Whereas every file system is sandboxed, that means it’s remoted from different web sites and from the gadget system itself, the JavaScript can measure the I/O interactions. Then, by working these interactions via a pretrained convolutional neural community—a system that makes use of deep studying to investigate textual content, audio, and pictures—the attacker can deduce varied apps and web sites open on the gadget.
“The attacker repeatedly measures SSD competition by performing random reads from a big OPFS file,” the researchers defined. “SSD competition attributable to person exercise causes measurable latency variations for these learn operations. By coaching a convolutional neural community (CNN) on these traces, the attacker can fingerprint person exercise on the host system by classifying new traces utilizing the educated mannequin.”
The method has its limitations. First, the OPFS file should be extraordinarily massive—seemingly a gigabyte or extra. That requirement implies that assaults at scale would inevitably be detected by many customers. Moreover, the OPFS file should be saved on the identical SSD the customer is utilizing. This isn’t often an issue for monitoring open web sites, for the reason that OPFS file is saved within the browser’s default location. Within the occasion apps are utilizing a separate SSD drive for apps, these apps couldn’t be detected by FROST.
Top-of-the-line methods to stop FROST assaults is to shut tabs as quickly as they’re not wanted. Extra savvy customers can monitor the creation and dimension of OPFS recordsdata allotted by unknown web sites. The researchers proposed methods for browser makers to close down the aspect channel. One such methodology is to restrict the utmost dimension of such recordsdata which might be allowed. There aren’t any indications FROST assaults have been carried out within the wild.
The researchers carried out the total Frost assault on an M2 Mac. On Linux, they confirmed that the underlying primitive (measuring SSD entry latency traces from JavaScript) works, however didn’t run the total assault.
“Nevertheless, for the reason that efficiency of the primitive is comparable between macOS and Linux, we anticipate comparable efficiency for the total classification,” Hannes Weissteiner, one of many co-authors, wrote in an electronic mail. “In precept, it will be potential to coach a mannequin on any system exercise that reliably generates SSD accesses.”
The researchers didn’t take a look at Home windows.
The paper linked above supplies many extra technical particulars. The analysis is scheduled to be offered on the DIMVA convention in July.
![Transparency in B2B Branding with Focus Lab’s Invoice Kenney [Video]](https://blog.aimactgrow.com/wp-content/uploads/2026/08/G2CM_FI1124_Learn_Article_Images-5BProfessional_Spotlight_Bill_Kenney5D_V2a-120x86.png)
