一句话:提出反应式 DRAM 防护 RowArmor,通过地址扰乱与增强 ECC 抵御 RowHammer/RowPress 等扰动攻击。
随着工艺微缩,DRAM 对 RowHammer 等扰动攻击愈发脆弱,可能破坏数据完整性或造成拒绝服务(DoS)。现有防御多依赖激活监控与额外刷新,属于预防式方法,不仅性能开销大,还可能加剧 DoS 风险。本文提出 RowArmor,一种反应式防御机制,在扰动错误发生时通过地址扰乱和增强纠错码(ECC)进行纠正,从而避免预防式方案的高成本,并能覆盖 RowPress 等多样攻击模式。评估表明,RowArmor 能有效防御数据损坏和 DoS 攻击,性能开销最高仅 0.7%。
Shrinking process technologies have made DRAM increasingly vulnerable to disturbance attacks, such as RowHammer, which can compromise data integrity or induce a Denial-of-Service (DoS) state. Existing solutions focus on preventing errors through activation monitoring and extra refreshes, but they often incur substantial performance overhead and can unintentionally exacerbate DoS risks. This paper introduces RowArmor, a novel defense mechanism that addresses both data corruption and DoS attacks. RowArmor adopts a reactive approach, correcting disturbance errors as they occur via address scrambling and enhanced error correcting codes. This strategy avoids the high costs of preventive methods while addressing diverse attack patterns, including RowPress. Our evaluation demonstrates that RowArmor effectively defends against data corruption and DoS attacks with a negligible performance overhead of up to 0.7%.
@inproceedings{WiYKSKR0AK26,
title = {RowArmor: Efficient and Comprehensive Protection Against DRAM Disturbance Attacks},
author = {Minbok Wi and Yoonyul Yoo and Yoojin Kim and Jaeho Shin and Jumin Kim and Yesin Ryu and Saeid Gorgin and Jung Ho Ahn and Jungrae Kim},
booktitle = {ASPLOS},
year = {2026},
doi = {10.1145/3779212.3790213}
}