Analýza útoku ZombieLoad

Abstract

Cilem prace je popsat princip utoku ZombieLoad a jeho provedeni. Teoreticka cast seznamuje ctenare s nekterymi specifiky modernich procesoru. Nasleduje analyza samotneho utoku vcetne popisu cache postranniho kanalu, ktery je vyuzivan. Teoretickou cast uzavira kapitola popisujici aplikovane zaplaty na urovni operacnich systemu a procesoru. V prakticke casti je popsana samotna realizace peti variant utoku na operacnim systemu Linux. V popisu jsou zdurazneny prekazky zabranujici uspesnemu utoku a jejich reseni. Posledni kapitola analyzuje uspesnost implementovanych variant a zneuzitelnost zranitelnosti.

The goal of this thesis is to describe a principle of the ZombieLoad attack and to perform it. The theoretical part introduces some specifics of modern processors. After that follows an analysis of the attack which includes a description of a cache side-channel. The theoretical part concludes with a chapter describing mitigations applied by operating systems and processors. The practical part describes the implementation of five variants of the attack on the Linux operating system. The description also includes any obstacles that can be encountered during an attack attempt and their solutions. The last chapter analyses the success rate of the implemented variants and abusement of vulnerabilities.