Eine Analyse der Seitenkan\u00e4le und der spekulativen Ausf\u00fchrung von Ross Mcilroy, Jaroslav Sevcik, Tobias Tebbi, Ben L. Titzer, Toon Verwaest <\/p>\n\n\n\n
Computersysteme streben nach drei Schl\u00fcsselsicherheitseigenschaften:<\/p>\n\n\n\n
Jason Andress. The Basics of Information Security: Understanding the Fundamentals of InfoSec in Theory and Practice. Syngress Publishing, 2nd edition, 2014.<\/a><\/p>\n\n\n\n Von diesen ist die Vertraulichkeit das Eigentum, das die Privatsph\u00e4re garantiert. Auf diese Informationen kann nur von autorisierten Parteien zugegriffen werden. Spectre is here to stay<\/a><\/p>\n\n\n\n Project Zero team von Google<\/a><\/p>\n\n\n\n Eine Analyse der Seitenkan\u00e4le und der spekulativen Ausf\u00fchrung von Ross Mcilroy, Jaroslav Sevcik, Tobias Tebbi, Ben L. Titzer, Toon Verwaest Computersysteme streben nach drei Schl\u00fcsselsicherheitseigenschaften: Vertraulichkeit Integrit\u00e4t Verf\u00fcgbarkeit Jason Andress. The Basics of Information Security: Understanding the Fundamentals of InfoSec in Theory and Practice. Syngress Publishing, 2nd edition, 2014. Von diesen ist die Vertraulichkeit das […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_front_end_style_editor":"no","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"0","ocean_second_sidebar":"0","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"0","ocean_custom_header_template":"0","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"0","ocean_menu_typo_font_family":"0","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"0","osp_disable_panel":"default","osh_disable_topbar_sticky":"default","osh_disable_header_sticky":"default","osh_sticky_header_style":"default","osh_sticky_header_effect":"","osh_custom_sticky_logo":0,"osh_custom_retina_sticky_logo":0,"osh_custom_sticky_logo_height":0,"osh_background_color":"","osh_links_color":"","osh_links_hover_color":"","osh_links_active_color":"","osh_links_bg_color":"","osh_links_hover_bg_color":"","osh_links_active_bg_color":"","osh_menu_social_links_color":"","osh_menu_social_hover_links_color":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"off","ocean_gallery_id":[],"footnotes":""},"categories":[9,50,48,49,52,44,51],"tags":[],"class_list":["post-965","post","type-post","status-publish","format-standard","hentry","category-__news","category-amd","category-cpu","category-intel","category-meltdown","category-security","category-spectre","entry"],"_links":{"self":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts\/965","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/comments?post=965"}],"version-history":[{"count":0,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/posts\/965\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/media?parent=965"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/categories?post=965"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mosi.at\/ikt\/wp-json\/wp\/v2\/tags?post=965"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Die Vertraulichkeit ist die Basis f\u00fcr viele Sicherheitsmechanismen, einschlie\u00dflich Passw\u00f6rtern, Zugriffstoken, TANs, Cookies und Funktionen. K\u00f6nnen private Daten von unbefugten \u00fcber unvorhergesehene Informationskan\u00e4le<\/strong> zug\u00e4nglich werden, so nennt man diese L\u00fccke „Seitenkanall\u00fccke“.<\/p>\n\n\n\nWindows Server Anleitung zum Schutz gegen speculative Execution und side-channel Verwundbarkeit. [1]<\/a><\/h2>\n\n\n\n
Meltdown und Spectre: Microsoft ver\u00f6ffentlicht Pr\u00fcfwerkzeug f\u00fcr Prozessor-Sicherheitsl\u00fccken<\/h2>\n\n\n\n
PS C:\\admin\\!PS1>Set-ExecutionPolicy RemoteSigned\nPS C:\\admin\\!PS1>Get-SpeculationControlSettings\nFor more information about the output below, please refer to https:\/\/support.microsoft.com\/help\/4074629\n\nSpeculation control settings for CVE-2017-5715 [branch target injection]\nAMD CPU detected: mitigations for branch target injection on AMD CPUs have additional registry settings for this mitigation, please refer to FAQ #15 at https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/ADV180002\n\nHardware support for branch target injection mitigation is present: True\nWindows OS support for branch target injection mitigation is present: True\nWindows OS support for branch target injection mitigation is enabled: True\n\nSpeculation control settings for CVE-2017-5754 [rogue data cache load]\n\nHardware requires kernel VA shadowing: False\n\nSpeculation control settings for CVE-2018-3639 [speculative store bypass]\n\nHardware is vulnerable to speculative store bypass: True\nHardware support for speculative store bypass disable is present: True\nWindows OS support for speculative store bypass disable is present: True\nWindows OS support for speculative store bypass disable is enabled system-wide: False\n\nSpeculation control settings for CVE-2018-3620 [L1 terminal fault]\n\nHardware is vulnerable to L1 terminal fault: False\n\nSpeculation control settings for MDS [microarchitectural data sampling]\n\nWindows OS support for MDS mitigation is present: True\nHardware is vulnerable to MDS: False\n\n\nBTIHardwarePresent : True\nBTIWindowsSupportPresent : True\nBTIWindowsSupportEnabled : True\nBTIDisabledBySystemPolicy : False\nBTIDisabledByNoHardwareSupport : False\nBTIKernelRetpolineEnabled : True\nBTIKernelImportOptimizationEnabled : True\nKVAShadowRequired : False\nKVAShadowWindowsSupportPresent : True\nKVAShadowWindowsSupportEnabled : False\nKVAShadowPcidEnabled : False\nSSBDWindowsSupportPresent : True\nSSBDHardwareVulnerable : True\nSSBDHardwarePresent : True\nSSBDWindowsSupportEnabledSystemWide : False\nL1TFHardwareVulnerable : False\nL1TFWindowsSupportPresent : True\nL1TFWindowsSupportEnabled : False\nL1TFInvalidPteBit : 0\nL1DFlushSupported : False\nMDSWindowsSupportPresent : True\nMDSHardwareVulnerable : False\nMDSWindowsSupportEnabled : False\n\nPS C:\\admin\\!PS1><\/code><\/pre>\n\n\n\nLinksammung:<\/h2>\n\n\n\n