Our ISCA 2014 paper provided the first scientific and detailed characterization, analysis, and real-system demonstration of what is now popularly known as the RowHammer phenomenon (or vulnerability) in modern commodity DRAM chips, which are used as main memory in almost all modern computing systems. It experimentally demonstrated that more than 80% of all DRAM modules we tested from the three major DRAM vendors were vulnerable to the RowHammer read disturbance phenomenon: one can predictably induce bitflips (i.e., data corruption) in real DRAM modules by repeatedly accessing a DRAM row and thus causing electrical disturbance to physically nearby rows. We showed that a simple unprivileged user-level program induced RowHammer bitflips in multiple real systems and suggested that a security attack can be built using this proof-of-concept to hijack control of the system or cause other harm. To solve the RowHammer problem, our paper examined seven different approaches (including a novel probabilistic approach that has very low cost), some of which influenced or were adopted in different industrial products. Many later works from various research communities examined RowHammer, building real security attacks, proposing new defenses, further analyzing the problem at various (e.g., device/circuit, architecture, and system) levels, and exploiting RowHammer for various purposes (e.g., to reverse-engineer DRAM chips). Industry has worked to mitigate the problem, changing both memory controllers and DRAM standards/chips. Two major DRAM vendors finally wrote papers on the topic in 2023, describing their current approaches to mitigate RowHammer. Research & development on RowHammer in both academia & industry continues to be very active and fascinating. This short retrospective provides a brief analysis of our ISCA 2014 paper and its impact.
翻译:我们的ISCA 2014论文首次对现代商用DRAM芯片中如今广为人知的RowHammer现象(或漏洞)进行了科学、详细的表征、分析与真实系统演示。这些DRAM芯片被几乎所有现代计算系统用作主内存。实验表明,在来自三大DRAM供应商的所有被测模块中,超过80%易受RowHammer读取干扰现象影响:通过重复访问某一行,可预测性地在真实DRAM模块中诱导比特翻转(即数据损坏),从而对物理相邻行造成电子干扰。我们证明,一个简单的非特权用户级程序可在多个真实系统中引发RowHammer比特翻转,并建议基于此概念验证构建安全攻击以劫持系统控制权或造成其他危害。为解决RowHammer问题,论文探讨了七种不同方法(包括一种成本极低的新型概率方法),其中部分方法影响或被采纳于不同工业产品。后续来自多个研究领域的许多工作对RowHammer进行了深入分析:构建真实安全攻击、提出新防御方案、在设备/电路、架构及系统等不同层面进一步剖析问题,并利用RowHammer实现逆向工程DRAM芯片等多种目的。工业界致力于缓解该问题,同时改进了内存控制器与DRAM标准/芯片。两大DRAM厂商最终于2023年发表相关论文,描述了各自缓解RowHammer的当前方案。学术与工业界对RowHammer的研究与开发依然活跃且引人入胜。本篇简短回顾对ISCA 2014论文及其影响进行了简要分析。