Spole\u010dnost Google p\u0159edstavila programov\u011b-hardin\u00ed syst\u00e9m Open Se Cura, zam\u011b\u0159en\u00fd na zjednodu\u0161en\u00ed v\u00fdroby zabezpe\u010den\u00fdch \u010dip\u016f, ur\u010den\u00fdch pro \u00fakoly souvisej\u00edc\u00ed s strojov\u00fdm u\u010den\u00edm a um\u011blou inteligenc\u00ed. Projekt zahrnuje opera\u010dn\u00ed syst\u00e9m CantripOS a hardwarov\u00e9 za\u0159\u00edzen\u00ed zalo\u017een\u00e9 na platform\u011b OpenTitan a procesorov\u00e9m j\u00e1dru vych\u00e1zej\u00edc\u00edm z architektury RISC-V. B\u011bhem v\u00fdvoje Open Se Cura a CantripOS byly projekty zn\u00e1m\u00e9 jako Sparrow a KataOS, ale aby se vylou\u010dilo p\u0159ekr\u00fdv\u00e1n\u00ed s jin\u00fdmi projekty, byly fin\u00e1ln\u00ed produkty p\u0159ejmenov\u00e1ny. V\u00fdsledky projektu, v\u010detn\u011b zdrojov\u00fdch k\u00f3d\u016f syst\u00e9mov\u00fdch slu\u017eeb a RTL sch\u00e9mat (Register Transfer Level), jsou distribuov\u00e1ny pod licenc\u00ed Apache 2.0. <\/p>\n
Opera\u010dn\u00ed syst\u00e9m CantripOS je zalo\u017een na mikroj\u00e1dru seL4, nad n\u00edm\u017e b\u011b\u017e\u00ed syst\u00e9mov\u00e9 prost\u0159ed\u00ed napsan\u00e9 v jazyce Rust. Pro mikroj\u00e1dro seL4 existuje matematick\u00fd d\u016fkaz spolehlivosti, kter\u00fd potvrzuje pln\u00e9 dodr\u017een\u00ed k\u00f3du specifikac\u00edm, kter\u00e9 byly stanoveny ve form\u00e1ln\u00edm jazyce. Architektura seL4 je zaj\u00edmav\u00e1 t\u00edm, \u017ee odd\u011bluje \u010d\u00e1sti pro \u0159\u00edzen\u00ed prost\u0159edk\u016f j\u00e1dra do u\u017eivatelsk\u00e9ho prostoru a pou\u017e\u00edv\u00e1 pro tyto prost\u0159edky stejn\u00e9 mechanismy pro spr\u00e1vu p\u0159\u00edstupu jako pro u\u017eivatelsk\u00e9 prost\u0159edky. <\/p>\n
Mikroj\u00e1dro neposkytuje p\u0159ipraven\u00e9 vysoce\u00farov\u0148ov\u00e9 abstrakce pro spr\u00e1vu soubor\u016f, proces\u016f, s\u00ed\u0165ov\u00fdch p\u0159ipojen\u00ed apod., m\u00edsto toho poskytuje pouze minim\u00e1ln\u00ed mechanismy pro \u0159\u00edzen\u00ed p\u0159\u00edstupu k fyzick\u00e9mu adresn\u00edmu prostoru, p\u0159eru\u0161en\u00ed a prost\u0159edk\u016fm procesoru. Vysoce\u00farov\u0148ov\u00e9 abstrakce a ovlada\u010de pro interakci s hardwarem se implementuj\u00ed odd\u011blen\u011b nad mikroj\u00e1drem ve form\u011b \u00faloh, kter\u00e9 b\u011b\u017e\u00ed na u\u017eivatelsk\u00e9 \u00farovni. P\u0159\u00edstup t\u011bchto \u00faloh k dostupn\u00fdm prost\u0159edk\u016fm mikroj\u00e1dr lze uspo\u0159\u00e1dat prost\u0159ednictv\u00edm definice pravidel. <\/p>\n
V\u0161echny komponenty OS, s v\u00fdjimkou mikroj\u00e1dra, byly p\u016fvodn\u011b naps\u00e1ny v jazyce Rust s pou\u017eit\u00edm bezpe\u010dn\u00fdch programovac\u00edch technik, kter\u00e9 minimalizuj\u00ed chyby p\u0159i pr\u00e1ci s pam\u011bt\u00ed. V jazyce Rust jsou mimo jin\u00e9 naps\u00e1ny na\u010d\u00edta\u010d aplikac\u00ed v prost\u0159ed\u00ed seL4, syst\u00e9mov\u00e9 slu\u017eby, r\u00e1mec pro v\u00fdvoj aplikac\u00ed, API pro p\u0159\u00edstup k syst\u00e9mov\u00fdm vol\u00e1n\u00edm, spr\u00e1vce proces\u016f a mechanismus dynamick\u00e9ho rozd\u011blov\u00e1n\u00ed pam\u011bti. <\/p>\n
Pro ov\u011b\u0159enou sestavu byl pou\u017eit n\u00e1stroj CAmkES, kter\u00fd vyv\u00edj\u00ed projekt seL4. Pro v\u00fdvoj koncov\u00fdch aplikac\u00ed, kter\u00e9 mohou b\u00fdt dynamicky na\u010d\u00edt\u00e1ny syst\u00e9mov\u00fdmi slu\u017ebami, se doporu\u010duje pou\u017e\u00edt SDK AmbiML a pro prov\u00e1d\u011bn\u00ed model\u016f strojov\u00e9ho u\u010den\u00ed n\u00e1stroj IREE (Intermediate Representation Execution Environment). Komponenty napsan\u00e9 v Rustu a syst\u00e9mov\u00e9 slu\u017eby byly vyvinuty pomoc\u00ed framework\u016f Cantrip. <\/p>\n
