Questions tagged [dma-attack]
DMA attack is an exploitation of a Direct Memory Access feature of ports like Firewire, Thunderbolt and PCI Express
21
questions
0
votes
0
answers
31
views
How does IOMMU and/or Linux kernel handle DMA that span a page boundary?
I am looking into how DMA works at the device driver and kernel level in the Linux kernel.
I observed that access control to DMA buffers from IO devices is performed by the IOMMU and IOMMU driver in ...
- 31
0
votes
0
answers
54
views
PCR to prevent TPM2 key unsealing in case of rogue DMA devices connected?
Security threat: physical theft of a laptop and a server that use TPM2 auto unlock FDE with LUKS. In both cases the TPM checks against some PCRs before unsealing the key. The laptop prompts for a TPM ...
- 63
3
votes
0
answers
102
views
How to check if a PCI device is trusted or untrusted by the Linux kernel (for IOMMU)?
I am looking into the protection provided by IOMMU against DMA attacks.
I noticed that the Linux kernel provides a feature called bounce buffers for untrusted PCI devices (https://lwn.net/Articles/...
- 31
0
votes
0
answers
168
views
Security by using USB NIC, USB to SATA adapter, etc
After reading libreboot FAQ i have some questions about USB 2.0 bus. There it is strongly recommended to use usb devices - USB network card and USB to SATA adapter (to connect HDD or SSD with it). The ...
1
vote
0
answers
169
views
Secure data transfer in the face of DMA attacks even on SD card v 7.0
I want to move data from an insecure host to a secure host, e.g. to update the software on a Ballot marking device, or move data back and forth between such hosts. But as we know, even common thumb ...
- 20.7k
0
votes
0
answers
109
views
Non-obvious Mitigations for This DMA-Attack Demonstrated by F-Secure
Are there any non-obvious mitigations for the big DMA-attack revealed last year and demonstrated in this video by F-Secure?
We know that Microsoft has published some material pertaining to DMA-...
- 151
5
votes
1
answer
4k
views
BIOS Password vs. BitLocker Pre-boot PIN
I'm attempting to ensure maximum security for my PC. I'm running Windows 10 Pro on a business-class HP notebook.
Unless I'm mistaken, I understand that both a BIOS password and the BitLocker pre-boot ...
- 151
2
votes
1
answer
537
views
Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?
I've just read about this:
https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/
Asides from the question in the title, I'd also like to add ...
- 78
2
votes
1
answer
184
views
What are some attacks to consider in a cloud deployment? [duplicate]
I want to discuss the following scenario:
I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
- 283
4
votes
1
answer
457
views
Are IDE DMA attacks possible and is it possible to prevent them purely with software means without any IOMMU or other special hardware
I mean if it possible to safely plug a PCMCIA card into a PC without IOMMU? Such computers are very widespread, every digital TV or receiver has a CI+ slot, which is PCMCIA, and people insert there ...
- 912
1
vote
0
answers
137
views
Possible physical interface attacks of DMA on a server
Following from: here,
Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities regarding Direct Memory ...
- 151
29
votes
1
answer
6k
views
DMA attacks despite IOMMU isolation
If you're already familiar with PCI behavior and Linux's handling of DMA buffers, skip to the third section for my actual question. Otherwise read on for a small summary of how PCI devices perform ...
- 66.5k
6
votes
1
answer
1k
views
Does IOMMU prevent DMA attacks?
what does IOMMU actually do, does it manage memory access for devices like MMU does for processes or is it more simplified thing and doesn't provide virtualization/access control ?
So basically my ...
- 65
1
vote
2
answers
264
views
Would using a firmware password protect a MacBook Pro from Thunderstrike?
And of course, any other possible attack that involves convincing the target to plug in a modified thunderbolt device into their MacBook
I know that Thunderstrike works on MacBooks with firmware ...
- 431
8
votes
1
answer
2k
views
Is Thunderbolt still insecure?
Has Apple fixed the Thunderbolt DMA attack when the computer is unlocked or is it unfixable since DMA is built into Thunderbolt?
I don't want to get hacked simply by plugging my Mac into a modified ...
- 431
0
votes
1
answer
180
views
Potential FileVault problems in my setup
After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup:
AppleID is connected to local account
I don't remember exactly, but I think I have selected option "Allow ...
- 133
4
votes
3
answers
427
views
How can the secret and keys be read out from the bus?
I heard that the attacks that focus on the bus between chip's blocks (e.g. between CPU and functional blocks / memory blocks) are possible. The buses become the weak parts of hardware security. ...
- 838
2
votes
1
answer
467
views
Rasberry Pi with TRESOR immune to cold boot and DMA attacks?
I would like to set up a Rasberry Pi and connect a large USB Harddrive and some webcams to run motion for homesurveillance.
If I am understanding everything correctly if I get Ubuntu mate to run with ...
7
votes
1
answer
3k
views
How long does the system encryption key stay in RAM
The thread title says it, i would like to know how long a system encryption key will stay in RAM or CPU and will be therefore be extractable using boot attacks.
I read somewhere that encryption in ...
4
votes
2
answers
4k
views
Preventing DMA Attacks
I read on the Wikipedia article on DMA attacks that a misconfigured BIOS allowed for this type of attacks. I am asking whether, given the hardware I am using, DMA attacks are possible and whether I ...
5
votes
1
answer
508
views
Is malware or screen capture possible with iMac as external display?
If using a foreign iMac as an external display (through the Thunderbolt to Thunderbolt, or Mini DisplayPort to Mini DisplayPort cable, and Command+F2 on the iMac, as per iMac Target Display Mode FAQ), ...
- 1,924