{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"FS Oramfs er offentliggjort, og skjuler karakteren af dataadgang.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kudelski Security, der specialiserer sig i sikkerhedsaudits, har offentliggjort filsystemet Oramfs, der implementerer ORAM (Oblivious Random Access Machine) teknologi, som skjuler karakteren af dataadgangsm\u00f8nsteret. Projektet tilbyder et FUSE-modul til Linux med en filsystemimplementering, der forhindrer sporing af strukturen af skrive- og l\u00e6seoperationer. Koden til Oramfs er skrevet i Rust og distribueres under GPLv3-licensen. <\/p>\n

ORAM-teknologien indeb\u00e6rer oprettelsen af endnu et lag ud over kryptering, som forhindrer fastl\u00e6ggelse af karakteren af den aktuelle aktivitet ved arbejde med data. For eksempel, i tilf\u00e6lde af anvendelse af kryptering til opbevaring af data i en ekstern tjeneste, kan ejere af denne tjeneste ikke kende selve dataene, men de kan bestemme, hvilke blokke der tilg\u00e5s, og hvilke operationer der udf\u00f8res. ORAM skjuler oplysninger om, hvilke dele af filsystemet der tilg\u00e5s, og hvilken specifik operation der udf\u00f8res (l\u00e6sning eller skrivning). <\/p>\n

Oramfs tilbyder et universelt filsystemlag, der g\u00f8r det lettere at organisere datalagring p\u00e5 enhver ekstern opbevaring. Dataene gemmes i krypteret form med mulighed for autentificering. Krypteringsalgoritmer, s\u00e5som ChaCha8, AES-CTR og AES-GCM, kan anvendes. M\u00f8nstre ved adgang til skrivning og l\u00e6sning skjules ved hj\u00e6lp af Path ORAM-ordningen. I fremtiden er der planer om at implementere andre ordninger, men p\u00e5 nuv\u00e6rende tidspunkt er udviklingen stadig p\u00e5 prototype-niveau, som ikke anbefales til brug i produktionssystemer. <\/p>\n

Oramfs kan anvendes med enhver filsystem og er uafh\u00e6ngig af typen af m\u00e5l ekstern lagring \u2014 det er muligt at synkronisere filer til enhver tjeneste, der kan monteres som en lokal mappe (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk og andre tjenester, der underst\u00f8ttes i rclone eller for hvilke der findes FUSE-moduler til montering). St\u00f8rrelsen p\u00e5 lagringen er ikke fast og kan dynamisk udvides, hvis der er behov for mere plads. <\/p>\n

Konfigurationen af Oramfs best\u00e5r i at definere to mapper \u2014 en offentlig og en privat, som fungerer som server<\/a> og kunden. Den offentlige katalog kan v\u00e6re enhver mappe i det lokale filsystem, som er knyttet til eksterne lagringssystemer ved at montere dem via SSHFS, FTPFS, Rclone og enhver anden FUSE-moduler. Den private mappe leveres af FUSE-modulet Oramfs og er beregnet til direkte arbejde med filer gemt i ORAM. I den offentlige katalog placeres en fil med et billede af ORAM. Enhver operation med den private mappe afspejles i tilstanden af denne billede-fil, men denne fil ser ud for en udenforst\u00e5ende som en sort boks, hvor \u00e6ndringer ikke kan associeres med aktiviteter i den private mappe, herunder kan man ikke bestemme, om der er udf\u00f8rt en skrive- eller l\u00e6seoperation. <\/p>\n

Oramfs kan anvendes i omr\u00e5der, hvor den h\u00f8jeste grad af fortrolighed er n\u00f8dvendig, og hvor der kan ofres ydeevne. Ydeevnen falder, da hver handling med lagringen, inklusive data l\u00e6sehandlinger, medf\u00f8rer ombygning af blokke i filsystemet. For eksempel tager det cirka 1 sekund at l\u00e6se en fil p\u00e5 10 MB, og 3 sekunder for 25 MB. Skrivning af 10 MB tager 15 sekunder, mens 25 MB tager 50 sekunder. Oramfs er dog cirka 9 gange hurtigere ved l\u00e6sning og 2 gange hurtigere ved skrivning sammenlignet med filsystemet UtahFS, der udvikles af Cloudflare og valgfrit underst\u00f8tter ORAM-tilstand.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c (data access pattern). \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d FUSE-\u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f Linux \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043b\u043e\u044f \u0424\u0421, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f. \u041a\u043e\u0434 Oramfs \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100680","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Oramfs-filsystemet offentliggjort, som skjuler karakteren af adgangen til data | ProHoster","description":"Kudelski Security, der specialiserer sig i sikkerhedsrevision, har offentliggjort filsystemet Oramfs med implementering af ORAM-teknologi (Oblivious Random Access Machine), der skjuler karakteren af adgangen.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0424\u0421 Oramfs, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-05T08:22:35+00:00","article:modified_time":"2021-07-05T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100680","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-05 08:43:18","updated":"2026-02-22 15:30:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/100680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=100680"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/100680\/revisions"}],"predecessor-version":[{"id":162256,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/100680\/revisions\/162256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=100680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=100680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=100680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}