Z oblast\u00ed pou\u017eit\u00ed platformy se zmi\u0148uj\u00ed specializovan\u00e9 \u010dipy, kter\u00e9 vy\u017eaduj\u00ed zvl\u00e1\u0161tn\u00ed \u00farove\u0148 ochrany a potvrzen\u00ed absence selh\u00e1n\u00ed. Nap\u0159\u00edklad, platforma m\u016f\u017ee b\u00fdt pou\u017eita v produktech strojov\u00e9ho u\u010den\u00ed, kter\u00e9 se zab\u00fdvaj\u00ed zpracov\u00e1n\u00edm d\u016fv\u011brn\u00fdch informac\u00ed, jako jsou syst\u00e9my rozpozn\u00e1v\u00e1n\u00ed osob a zpracov\u00e1n\u00ed hlasov\u00fdch z\u00e1znam\u016f. Kombinace logicky ov\u011b\u0159en\u00e9ho j\u00e1dra opera\u010dn\u00edho syst\u00e9mu s d\u016fv\u011bryhodn\u00fdmi hardwarov\u00fdmi komponentami (RoT, Root of Trust) zaru\u010duje, \u017ee v p\u0159\u00edpad\u011b selh\u00e1n\u00ed jedn\u00e9 \u010d\u00e1sti syst\u00e9mu se toto selh\u00e1n\u00ed ne\u0161\u00ed\u0159\u00ed na zbytek syst\u00e9mu a zejm\u00e9na na j\u00e1dro a kritick\u00e9 \u010d\u00e1sti. <\/p>\n
Krom\u011b Google se na v\u00fdvoji n\u00e1stroj\u016f a prvk\u016f infrastruktury pod\u00edlela neziskov\u00e1 organizace lowRISC, kter\u00e1 dohl\u00ed\u017e\u00ed na v\u00fdvoj voln\u00e9ho mikroprocesoru zalo\u017een\u00e9ho na architektu\u0159e RISC-V, a tak\u00e9 spole\u010dnosti Antmicro a VeriSilicon. Procesor vyvinut\u00fd organizac\u00ed lowRISC byl pou\u017eit jako j\u00e1dro pro vytvo\u0159en\u00ed d\u016fv\u011bryhodn\u00fdch hardwarov\u00fdch komponent (RoT, Root of Trust). Spole\u010dnost Antmicro poskytla projektu simul\u00e1tor Renode, kter\u00fd umo\u017e\u0148uje testov\u00e1n\u00ed CantripOS a mikroj\u00e1dra seL4 bez skute\u010dn\u00e9ho hardwaru. Spole\u010dnost VeriSilicon sd\u00edlela sv\u00e9 zku\u0161enosti v oblasti v\u00fdroby \u010dip\u016f a v\u00fdvoje BSP (Board Support Package). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 Open Se Cura, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u043c \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\u043c \u0438 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u043e\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 CantripOS \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 OpenTitan \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u043e\u043c \u044f\u0434\u0440\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b RISC-V. \u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Open Se Cura \u0438 CantripOS \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u043b\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111367","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google p\u0159edstavil projekt Open Se Cura pro vytv\u00e1\u0159en\u00ed zabezpe\u010den\u00fdch softwarov\u011b-hardware syst\u00e9m\u016f | ProHoster","description":"Spole\u010dnost Google p\u0159edstavila softwarov\u011b-hardware komplex Open Se Cura, zam\u011b\u0159en\u00fd na usnadn\u011bn\u00ed vytv\u00e1\u0159en\u00ed zabezpe\u010den\u00fdch \u010dip\u016f, ur\u010den\u00fdch k \u0159e\u0161en\u00ed \u00fakol\u016f spojen\u00fdch se strojov\u00fdm u\u010den\u00edm a um\u011blou inteligenc\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/google-predstavil-proekt-open-se-cura-dlya-sozdaniya-zashhishhyonnyh-programmno-apparatnyh-sistem","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Open Se Cura \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 Open Se Cura, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u043c \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\u043c \u0438 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/google-predstavil-proekt-open-se-cura-dlya-sozdaniya-zashhishhyonnyh-programmno-apparatnyh-sistem","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-08T01:10:14+00:00","article:modified_time":"2023-11-08T01:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=111367"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111367\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=111367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=111367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=111367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"