{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"Megjelent az Oramfs FS, amely elrejti az adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s jelleg\u00e9t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Kudelski Security, amely biztons\u00e1gi audit\u00e1l\u00e1sra specializ\u00e1l\u00f3dott, k\u00f6zz\u00e9tette az Oramfs f\u00e1jlrendszert, amely az ORAM (Oblivious Random Access Machine) technol\u00f3gia megval\u00f3s\u00edt\u00e1s\u00e1val rejti el az adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s jelleg\u00e9t. A projekthez egy FUSE modult k\u00edn\u00e1lnak Linux sz\u00e1m\u00e1ra, amely megval\u00f3s\u00edt egy f\u00e1jlrendszer r\u00e9teget, amely megakad\u00e1lyozza az \u00edr\u00e1si \u00e9s olvas\u00e1si m\u0171veletek strukt\u00far\u00e1j\u00e1nak nyomon k\u00f6vet\u00e9s\u00e9t. Az Oramfs k\u00f3dja Rust nyelven \u00edr\u00f3dott, \u00e9s GPLv3 licenc alatt terjesztik. <\/p>\n

Az ORAM technol\u00f3gia azt jelenti, hogy egy \u00fajabb r\u00e9teg j\u00f6n l\u00e9tre a titkos\u00edt\u00e1s mellett, amely megakad\u00e1lyozza a jelenlegi aktivit\u00e1s jelleg\u00e9nek meghat\u00e1roz\u00e1s\u00e1t az adatokkal val\u00f3 munka sor\u00e1n. P\u00e9ld\u00e1ul, ha titkos\u00edt\u00e1st alkalmaznak az adatok k\u00fcls\u0151 szolg\u00e1ltat\u00e1sban val\u00f3 t\u00e1rol\u00e1sakor, a szolg\u00e1ltat\u00e1s tulajdonosai nem tudj\u00e1k meg, hogy mik az adatok, de meghat\u00e1rozhatj\u00e1k, hogy mely blokkokhoz f\u00e9rnek hozz\u00e1 \u00e9s milyen m\u0171veleteket hajtanak v\u00e9gre. Az ORAM eltakarja az inform\u00e1ci\u00f3t arr\u00f3l, hogy mely FS r\u00e9szekhez f\u00e9rnek hozz\u00e1, \u00e9s hogy pontosan melyik m\u0171velet zajlik (olvas\u00e1s vagy \u00edr\u00e1s). <\/p>\n

Az Oramfs egy univerz\u00e1lis f\u00e1jlrendszer-r\u00e9teg, amely megk\u00f6nny\u00edti az adatok t\u00e1rol\u00e1s\u00e1nak szervez\u00e9s\u00e9t b\u00e1rmilyen k\u00fcls\u0151 t\u00e1rol\u00f3n. Az adatok titkos\u00edtott form\u00e1ban t\u00e1rol\u00f3dnak, opcion\u00e1lis hiteles\u00edt\u00e9si lehet\u0151s\u00e9ggel. Titkos\u00edt\u00e1sra haszn\u00e1lhat\u00f3k a ChaCha8, AES-CTR \u00e9s AES-GCM algoritmusok. Az \u00edr\u00e1si \u00e9s olvas\u00e1si hozz\u00e1f\u00e9r\u00e9s szab\u00e1lyszer\u0171s\u00e9geit a Path ORAM s\u00e9ma haszn\u00e1lat\u00e1val rejtik el. A j\u00f6v\u0151ben m\u00e1s s\u00e9m\u00e1k megval\u00f3s\u00edt\u00e1sa is tervezett, de a jelenlegi verzi\u00f3 m\u00e9g protot\u00edpus \u00e1llapotban van, amelyet nem aj\u00e1nlott \u00e9les rendszerekben haszn\u00e1lni. <\/p>\n

Az Oramfs b\u00e1rmilyen f\u00e1jlrendszerrel haszn\u00e1lhat\u00f3, \u00e9s nem f\u00fcgg a c\u00e9lzott k\u00fcls\u0151 t\u00e1rol\u00f3 t\u00edpus\u00e1t\u00f3l \u2014 f\u00e1jlok szinkroniz\u00e1l\u00e1sa lehets\u00e9ges b\u00e1rmely szolg\u00e1ltat\u00e1sra, amelyet helyi k\u00f6nyvt\u00e1rk\u00e9nt lehet csatolni (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk \u00e9s m\u00e1s, az rclone-ban t\u00e1mogatott szolg\u00e1ltat\u00e1sokra, vagy amelyekhez FUSE-modulok \u00e1llnak rendelkez\u00e9sre a csatlakoz\u00e1shoz). A t\u00e1rol\u00f3 m\u00e9rete nem fix, \u00e9s sz\u00fcks\u00e9g eset\u00e9n az ORAM m\u00e9rete dinamikusan n\u00f6velhet\u0151. <\/p>\n

