Fundamentally Understanding and Solving RowHammer

Abstract

We provide an overview of recent developments and future directions in the RowHammer vulnerability that plagues modern DRAM (Dynamic Random Memory Access) chips, which are used in almost all computing systems as main memory. RowHammer is the phenomenon in which repeatedly accessing a row in a real DRAM chip causes bitflips (i.e., data corruption) in physically nearby rows. This phenomenon leads to a serious and widespread system security vulnerability, as many works since the original RowHammer paper in 2014 have shown. Recent analysis of the RowHammer phenomenon reveals that the problem is getting much worse as DRAM technology scaling continues: newer DRAM chips are fundamentally more vulnerable to RowHammer at the device and circuit levels. Deeper analysis of RowHammer shows that there are many dimensions to the problem as the vulnerability is sensitive to many variables, including environmental conditions (temperature \& voltage), process variation, stored data patterns, as well as memory access patterns and memory control policies. As such, it has proven difficult to devise fully-secure and very efficient (i.e., low-overhead in performance, energy, area) protection mechanisms against RowHammer and attempts made by DRAM manufacturers have been shown to lack security guarantees. After reviewing various recent developments in exploiting, understanding, and mitigating RowHammer, we discuss future directions that we believe are critical for solving the RowHammer problem. We argue for two major directions to amplify research and development efforts in: 1) building a much deeper understanding of the problem and its many dimensions, in both cutting-edge DRAM chips and computing systems deployed in the field, and 2) the design and development of extremely efficient and fully-secure solutions via system-memory cooperation.

Invited paper to appear in ASPDAC 2023

References in corpus (15)

• BlockHammer: Preventing RowHammer at Low Cost by Blacklisting Rapidly-Accessed DRAM Rows
• Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks
• A Deeper Look into RowHammer`s Sensitivities: Experimental Analysis of Real DRAM Chips and Implications on Future Attacks and Defenses
• DeepHammer: Depleting the Intelligence of Deep Neural Networks through Targeted Chain of Bit Flips
• SoftTRR: Protect Page Tables Against RowHammer Attacks using Software-only Target Row Refresh
• SpyHammer: Understanding and Exploiting RowHammer under Fine-Grained Temperature Variations
• Security Analysis of the Silver Bullet Technique for RowHammer Prevention
• FIGARO: Improving System Performance via Fine-Grained In-DRAM Data Relocation and Caching
• A Case for Transparent Reliability in DRAM Systems
• PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses
• Understanding RowHammer Under Reduced Wordline Voltage: An Experimental Study Using Real DRAM Devices
• HiRA: Hidden Row Activation for Reducing Refresh Latency of Off-the-Shelf DRAM Chips
• Don't Knock! Rowhammer at the Backdoor of DNN Models
• Self-Managing DRAM: A Low-Cost Framework for Enabling Autonomous and Efficient in-DRAM Operations
• ALARM: Active LeArning of Rowhammer Mitigations

Cited by in corpus (1)

• Scalable and Secure Row-Swap: Efficient and Safe Row Hammer Mitigation in Memory Systems