{"id":105309,"date":"2022-10-15T15:37:02","date_gmt":"2022-10-15T13:37:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos"},"modified":"2022-10-15T15:37:02","modified_gmt":"2022-10-15T13:37:02","slug":"google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","title":{"rendered":"Google abriu o c\u00f3digo do sistema operacional seguro KataOS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Google anunciou a abertura de desenvolvimentos relacionados ao projeto KataOS, que visa criar um sistema operacional seguro para equipamentos embarcados. Os componentes do sistema KataOS s\u00e3o escritos na linguagem Rust e executados sobre o microkernel seL4, para o qual foi fornecida uma prova matem\u00e1tica de confiabilidade em sistemas RISC-V, atestando a conformidade total do c\u00f3digo com as especifica\u00e7\u00f5es definidas em uma linguagem formal. O c\u00f3digo do projeto \u00e9 aberto sob a licen\u00e7a Apache 2.0. <\/p>\n

O sistema oferece suporte a plataformas baseadas nas arquiteturas RISC-V e ARM64. Para simular a opera\u00e7\u00e3o do seL4 e do ambiente KataOS sobre o hardware durante o desenvolvimento, utiliza-se o framework Renode. Como implementa\u00e7\u00e3o de refer\u00eancia, foi proposto um complexo software-hardware chamado Sparrow, que combina o KataOS com chips seguros baseados na plataforma OpenTitan. A solu\u00e7\u00e3o proposta permite unir um n\u00facleo de sistema operacional logicamente verificado a componentes de hardware confi\u00e1veis (RoT, Root of Trust), constru\u00eddos utilizando a plataforma OpenTitan e a arquitetura RISC-V. Al\u00e9m do c\u00f3digo KataOS, planeja-se abrir todos os demais componentes do Sparrow, incluindo a parte de hardware. <\/p>\n

A plataforma est\u00e1 sendo desenvolvida com foco na aplica\u00e7\u00e3o em chips especializados, voltados para a execu\u00e7\u00e3o de aplicativos para aprendizado de m\u00e1quina e processamento de informa\u00e7\u00f5es confidenciais, que requerem um n\u00edvel especial de prote\u00e7\u00e3o e garantia de aus\u00eancia de falhas. Exemplos de tais aplicativos incluem sistemas que manipulam imagens de pessoas e grava\u00e7\u00f5es de voz. O uso da verifica\u00e7\u00e3o de confiabilidade no KataOS garante que, em caso de falha em uma parte do sistema, essa falha n\u00e3o se espalhe para o restante do sistema e, em particular, para o n\u00facleo e partes cr\u00edticas. <\/p>\n

A arquitetura seL4 \u00e9 not\u00e1vel por mover partes do gerenciamento de recursos do n\u00facleo para o espa\u00e7o do usu\u00e1rio e aplicar os mesmos meios de separa\u00e7\u00e3o de acesso a esses recursos como para recursos do usu\u00e1rio. O microkernel n\u00e3o fornece abstra\u00e7\u00f5es de alto n\u00edvel prontas para gerenciar arquivos, processos, conex\u00f5es de rede, etc.; em vez disso, ele oferece apenas mecanismos m\u00ednimos para gerenciar o acesso ao espa\u00e7o de endere\u00e7o f\u00edsico, interrup\u00e7\u00f5es e recursos da CPU. Abstra\u00e7\u00f5es de alto n\u00edvel e drivers para interagir com hardware s\u00e3o implementados separadamente sobre o microkernel, na forma de tarefas executadas em n\u00edvel de usu\u00e1rio. O acesso dessas tarefas aos recursos dispon\u00edveis no microkernel \u00e9 organizado atrav\u00e9s da defini\u00e7\u00e3o de regras. <\/p>\n

Para prote\u00e7\u00e3o adicional, todos os componentes, exceto o microkernel, s\u00e3o inicialmente desenvolvidos na linguagem Rust, utilizando pr\u00e1ticas de programa\u00e7\u00e3o seguras que minimizam erros de manipula\u00e7\u00e3o de mem\u00f3ria, como o acesso \u00e0 mem\u00f3ria ap\u00f3s a libera\u00e7\u00e3o, desreferenciamento de ponteiros nulos e estouros de buffer. O carregador de aplicativos no ambiente seL4, servi\u00e7os do sistema, uma estrutura para desenvolvimento de aplicativos, APIs para acesso a chamadas do sistema, gerenciador de processos, mecanismo de aloca\u00e7\u00e3o din\u00e2mica de mem\u00f3ria, etc., tamb\u00e9m s\u00e3o escritos em Rust. Para uma constru\u00e7\u00e3o verificada, \u00e9 utilizada a ferramenta CAmkES, desenvolvida pelo projeto seL4. Componentes para CAmkES tamb\u00e9m podem ser criados na linguagem Rust. <\/p>\n

O trabalho seguro com a mem\u00f3ria em Rust \u00e9 garantido durante a compila\u00e7\u00e3o atrav\u00e9s da verifica\u00e7\u00e3o de refer\u00eancias, rastreamento da posse de objetos e considera\u00e7\u00e3o do tempo de vida dos objetos (escopos), bem como pela avalia\u00e7\u00e3o da corre\u00e7\u00e3o do acesso \u00e0 mem\u00f3ria durante a execu\u00e7\u00e3o do c\u00f3digo. Rust tamb\u00e9m oferece meios para prote\u00e7\u00e3o contra estouros inteiros, exige a inicializa\u00e7\u00e3o obrigat\u00f3ria de valores de vari\u00e1veis antes de seu uso, aplica o conceito de imutabilidade (immutable) para refer\u00eancias e vari\u00e1veis por padr\u00e3o e oferece uma forte tipagem est\u00e1tica para minimizar erros l\u00f3gicos.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c KataOS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b KataOS \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0438\u043a\u0440\u043e\u044f\u0434\u0440\u0430 seL4, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 RISC-V \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e \u043f\u043e\u043b\u043d\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u0435. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105309","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google abre o c\u00f3digo do sistema operacional seguro KataOS | ProHoster","description":"A empresa Google anunciou a abertura de suas pesquisas relacionadas ao projeto KataOS, que tem como objetivo criar um sistema operacional seguro para dispositivos incorporados.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b KataOS | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c KataOS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-15T13:37:02+00:00","article:modified_time":"2022-10-15T13:37:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=105309"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105309\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=105309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=105309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=105309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}