永久性 DOS 攻击 - 有人了解吗？
因此，我正在研究一门课程的永久 DOS 攻击，但我很难想出具体的例子。有很多关于 Phlashing 的信息（对于那些不知道该术语的人来说，刷写固件以破坏设备或将恶意固件置于其位置），但我想提供更广泛的示例。
话虽这么说，必须有一种方法来编写代码来执行诸如磨损磁盘臂之类的操作，对吧？某些东西会让磁盘寻找到磁盘的末尾，然后回到前面，如此循环往复。有人有一个如何实现这一点的例子吗？有没有某种方法可以指定在 C 中跟踪磁盘上的位置（类似于遍历文件中的某个点，但针对整个 HDD！）？如果没有，我想总是试图强制文件在磁盘上的位置......这似乎不太有趣。再说一次，你能以编程方式做类似的事情吗？
如果有人对这些类型的攻击有任何见解，或者有任何好的资源供我检查，我将不胜感激。也许您几年前在 Slashdot 上读过有关它的故事？让我知道！我收集的信息越多，我就越不可能被迫在课堂上用砖块来消磨我的演讲时间:)我不是靠金钱或路由器！
So, I'm looking into Permanent DOS attacks for a class, and I'm having a hard time coming up with concrete examples. There's a lot of information about Phlashing (flashing firmware to either brick the device, or put malicious firmware in its place, for those of you who don't know the term) but I'd like to have a broader set of examples.
That being said, there has to be a way to write code that will do something like wear out disk arms, right? Something that will have the disk seek to the end of the disk, then back to the front, on and on. Anyone have an example of how that would be accomplished? Is there some way to specify where to track to on a disk in C (similar to traversing to a certain point in a file, but for the entire HDD!)? If not, I guess there's always trying to force a file's location on the disk... which seems like less fun trying to accomplish. Again, can you do something like that programmatically?
If anyone has any insight into these types of attacks, or any good resources for me to check into, I'd appreciate it. Maybe you read a story about it on Slashdot a few years back? Let me know! The more info I can gather, the less likely I'll be forced to kill time during my talk by bricking my router in the class :) I'm not made of money OR routers!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（7）
似乎这些主要限于物理攻击和社会工程（“要启用计算机的隐藏涡轮功能，请拆下盖子并撬开这个部分）。但是：
将屏幕刷新率调整到疯狂 。
猴子使用 ACPI 风扇、充电或电池控制（如果可能导致过热或电池故障）
覆盖连接到任何总线的每种可重写存储设备。发现并覆盖您了解闪存更新程序详细信息的任何 IDE、USB 等设备。覆盖
当然，没有什么是永久的。硬盘、BIOS芯片、CPU、主板、内存等...
Seems like these would primarily be limited to physical attacks and social engineering ("To enable your computer's hidden turbo function, remove the cover and pry this part). But:
Adjust screen refresh rates to insane values to blow older CRTs
Monkey with ACPI fan, charge, or battery controls if possible to cause overheating or battery failure.
Overwrite every rewritable storage device of every kind attached to any bus. Discover and overwrite any IDE, USB, etc... device you know the flash updater details for.
Of course nothing is permanent. You can replace the hard drive, BIOS chips, CPU, motherboard, memory, etc...
虽然它主要是虚构的，但停止并着火操作将是一种非常方便且永久的DOS攻击。
Although it is mostly fictional, the halt and catch fire operation would be a very convenient and permanent DOS attack.
Steve Gibson（谷歌搜索他的名字）几年前写了一篇关于 TCP/IP 协议级漏洞的论文。其中一些内容在今天仍然具有现实意义。
Steve Gibson (google his name) has a paper he wrote a few years back about protocol-level vulnerabilities in TCP/IP. Some of it is still pertinent today.
对电力公司或 ISP 进行社会工程，以关闭相关位置的服务。
Socially engineer the power company or ISP to turn off service at the location in question.
如今计算机中的许多设备都有自己的固件，包括但不限于CPU、DVD、HDD、VGA、主板(BIOS)等。这些设备中的大多数也有更新各自固件的方式。这也可以用来非常有效地砖砌它们。尽管这确实需要对每个设备采取单独的方法，通常使用特权指令和未记录的接口。
Many devices in the computer today have their own firmwares, including but not limited to CPU, DVD, HDD, VGA, motherboard (BIOS) etc. Most of these devices also have a way of updating their respective firmwares. Which can also be used to brick them pretty efficiently. Although this does require an individual approach to every device, often using privileged instructions and undocumented interfaces.
病毒有可能做到这一点。我似乎记得当时确实有病毒这样做过，但找不到任何证据来支持这一点。
我找到一篇文章，其中作者与西部数据的副总裁进行了对话，其中他指出，一个程序可能会访问硬盘驱动器的固件，从而导致此类 DOS 攻击：
It's possible for a virus to do this. I seem to recall an actual virus doing this back in the day, but can't find anything to back that up.
I was able to find an article where the author has a conversation with the VP from Western Digital wherein he states a program could potentially access a hard drive's firmware causing such a DOS attack:
曾经有一些病毒可能导致旧 CRT 显示器损坏。它们可能会导致 VGA 点发出无效的同步信号，该信号的频率对于视频扫描来说太高。我还记得一些会使用坏扇区标记在旧版本的 Scandisk 上绘制图像（我们正在谈论 90 年代初或更早的版本）。我不记得名称或有任何参考资料，但它们曾经相当恼人的。
幸运的是，更好的电路、内存保护、API 抽象使得此类攻击变得非常困难甚至不可能。
There used to be a few viruses that could cause old CRT monitors to break. They could cause invalid sync signals out the VGA point that would be too high in frequency for the video sweep. I also remember a few that would use bad sector flagging to draw images on the old versions of Scandisk (we are talking early 90’s or older.) I don't remember and of the names or have any references, but they used to be quite annoying.
Fortunately better circuits, memory protection, API abstraction have made such attacked very difficult to impossible.