{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"Avalikustatud on Oramfsi failis\u00fcsteem, mis varjab andmete juurde p\u00e4\u00e4semise iseloomu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kudelski Security, mis on spetsialiseerunud turvaaudite l\u00e4biviimisele, avaldas faili s\u00fcsteemi Oramfs, mis rakendab ORAM (Oblivious Random Access Machine) tehnoloogiat, maskeerides andmete juurdep\u00e4\u00e4sude mustri. Projekti raames on pakutud FUSE-moodulit Linuxile, mis rakendab failis\u00fcsteemi kihti, mis ei v\u00f5imalda j\u00e4lgida kirjutamise ja lugemise operatsioonide struktuuri. Oramfsi kood on kirjutatud Rust-programmeerimiskeeles ja levitatakse GPLv3 litsentsi alusel. <\/p>\n

ORAM tehnoloogia h\u00f5lmab \u00fche t\u00e4iendava kihi loomist, peale kr\u00fcpteerimise, mis ei v\u00f5imalda m\u00e4\u00e4rata aktiivsuse iseloomu andmetega t\u00f6\u00f6tamisel. N\u00e4iteks, kui salvestate andmeid kolmandate osapoolte teenuses kr\u00fcpteeritult, ei saa teenuse omanikud teada andmete sisu, kuid nad saavad m\u00e4\u00e4rata, milliseid blokke kasutatakse ja milliseid operatsioone sooritatakse. ORAM peidab teavet selle kohta, millistele failis\u00fcsteemi osadele juurdep\u00e4\u00e4setakse ja milliseid operatsioone sooritatakse (lugemine v\u00f5i kirjutamine). <\/p>\n

Oramfs pakub universaalset failis\u00fcsteemi vahetust, mis v\u00f5imaldab lihtsustada andmete salvestamise korraldust igasugustes v\u00e4listes salvestuskohtades. Andmed salvestatakse kr\u00fcpteeritud kujul koos valikulise autentimise kontrollimise v\u00f5imalusega. Kr\u00fcpteerimiseks v\u00f5ivad kasutada algoritme ChaCha8, AES-CTR ja AES-GCM. Kirjutamise ja lugemise juurdep\u00e4\u00e4sude mustrid varjatakse Path ORAM skeemi abil. Tulevikus on plaanis rakendada ka teisi skeeme, kuid praeguses etapis on arendus veel protot\u00fc\u00fcbi tasemel, mida ei soovitata kasutada tootmiss\u00fcsteemides. <\/p>\n

Oramfs saab kasutada k\u00f5igi failis\u00fcsteemidega ning see ei s\u00f5ltu sihtv\u00e4lise salvestusruumi t\u00fc\u00fcbist \u2014 failide s\u00fcnkroniseerimine on v\u00f5imalik igas teenuses, mida saab monteerida kohaliku kataloogina (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk ja teised teenused, mida toetab rclone v\u00f5i mille jaoks on olemas FUSE-moodulid monteerimiseks). Salvestusruumi suurus ei ole fikseeritud ja h\u00e4davajadusel v\u00f5ib ORAMi suurus d\u00fcnaamiliselt suureneda. <\/p>\n

Oramfsi seadistamine seisneb kahe katalooge \u2014 avaliku ja privaatsel, m\u00e4\u00e4ratlemises, mis t\u00e4idavad rolli serverid<\/a> ja klient. Avalik kataloog v\u00f5ib olla mis tahes kataloog kohalikus failis\u00fcsteemis, mis on seotud v\u00e4liste salvestusseadmetega, montaa\u017ei teel SSHFS, FTPFS, Rclone ja teiste FUSE-moodulitega. Privaatne kataloog on saadaval FUSE-mooduli Oramfs kaudu ja on m\u00f5eldud failidega, mis on salvestatud ORAM, vahetuks t\u00f6\u00f6tamiseks. Avalikus kataloogis on fail ORAM-i kujutisega. Iga operatsioon privaatse katalooge kajastub selle kujutise staatuses, kuid see fail n\u00e4eb v\u00e4lise vaatleja jaoks v\u00e4lja nagu must karp, mille muutusi ei saa seostada privaatse katalooge tegevustega, sealhulgas ei saa m\u00e4\u00e4rata, kas kirjutamine v\u00f5i lugemine on toimunud. <\/p>\n

Oramfs v\u00f5ib olla kasulik valdkondades, kus on vajalik saavutada k\u00f5rgeim konfidentsiaalsuse tase ning kus v\u00f5ib ohverdada j\u00f5udlust. J\u00f5udlus v\u00e4heneb, kuna iga operatsioon salvestusruumiga, sealhulgas andmete lugemise operatsioonid, p\u00f5hjustavad failis\u00fcsteemi plokkide uuesti \u00fclesehitamist. N\u00e4iteks 10 MB faili lugemine v\u00f5tab umbes 1 sekundi, samas kui 25 MB \u2014 3 sekundit. 10 MB kirjutamine v\u00f5tab 15 sekundit ja 25 MB \u2014 50 sekundit. Samas on Oramfs lugemisel umbes 9 korda kiirem ja kirjutamisel 2 korda kiirem v\u00f5rreldes UtahFS failis\u00fcsteemiga, mida arendab Cloudflare ja mis valikuliselt toetab ORAM-re\u017eiimi.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c (data access pattern). \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d FUSE-\u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f Linux \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043b\u043e\u044f \u0424\u0421, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f. \u041a\u043e\u0434 Oramfs \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100680","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Avaldatud failis\u00fcsteem Oramfs, mis varjab juurdep\u00e4\u00e4su andmetele | ProHoster","description":"Ettev\u00f5te Kudelski Security, mis spetsialiseerub turvaauditite l\u00e4biviimisele, avaldas failis\u00fcsteemi Oramfs ORAM-tehnoloogia (Oblivious Random Access Machine) rakendusega, mis varjab juurdep\u00e4\u00e4su olemust.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0424\u0421 Oramfs, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-05T08:22:35+00:00","article:modified_time":"2021-07-05T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100680","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-05 08:43:18","updated":"2026-02-22 15:30:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100680"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100680\/revisions"}],"predecessor-version":[{"id":162256,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100680\/revisions\/162256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}