{"id":157098,"date":"2026-02-05T17:11:56","date_gmt":"2026-02-05T15:11:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox"},"modified":"2026-02-05T17:11:56","modified_gmt":"2026-02-05T15:11:56","slug":"microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","title":{"rendered":"A Microsoft est\u00e1 desenvolvendo um sistema de sandbox aberto chamado Litebox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

James Morris, mantenedor do subsistema de seguran\u00e7a do n\u00facleo Linux e l\u00edder da equipe de \"Linux Emerging Technologies\" na Microsoft, apresentou o projeto Litebox, posicionado como um sistema operacional focado na seguran\u00e7a na forma de uma biblioteca (Library OS). O Litebox pode ser usado em programas ou n\u00facleos como uma camada adicional de isolamento, bloqueando o acesso a funcionalidades excessivas dos n\u00facleos ou APIs para reduzir a superf\u00edcie de ataque. O c\u00f3digo do projeto \u00e9 escrito na linguagem Rust e \u00e9 de c\u00f3digo aberto sob a licen\u00e7a MIT. <\/p>\n

A ideia do \"Library OS\" \u00e9 que os servi\u00e7os do sistema operacional sejam embutidos diretamente no aplicativo, ao inv\u00e9s de fazer chamadas de sistema para o n\u00facleo externo do OS. No contexto do Litebox, uma camada isolante \u00e9 conectada aos aplicativos, fornecendo uma plataforma m\u00ednima que traduz solicita\u00e7\u00f5es para uma interface de programa\u00e7\u00e3o funcional externa. Os n\u00facleos Linux, ambientes isolados protegidos OP-TEE (Open Portable Trusted Execution Environment), ambientes Webassembly ou a biblioteca padr\u00e3o RustStd podem atuar como essas interfaces externas.

\"A<\/center> <\/p>\n

A plataforma m\u00ednima formada atrav\u00e9s do Litebox \u00e9 aplic\u00e1vel para executar aplicativos Linux, Windows e FreeBSD, n\u00facleos Linux incorporados e LVBS (Linux Virtualization Based Security). \u00c1reas potenciais de aplica\u00e7\u00e3o do Litebox incluem garantir a execu\u00e7\u00e3o de programas Linux n\u00e3o modificados no Windows, isolamento da execu\u00e7\u00e3o de aplicativos Linux em sistemas com n\u00facleo Linux, execu\u00e7\u00e3o de programas sobre AMD SEV SNP para criptografia de mem\u00f3ria, execu\u00e7\u00e3o de programas OP-TEE no Linux e isolamento utilizando o conceito de LVBS. <\/p>\n

O projeto LVBS, cujos representantes participam do desenvolvimento do Litebox, desenvolve m\u00e9todos para proteger os componentes do n\u00facleo Linux, utilizando as capacidades de hipervisores e virtualiza\u00e7\u00e3o de hardware. Por exemplo, atrav\u00e9s de um hipervisor, podem ser isoladas opera\u00e7\u00f5es de controle de autenticidade de m\u00f3dulos, verifica\u00e7\u00e3o, gerenciamento de acesso a senhas, chaves, estruturas do n\u00facleo e outros recursos cr\u00edticos. Em caso de explora\u00e7\u00e3o de vulnerabilidades e comprometimento do n\u00facleo, o atacante n\u00e3o poder\u00e1 acessar esses recursos, j\u00e1 que seus manipuladores s\u00e3o executados fora do n\u00edvel atual de privil\u00e9gios. O Litebox \u00e9 considerado, no contexto do projeto LVBS, como um \"n\u00facleo seguro\", protegendo o n\u00facleo convencional do sistema convidado por meio da virtualiza\u00e7\u00e3o de hardware.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u043c\u0441 \u041c\u043e\u0440\u0440\u0438\u0441 (James Morris), \u043c\u044d\u0439\u043d\u0442\u0435\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u043e\u043c\u0430\u043d\u0434\u0443 «Linux Emerging Technologies», \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Litebox, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u0430\u043a \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0432 \u0444\u043e\u0440\u043c\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 (Library OS). Litebox \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430\u0445 \u043a\u0430\u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u043b\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0435\u0440 \u0438\u043b\u0438 API \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":157099,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-157098","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft desenvolve sistema aberto de isolamento sandbox Litebox | ProHoster","description":"James Morris, mantenedor do subsistema de seguran\u00e7a do n\u00facleo Linux e l\u00edder da equipe de \"Tecnologias Emergentes do Linux\" na Microsoft, apresentou o projeto Litebox, posicionado como.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 Litebox | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u043c\u0441 \u041c\u043e\u0440\u0440\u0438\u0441 (James Morris), \u043c\u044d\u0439\u043d\u0442\u0435\u043d\u0435\u0440 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u043e\u043c\u0430\u043d\u0434\u0443 "Linux Emerging Technologies", \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0435\u043a\u0442 Litebox, \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/microsoft-razvivaet-otkrytuyu-sistemu-sandbox-izolyaczii-litebox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-05T15:11:56+00:00","article:modified_time":"2026-02-05T15:11:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"157098","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-05 15:12:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-05 15:11:57","updated":"2026-02-05 15:12:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/157098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=157098"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/157098\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/157099"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=157098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=157098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=157098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}