing Rowhammer Faults Through Network Requests (2020)
Graphene: Strong yet Lightweight Row Hammer Protection (2020)
Stratus: Clouds with Microarchitectural Resource Management (2020)
FIGARO: Improving System Performance via Fine-Grained In-DRAM Data Relocation and Caching (2020)
PThammer: Cross-User-Kernel-Boundary Rowhammer Through Implicit Accesses (2020)
RIP-RH: Preventing Rowhammer-Based Inter-Process Attacks (2019)
Deep Learning Based Diagnostics for Rowhammer Protection of DRAM Chips (2019)
Exploiting Correcting Codes: On the Effectiveness of ECC Memory Against Rowhammer Attacks (2019)
Demystifying Complex Workload-DRAM Interactions: An Experimental Study (2019)
Crow: A Low-Cost Substrate for Improving Dram Performance, Energy Efficiency, and Reliability (2019)
DDR4 Registering Clock Driver Definition (DDR4RCD02) (2019)
Pinpoint Rowhammer: Suppressing Unwanted Bit Flips on Rowhammer Attacks (2019)
An Effective DRAM Address Remapping for Mitigating Rowhammer Errors (2019)
Exploiting OS-Level Memory Offlining for DRAM Power Management (2019)
Detecting Malicious Attacks Exploiting Hardware Vulnerabilities Using Performance Counters (2019)
Challenges Using Linux as a Real-Time Operating System (2019)
Protecting Page Tables from RowHammer Attacks using Monotonic Pointers in DRAM True-Cells (2019)
MRLoc: Mitigating Rowhammering Based on Memory Locality (2019)
TWiCe: Preventing Row-Hammering by Exploiting Time Window Counters (2019)
Virtual Machine Memory Allocation and Placement on Azure Stack (2019)
Towards Understanding Application Performance and System Behavior with the Full Dynticks Feature (2018)
SPEC CPU2017: Next-Generation Compute Benchmark (2018)
Another Flip in the Wall of Rowhammer Defenses (2018)
Solar-DRAM: Reducing DRAM Access Latency by Exploiting the Variation in Local Bitlines (2018)
D-RaNGe: Using Commodity DRAM Devices to Generate True Random Numbers with Low Latency and High Throughput (2018)
DAWG: A Defense Against Cache Timing Attacks in Speculative Execution Processors (2018)
ZebRAM: Comprehensive and Compatible Software Protection Against Rowhammer Attacks (2018)
ERUCA: Efficient DRAM Resource Utilization and Resource Conflict Avoidance for Memory System Parallelism (2018)
Address Hashing in Intel Processors (2018)
Mitigating Wordline Crosstalk Using Adaptive Trees of Counters (2018)
Defeating Software Mitigations Against Rowhammer: A Surgical Precision Hammer (2018)
GuardION: Practical Mitigation of DMA-based Rowhammer Attacks on ARM (2018)
Multiple Physical Mappings: Dynamic DRAM Channel Sharing and Partitioning (2017)
SGX-Bomb: Locking Down the Processor via Rowhammer Attack (2017)
The RowHammer Problem and Other Issues We May Face as Memory Becomes Denser (2017)
Mitigating Bitline Crosstalk Noise in DRAM Memories (2017)
Deep Dive on Amazon EC2 (2017)
Camouflage: Memory Traffic Shaping to Mitigate Timing Attacks (2017)
CAn't Touch This: Software-only Mitigation against Rowhammer Attacks targeting Kernel Memory (2017)
Low Power Double Data Rate 4 (LPDDR4) SDRAM Standard (JESD209-4B) (2017)
PARSEC 3.0: A Multicore Benchmark Suite with Network Stacks and SPLASH-2X (2017)
Low-Cost Inter-Linked Subarrays (LISA): Enabling fast inter-subarray data movement in DRAM (2016)
Intel SGX Explained (2016)
DRAM Row-Hammer Attack Reduction Using Dummy Cells (2016)
A built-in self-repair scheme for DRAMs with spare rows, columns, and bits (2016)
AMD memory encryption (2016)
Hardware-Efficient Built-In Redundancy Analysis for Memory with Various Spares (2016)
A New Approach for Rowhammer Attacks (2016)
Improving Bank-Level Parallelism for Irregular Applications (2016)
Drammer: Deterministic Rowhammer Attacks on Mobile Platforms (2016)
One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks and Privilege Escalation (2016)
ANVIL: Software-Based Protection Against Next-Generation Rowhammer Attacks (2016)
A Survey of Repair Analysis Algorithms for Memories (2016)
Rowhammer.js: A Remote Software-Induced Fault Attack in Javascript (2016)
Hyper-V Virtual NUMA Overview (2016)
DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks (2016)
Flip Feng Shui: Hammering a Needle in the Software Stack (2016)
Row Hammer Refresh Command (2015)
Armor: A RunTime Memory Hot-Row Detector (2015)
Systematic Reverse Engineering of Cache Slice Selection in Intel Processors (2015)
Improving DRAM Latency with Dynamic Asymmetric Subarray (2015)
Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges (2015)
Avoiding Information Leakage in the Memory Controller with Fixed Service Policies (2015)
Xen on NUMA Machines (2015)
Mapping the Intel Last-Level Cache (2015)
Improving Memory Error Handling Using Linux (2014)
Double Data Rate 4 (DDR4) SDRAM Standard (2014)
Flipping bits in memory without accessing them: an experimental study of DRAM disturbance errors (2014)
Timing channel protection for a shared memory controller (2014)
Improving DRAM Performance by Parallelizing Refreshes with Accesses (2014)
Tiered-Latency DRAM: A Low Latency and Low Cost DRAM Architecture (2013)
Memory Scaling: A Systems Architecture Perspective (2013)
Package org.apache.hadoop.examples.terasort (2013)
Reducing Memory Access Latency with Asymmetric DRAM Bank Organizations (2013)
Status of Linux Dynticks (2013)
Advanced Configuration and Power Interface specification (2013)
A Case for Exploiting Subarray-Level Parallelism (SALP) in DRAM (2012)
Memcached design on high performance RDMA capable interconnects (2011)
Benchmarking Cloud Serving Systems with YCSB (2010)
High performance network virtualization with SR-IOV (2010)
Architecture design exploration of three-dimensional (3D) integrated DRAM (2009)
The PARSEC Benchmark Suite: Characterization and Architectural Implications (2008)
Virtio: Towards a De-Facto Standard for Virtual I/O Devices (2008)
Memory Performance Attacks: Denial of Memory Service in Multi-Core Systems (2007)
Getting Maximum Mileage out of Tickless (2007)
KVM: The Linux Virtual Machine Monitor (2007)
QEMU, a fast and portable dynamic translator (2005)
Monitoring Virtual Memory with vmstat (2005)
Intel virtualization technology (2005)
Kernel Korner: CPU Affinity (2003)
DRAM circuit design (2000)
A permutation-based page interleaving scheme to reduce row-buffer conflicts and exploit data locality (2000)
Impulse: building a smarter memory controller (1999)
Reduce CPU performance spikes (Red Hat Enterprise Linux for Real Time 7 tuning guide, §2.14)