Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to All about the Meltdown Cyber Attack (CVE-2017-5754) by Manula Udugahapattuwa
Similar to All about the Meltdown Cyber Attack (CVE-2017-5754) by Manula Udugahapattuwa (20)
Recently uploaded
Recently uploaded (20)
All about the Meltdown Cyber Attack (CVE-2017-5754) by Manula Udugahapattuwa
- 1. Meltdown
- 2. Team Members IT 16039346 - Udugahapattuwa D.M.R IT 15064400 - M.A.D.S.R.Perera
- 3. What's MELTDOWN ? Also known as Variant 3: rogue data cache load (CVE-2017-5754) Exploit CRITICAL Vulnerabilities in modern Processors. Steal Currently Processed Data on the computer. Works on personal Computers Mobile devices and in the cloud. Intel Microprocessors and some ARM Processors are affected.
- 4. How it works When computers perform some calculations to make the performance faster it save some extra data. These data are stored in the cache memory. These data is used only if they are needed, otherwise it will be remain in the cache. Attackers can access these data through a side channel.
- 5. Detecting the attack Meltdown is essentially invisible No Operating System Calls but side channel data gathering Monitoring patterns and events at CPU level Cache misses to Missed branches ratio Usually less than one. Around 3 when under attack Cannot be detected after the attack has been carried out.
- 6. Cache misses to Missed branches ratio Live demonstration (view in slideshow mode)
- 7. Possible Impact Attacker can access any restricted area of the memory! A total Meltdown Affects any software on any OS if the CPU uses a vulnerable processor affects every Intel processor since 1995 that implements out-of-order execution Some IBM processors and ARM based micro processors too! Cloud Service providers | Hosting Services reboots world wide
- 8. Possible Impact Contd. Series of patching and updating efforts Thus huge business interruptions even for cloud based companies. Reduced processing speeds after updates. Internet Browsers data leakages
- 9. Mitigation Of Meltdown Since Meltdown is a hardware based vulnerability, Patches and OS updates can do only so much Patches have reported to slow down computers New intel processor designs started on March 15th 2018 Since October 8th 2018, Intel Hardware and Firmware are meltdown resistant. IBM processors and ARM based processors followed Intel
- 10. Q n A
- 11. Thank you!