{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"Foi publicada a FSS Oramfs, que oculta o padr\u00e3o de acesso a dados.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Kudelski Security, especializada em auditorias de seguran\u00e7a, lan\u00e7ou o sistema de arquivos Oramfs com a implementa\u00e7\u00e3o da tecnologia ORAM (Oblivious Random Access Machine), que oculta o padr\u00e3o de acesso a dados. O projeto prop\u00f5e um m\u00f3dulo FUSE para Linux com uma camada de sistema de arquivos que n\u00e3o permite rastrear a estrutura das opera\u00e7\u00f5es de grava\u00e7\u00e3o e leitura. O c\u00f3digo do Oramfs foi escrito em Rust e \u00e9 distribu\u00eddo sob a licen\u00e7a GPLv3. <\/p>\n

A tecnologia ORAM implica a cria\u00e7\u00e3o de mais uma camada al\u00e9m da criptografia, que n\u00e3o permite identificar a natureza da atividade atual ao trabalhar com os dados. Por exemplo, ao usar criptografia para armazenar dados em um servi\u00e7o de terceiros, os propriet\u00e1rios desse servi\u00e7o n\u00e3o podem saber os pr\u00f3prios dados, mas podem perceber a quais blocos est\u00e1 sendo feito acesso e quais opera\u00e7\u00f5es est\u00e3o sendo realizadas. O ORAM oculta informa\u00e7\u00f5es sobre quais partes do sistema de arquivos est\u00e3o sendo acessadas e qual opera\u00e7\u00e3o espec\u00edfica est\u00e1 sendo executada (leitura ou grava\u00e7\u00e3o). <\/p>\n

O Oramfs fornece um sistema de arquivos intermedi\u00e1rio vers\u00e1til, permitindo simplificar a organiza\u00e7\u00e3o do armazenamento de dados em quaisquer dispositivos de armazenamento externos. Os dados s\u00e3o salvos de forma criptografada, com uma op\u00e7\u00e3o de verifica\u00e7\u00e3o de autenticidade. Podem ser utilizados os algoritmos ChaCha8, AES-CTR e AES-GCM para a criptografia. Os padr\u00f5es de acesso para grava\u00e7\u00e3o e leitura s\u00e3o ocultados usando o esquema Path ORAM. No futuro, a implementa\u00e7\u00e3o de outros esquemas est\u00e1 prevista, mas no momento o desenvolvimento est\u00e1 em est\u00e1gio prot\u00f3tipo, que n\u00e3o \u00e9 recomendado para sistemas em produ\u00e7\u00e3o. <\/p>\n

Oramfs pode ser usado com qualquer sistema de arquivos e n\u00e3o depende do tipo de armazenamento externo alvo \u2014 a sincroniza\u00e7\u00e3o de arquivos \u00e9 poss\u00edvel em qualquer servi\u00e7o que possa ser montado na forma de diret\u00f3rio local (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk e outros servi\u00e7os suportados pelo rclone ou para os quais existem m\u00f3dulos FUSE para montagem). O tamanho do armazenamento n\u00e3o \u00e9 fixo e, se necess\u00e1rio, o tamanho do ORAM pode aumentar dinamicamente. <\/p>\n

A configura\u00e7\u00e3o do Oramfs resume-se \u00e0 defini\u00e7\u00e3o de dois diret\u00f3rios \u2014 p\u00fablico e privado, que desempenham o papel de servidor<\/a> e do cliente. O cat\u00e1logo p\u00fablico pode ser qualquer diret\u00f3rio no sistema de arquivos local que esteja associado a armazenamento externo por meio de montagem via SSHFS, FTPFS, Rclone e outros m\u00f3dulos FUSE. O diret\u00f3rio privado \u00e9 fornecido pelo m\u00f3dulo FUSE Oramfs e destina-se ao trabalho direto com arquivos armazenados em ORAM. No cat\u00e1logo p\u00fablico, \u00e9 colocado um arquivo com a imagem de ORAM. Qualquer opera\u00e7\u00e3o no cat\u00e1logo privado reflete-se no estado desse arquivo-imagem, mas esse arquivo parece para o observador externo como uma caixa preta, cujas altera\u00e7\u00f5es n\u00e3o podem ser associadas \u00e0 atividade no cat\u00e1logo privado, incluindo a impossibilidade de determinar se uma opera\u00e7\u00e3o de grava\u00e7\u00e3o ou leitura foi realizada. <\/p>\n

Oramfs pode ser aplicado em \u00e1reas onde \u00e9 necess\u00e1rio alcan\u00e7ar o mais alto n\u00edvel de privacidade e onde \u00e9 poss\u00edvel sacrificar o desempenho. O desempenho diminui, pois cada opera\u00e7\u00e3o com o armazenamento, incluindo opera\u00e7\u00f5es de leitura de dados, resulta na reestrutura\u00e7\u00e3o de blocos na imagem do sistema de arquivos. Por exemplo, a leitura de um arquivo de 10MB leva cerca de 1 segundo, enquanto 25MB leva 3 segundos. A grava\u00e7\u00e3o de 10MB leva 15 segundos, e 25MB leva 50 segundos. Nesse sentido, o Oramfs \u00e9 aproximadamente 9 vezes mais r\u00e1pido na leitura e 2 vezes mais r\u00e1pido na grava\u00e7\u00e3o em compara\u00e7\u00e3o com o sistema de arquivos UtahFS, desenvolvido pela Cloudflare e que opcionalmente suporta o modo ORAM.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c (data access pattern). \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d FUSE-\u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f Linux \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043b\u043e\u044f \u0424\u0421, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f. \u041a\u043e\u0434 Oramfs \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100680","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Sistema de arquivos Oramfs lan\u00e7ado, ocultando a natureza do acesso aos dados | ProHoster","description":"A empresa Kudelski Security, especializada em auditoria de seguran\u00e7a, lan\u00e7ou o sistema de arquivos Oramfs com a implementa\u00e7\u00e3o da tecnologia ORAM (Oblivious Random Access Machine), que oculta a natureza do acesso.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0424\u0421 Oramfs, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-05T08:22:35+00:00","article:modified_time":"2021-07-05T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100680","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-05 08:43:18","updated":"2026-02-22 15:30:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/100680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=100680"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/100680\/revisions"}],"predecessor-version":[{"id":162256,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/100680\/revisions\/162256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=100680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=100680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=100680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}