{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"A fost publicat FS Oramfs, care mascheaz\u0103 caracterul accesului la date","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Kudelski Security, specializat\u0103 \u00een audituri de securitate, a publicat sistemul de fi\u0219iere Oramfs cu implementarea tehnologiei ORAM (Oblivious Random Access Machine), care mascheaz\u0103 caracterul accesului la date (data access pattern). Proiectul propune un modul FUSE pentru Linux cu implementarea unui strat de FS, care nu permite urm\u0103rirea structurii opera\u021biunilor de scriere \u0219i citire. Codul Oramfs este scris \u00een limbajul Rust \u0219i este distribuit sub licen\u021ba GPLv3. <\/p>\n

Tehnologia ORAM implic\u0103 crearea unui alt strat pe l\u00e2ng\u0103 criptare, care s\u0103 nu permit\u0103 determinarea activit\u0103\u021bii curente \u00een manipularea datelor. De exemplu, \u00een cazul utiliz\u0103rii cript\u0103rii pentru stocarea datelor \u00eentr-un serviciu extern, proprietarii acestui serviciu nu pot cunoa\u0219te datele \u00een sine, dar pot determina la ce blocuri se face acces \u0219i ce opera\u021bii sunt efectuate. ORAM ascunde informa\u021bia despre p\u0103r\u021bile FS la care se face accesul \u0219i ce opera\u021bie este efectuat\u0103 (citire sau scriere). <\/p>\n

Oramfs ofer\u0103 un sistem de fi\u0219iere universal de intermediere care simplific\u0103 organizarea stoc\u0103rii datelor pe orice stoc\u0103ri externe. Datele sunt stocate criptat cu op\u021biunea de verificare a autenticit\u0103\u021bii. Pentru criptare, pot fi folosite algoritmi precum ChaCha8, AES-CTR \u0219i AES-GCM. Regularit\u0103\u021bile accesului de scriere \u0219i citire sunt ascunse prin utilizarea schemei Path ORAM. \u00cen viitor este planificat\u0103 implementarea altor scheme, dar \u00een prezent, dezvoltarea se afl\u0103 \u00een stadiul de prototip, care nu este recomandat pentru utilizarea \u00een sisteme de produc\u021bie. <\/p>\n

Oramfs poate fi utilizat cu orice FS \u0219i nu depinde de tipul de stocare extern\u0103 \u021bint\u0103 \u2014 este posibil\u0103 sincronizarea fi\u0219ierelor cu orice serviciu care poate fi montat sub form\u0103 de director local (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk \u0219i alte servicii suportate \u00een rclone sau pentru care exist\u0103 module FUSE pentru montare). Dimensiunea stoc\u0103rii nu este fix\u0103 \u0219i, \u00een cazul \u00een care este necesar spa\u021biu suplimentar, dimensiunea ORAM poate cre\u0219te dinamic. <\/p>\n

Configurarea Oramfs const\u0103 \u00een definirea a dou\u0103 directoare \u2014 public \u0219i privat, care \u00eendeplinesc rolul server<\/a> \u0219i clientului. Catalogul public poate fi orice director \u00een FS local, care este legat de stoc\u0103rile externe prin montarea lor prin SSHFS, FTPFS, Rclone \u0219i orice alte module FUSE. Directorul privat este furnizat de modulul FUSE Oramfs \u0219i este destinat lucrului direct cu fi\u0219ierele stocate \u00een ORAM. \u00cen catalogul public este plasat un fi\u0219ier cu imaginea ORAM. Orice opera\u021biune cu directorul privat se reflect\u0103 \u00een starea acestei imagini, dar acest fi\u0219ier apare pentru observatorul extern ca o cutie neagr\u0103, modific\u0103rile din care nu pot fi asociate cu activitatea din directorul privat, inclusiv nu se poate determina dac\u0103 s-a efectuat o opera\u021biune de scriere sau citire. <\/p>\n

Oramfs poate fi aplicat \u00een domenii \u00een care este necesar s\u0103 se ob\u021bin\u0103 cel mai \u00eenalt nivel de confiden\u021bialitate \u0219i se poate sacrifica performan\u021ba. Performan\u021ba scade deoarece fiecare opera\u021biune cu stocarea, inclusiv opera\u021biunile de citire a datelor, duce la reconstruirea blocurilor \u00een imaginea FS. De exemplu, citirea unui fi\u0219ier de 10MB dureaz\u0103 aproximativ 1 secund\u0103, iar 25MB \u2014 3 sec. Scrierea a 10MB dureaz\u0103 15 secunde, iar 25MB \u2014 50 de secunde. \u00cen acela\u0219i timp, Oramfs este de aproximativ 9 ori mai rapid la citire \u0219i de 2 ori mai rapid la scriere \u00een compara\u021bie cu sistemul de fi\u0219iere UtahFS, dezvoltat de Cloudflare \u0219i care suport\u0103 op\u021bional modul ORAM.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c (data access pattern). \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d FUSE-\u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f Linux \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043b\u043e\u044f \u0424\u0421, \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f. \u041a\u043e\u0434 Oramfs \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100680","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Publicat FS Oramfs, care mascheaz\u0103 natura accesului la date | ProHoster","description":"Compania Kudelski Security, specializat\u0103 \u00een auditul de securitate, a publicat sistemul de fi\u0219iere Oramfs cu implementarea tehnologiei ORAM (Oblivious Random Access Machine), care mascheaz\u0103 natura accesului la date.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0424\u0421 Oramfs, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Kudelski Security, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Oramfs \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ORAM (Oblivious Random Access Machine), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-05T08:22:35+00:00","article:modified_time":"2021-07-05T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100680","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-05 08:43:18","updated":"2026-02-22 15:30:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100680"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100680\/revisions"}],"predecessor-version":[{"id":162256,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100680\/revisions\/162256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}