arrow
Return

Verifying DRAM Addressing in Software

delete2026-01-01
delete0
PRE
AI
M
Martin Heckel *
F
Florian Adamsky
J
Jonas Juffinger
F
Fabian Rauscher
D
Daniel Gruss
DOI:10.1007/978-3-032-07894-0_10delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
In this paper, we introduce a novel approach to reliably verifying DRAM addressing functions and function components from software. We perform the first systematic analysis of 5 DRAM function reverse-engineering tools on 2 different DDR3, 4 DDR4, and 4 DDR5 system configurations, revealing a significant variance in the success rate of these tools, from 0% to 92.9%. We discover the previously unknown rank selection side channel and reverse engineer its function on two DDR4 and two DDR5 systems. These results enable novel DDR5 row-conflict side-channel attacks, which we demonstrate in two scenarios: First, we evaluate the DDR5 row-conflict side channel in a covert channel with 1.39Mbit/s. Second, we evaluate the channel in a website fingerprinting attack with an F-1 score of 84% on DDR4 and 74% on DDR5.
Keywords:
DRAM addressing
reverse-engineering
side-channel attacks
DDR5
row-conflict

Journal

C
COMPUTER SECURITY-ESORICS 2025, PT III
IF:
0
Papers:
26
Citations:
0

Organization

G
graz university of technology
Scholars:
735
Papers: 338
Citations: 0