Az Oramfs be\u00e1ll\u00edt\u00e1sa k\u00e9t k\u00f6nyvt\u00e1r meghat\u00e1roz\u00e1s\u00e1ra korl\u00e1toz\u00f3dik \u2014 a nyilv\u00e1nos \u00e9s a priv\u00e1t, amelyek szerepet j\u00e1tszanak a szerver<\/a> \u00e9s az \u00fcgyfelek. A nyilv\u00e1nos k\u00f6nyvt\u00e1r lehet b\u00e1rmilyen k\u00f6nyvt\u00e1r a helyi f\u00e1jlrendszerben, amely k\u00fcls\u0151 t\u00e1rol\u00f3khoz csatlakozik az SSHFS, FTPFS, Rclone \u00e9s m\u00e1s FUSE-modulok seg\u00edts\u00e9g\u00e9vel. A mag\u00e1nk\u00f6nyvt\u00e1rat az Oramfs FUSE-modul biztos\u00edtja, \u00e9s k\u00f6zvetlen\u00fcl a ORAM-ban t\u00e1rolt f\u00e1jlokkal val\u00f3 munk\u00e1ra szolg\u00e1l. A nyilv\u00e1nos k\u00f6nyvt\u00e1rban tal\u00e1lhat\u00f3 egy f\u00e1jl az ORAM k\u00e9pm\u00e1s\u00e1val. B\u00e1rmely m\u0171velet a mag\u00e1nk\u00f6nyvt\u00e1rral t\u00fckr\u00f6z\u0151dik ezen k\u00e9pf\u00e1jl \u00e1llapot\u00e1ban, de ez a f\u00e1jl a k\u00fcls\u0151 megfigyel\u0151k sz\u00e1m\u00e1ra fekete dobozk\u00e9nt jelenik meg, amelynek m\u00f3dos\u00edt\u00e1sait nem lehet asszoci\u00e1lni a mag\u00e1nk\u00f6nyvt\u00e1r aktivit\u00e1s\u00e1val, bele\u00e9rtve azt is, hogy nem lehet meg\u00e1llap\u00edtani, hogy \u00edr\u00e1si vagy olvas\u00e1si m\u0171velet t\u00f6rt\u00e9nt. <\/p>\n

Az Oramfs alkalmazhat\u00f3 olyan ter\u00fcleteken, ahol a legmagasabb szint\u0171 adatv\u00e9delem sz\u00fcks\u00e9ges, \u00e9s fel\u00e1ldozhat\u00f3 a teljes\u00edtm\u00e9ny. A teljes\u00edtm\u00e9ny cs\u00f6kken, mivel minden t\u00e1rol\u00f3val v\u00e9gzett m\u0171velet, bele\u00e9rtve az adatok olvas\u00e1s\u00e1t is, t\u00f6mb\u00f6k \u00e1talak\u00edt\u00e1s\u00e1hoz vezet a f\u00e1jlrendszer k\u00e9p\u00e9ben. P\u00e9ld\u00e1ul egy 10 MB-os f\u00e1jl olvas\u00e1sa k\u00f6r\u00fclbel\u00fcl 1 m\u00e1sodpercet vesz ig\u00e9nybe, egy 25 MB-os f\u00e1jl eset\u00e9ben pedig 3 m\u00e1sodpercet. A 10 MB \u00edr\u00e1s\u00e1hoz 15 m\u00e1sodperc sz\u00fcks\u00e9ges, a 25 MB eset\u00e9ben pedig 50 m\u00e1sodperc. Ezzel egy\u00fctt az Oramfs k\u00f6r\u00fclbel\u00fcl 9-szer gyorsabb az olvas\u00e1s sor\u00e1n, \u00e9s 2-szer gyorsabb az \u00edr\u00e1s sor\u00e1n, \u00f6sszehasonl\u00edtva a Cloudflare \u00e1ltal fejlesztett UtahFS f\u00e1jlrendszerrel, amely opcion\u00e1lisan t\u00e1mogatja az ORAM \u00fczemm\u00f3dot.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c (data access pattern). \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d FUSE-\u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f Linux \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043b\u043e\u044f \u0424\u0421, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f. \u041a\u043e\u0434 Oramfs \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100680","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Megjelent az Oramfs f\u00e1jlrendszer, amely elrejti az adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s jelleg\u00e9t | ProHoster","description":"A Kudelski Security c\u00e9g, amely biztons\u00e1gi audit\u00e1l\u00e1sra specializ\u00e1l\u00f3dott, k\u00f6zz\u00e9tette az Oramfs f\u00e1jlrendszert, amely az ORAM (Oblivious Random Access Machine) technol\u00f3gia megval\u00f3s\u00edt\u00e1s\u00e1val \u00e1lc\u00e1zza a hozz\u00e1f\u00e9r\u00e9si m\u00f3dszert.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0424\u0421 Oramfs, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-05T08:22:35+00:00","article:modified_time":"2021-07-05T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100680","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-05 08:43:18","updated":"2026-02-22 15:30:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/100680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=100680"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/100680\/revisions"}],"predecessor-version":[{"id":162256,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/100680\/revisions\/162256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=100680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=100680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=100680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}