{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"Avaldatud on FS Oramfs, mis varjab juurdep\u00e4\u00e4su andmetele.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kudelski Security, mis on spetsialiseerunud turvaaudititele, on avaldanud failis\u00fcsteemi Oramfs, mis on rakendatud ORAM (Oblivious Random Access Machine) tehnoloogia, mis varjab andmete juurdep\u00e4\u00e4su iseloomu (data access pattern). Projekt pakub FUSE moodulit Linuxile, mis rakendab failis\u00fcsteemi kihti, mis ei v\u00f5imalda kirjutamis- ja lugemisoperatsioonide struktuuri j\u00e4lgimist. Oramfs kood on kirjutatud keeles Rust ja seda levitatakse GPLv3 litsentsi alusel. <\/p>\n

ORAM tehnoloogia t\u00e4hendab veel \u00fche kihi loomist, mis on lisaks kr\u00fcptimisele ja ei luba m\u00e4\u00e4rata aktiivsuse iseloomu andmetega t\u00f6\u00f6tamisel. N\u00e4iteks, kui andmeid kr\u00fcpteeritakse kolmandas osas, ei saa selle teenuse omanikud teada andmete sisu, aga nad saavad siiski kindlaks teha, millistele blokkidele juurdep\u00e4\u00e4s toimub ja milliseid operatsioone teostatakse. ORAM varjab teavet selle kohta, millistele failis\u00fcsteemi osadele juurdep\u00e4\u00e4s toimub ja milline operatsioon toimub (lugemine v\u00f5i kirjutamine). <\/p>\n

Oramfs pakub universaalset failis\u00fcsteemi vahet\u00fckki, mis lihtsustab andmete salvestamise korraldust mis tahes v\u00e4listes salvestusseadmetes. Andmed salvestatakse kr\u00fcpteeritud kujul koos valikulise autentimise v\u00f5imalusega. Kr\u00fcptimiseks saab kasutada algoritme ChaCha8, AES-CTR ja AES-GCM. Kirjutamis- ja lugemisjuhtimisseamise mustrid peidetakse Path ORAM skeemi abil. Tulevikus on plaanis rakendada ka muid skeeme, kuid praegusel juhul on arendus veel protot\u00fc\u00fcpide faasis, mida ei soovitata kasutada t\u00f6\u00f6s\u00fcsteemides. <\/p>\n

Oramfs saab kasutada igasuguste failis\u00fcsteemidega ja see ei s\u00f5ltu sihtv\u00e4lisest salvestust\u00fc\u00fcbist \u2014 faile on v\u00f5imalik s\u00fcnkroonida mistahes teenusesse, mida saab mountida kohalikku katalooge (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk ja teised teenused, mida toetab rclone v\u00f5i millele on saadaval FUSE-moodulid mountimiseks). Salvestuse suurus ei ole fikseeritud ning vajadusel saab ORAM-d d\u00fcnaamiliselt suurendada. <\/p>\n

Oramfsi seadistamine seisneb kahe katalooge \u2014 avaliku ja privaatsuse \u2014 m\u00e4\u00e4ratlemises, mis m\u00e4ngivad rolli serverid<\/a> ja kliendi. Avalik kaust v\u00f5ib olla \u00fcksk\u00f5ik milline kataloog kohalikes failis\u00fcsteemides, mis on seotud v\u00e4liste ladustamistega, monteerides need SSHFS, FTPFS, Rclone ja igasuguste teiste FUSE-moodulite kaudu. Privaatne kaust on FUSE-mooduli Oramfs poolt pakutud ja on m\u00f5eldud ORAM-is talletatud failidega otseseks t\u00f6\u00f6tamiseks. Avalikus kaustas asub ORAM-i kujutise fail. Iga toiming privaatse kaustaga kajastub selle kujutise faili olukorras, kuid see fail n\u00e4ib v\u00e4lish\u00e4lbete jaoks musta karpena, mille muudatusi ei saa seostada privaatse kaustaga seotud tegevustega, sealhulgas ei saa kindlaks teha, kas on toimunud kirje v\u00f5i lugemise operatsioon. <\/p>\n

Oramfs v\u00f5ib rakenduda valdkondades, kus on vajalik saavutada k\u00f5rgeim konfidentsiaalsuse tase ning kus v\u00f5ib ohverdada j\u00f5udluse. J\u00f5udlus v\u00e4heneb, kuna iga operatsioon salvestusega, sealhulgas andmete lugemise operatsioonid, toovad kaasa plokkide \u00fcmberkujundamise failis\u00fcsteemis. N\u00e4iteks, 10 MB suuruse faili lugemine v\u00f5tab umbes 1 sekundi, samas kui 25 MB \u2014 3 sekundi. 10 MB kirjutamine v\u00f5tab 15 sekundit, samas kui 25 MB \u2014 50 sekundit. Sellegipoolest on Oramfs lugemise osas umbes 9 korda kiirem ja kirjutamise osas 2 korda kiirem v\u00f5rreldes UtahFS faili s\u00fcsteemiga, mida arendab Cloudflare ja mis toetab valikuliselt ORAM-re\u017eiimi.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c (data access pattern). \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d FUSE-\u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f Linux \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043b\u043e\u044f \u0424\u0421, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f. \u041a\u043e\u0434 Oramfs \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100680","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Avaldatud failis\u00fcsteem Oramfs, mis varjab andmete juurde p\u00e4\u00e4su iseloomu | ProHoster","description":"Kudelski Security, mis on spetsialiseerunud turbeauditi l\u00e4biviimisele, avaldas failis\u00fcsteemi Oramfs, mis on rakendatud ORAM (Oblivious Random Access Machine) tehnoloogiaga, varjades juurdep\u00e4\u00e4su iseloomu.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0424\u0421 Oramfs, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-05T08:22:35+00:00","article:modified_time":"2021-07-05T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100680","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-05 08:43:18","updated":"2026-02-22 15:30:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100680"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100680\/revisions"}],"predecessor-version":[{"id":162256,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100680\/revisions\/162256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}