{"id":183688,"date":"2026-10-08T10:54:10","date_gmt":"2026-10-08T08:54:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/microsoft-opublikoval-pervyj-vypusk-otkrytoj-sistemy-sandbox-izolyaczii-litebox"},"modified":"2026-10-08T10:54:14","modified_gmt":"2026-10-08T08:54:14","slug":"microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","title":{"rendered":"Microsoft ha pubblicato la prima versione del sistema open source di isolamento sandbox Litebox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsoft ha lanciato la prima versione del progetto Litebox, che sviluppa un sistema operativo incentrato sulla sicurezza, realizzato sotto forma di libreria (Library OS). Con questo approccio, i servizi del sistema operativo vengono integrati direttamente nell'applicazione anzich\u00e9 richiamare un nucleo esterno OS tramite chiamate di sistema. Litebox pu\u00f2 essere utilizzato in programmi o nuclei come un ulteriore strato di isolamento, bloccando l'accesso a funzionalit\u00e0 eccessive dei nuclei o API. Il codice del progetto \u00e8 scritto in Rust ed \u00e8 aperto sotto licenza MIT. <\/p>\n

Litebox fornisce una libreria collegabile alle applicazioni con uno strato di isolamento che traduce le richieste a interfacce di programmazione esterne. Queste interfacce esterne possono essere il nucleo Linux, ambienti isolati e protetti OP-TEE (Open Portable Trusted Execution Environment), ambienti WebAssembly o la libreria standard RustStd. <\/p>\n

La piattaforma minima fornita da Litebox \u00e8 applicabile per l'esecuzione di applicazioni Linux e Windows, nuclei Linux embedded e LVBS (Linux Virtualization Based Security). Tra i possibili campi di applicazione di Litebox si menzionano l'esecuzione di programmi Linux non modificati su Windows, l'isolamento dell'esecuzione di applicazioni Linux su sistemi con nucleo Linux, l'esecuzione di programmi sopra AMD SEV SNP per la crittografia della memoria, l'esecuzione di programmi OP-TEE su Linux e l'isolamento utilizzando il concetto di LVBS (utilizzo della virtualizzazione hardware per proteggere singoli componenti del nucleo Linux, ad esempio, quelli utilizzati per il controllo dell'autenticit\u00e0 dei moduli e la gestione degli accessi).

<\/center>
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Litebox, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS). \u041f\u0440\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u043c \u043f\u043e\u0434\u0445\u043e\u0434\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u044f\u0434\u0440\u0443 \u041e\u0421 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. Litebox \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430\u0445 \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":183690,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183688","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft ha pubblicato la prima versione del sistema sandbox di isolamento Litebox | ProHoster","description":"Microsoft ha lanciato la prima versione del progetto Litebox, che sviluppa un sistema operativo incentrato sulla sicurezza, realizzato sotto forma di libreria (Library OS).","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Litebox | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Litebox, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS).","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/microsoft-releases-first-version-of-open-source-sandbox-isolation-system-litebox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-08T08:54:11+00:00","article:modified_time":"2026-10-08T08:54:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/183688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=183688"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/183688\/revisions"}],"predecessor-version":[{"id":183689,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/183688\/revisions\/183689"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/183690"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=183688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=183688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=183688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}