{"id":105309,"date":"2022-10-15T15:37:02","date_gmt":"2022-10-15T13:37:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos"},"modified":"2022-10-15T15:37:02","modified_gmt":"2022-10-15T13:37:02","slug":"google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","title":{"rendered":"Google a deschis codul sistemului de operare sigur KataOS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a anun\u021bat deschiderea lucr\u0103rilor legate de proiectul KataOS, destinat cre\u0103rii unui sistem de operare securizat pentru echipamente \u00eencorporate. Componentele sistemului KataOS sunt scrise \u00een limbajul Rust \u0219i ruleaz\u0103 deasupra unui microkernel seL4, pentru care \u00een sistemele RISC-V a fost furnizat\u0103 o dovad\u0103 matematic\u0103 a fiabilit\u0103\u021bii, dovedind conformitatea complet\u0103 a codului cu specifica\u021biile definite \u00eentr-un limbaj formal. Codul proiectului este disponibil sub licen\u021ba Apache 2.0. <\/p>\n

Sistemul asigur\u0103 suport pentru platforme bazate pe arhitecturi RISC-V \u0219i ARM64. Pentru simularea func\u021bion\u0103rii seL4 \u0219i a mediului KataOS deasupra echipamentului, \u00een timpul dezvolt\u0103rii se utilizeaz\u0103 cadrul Renode. Ca implementare de referin\u021b\u0103, a fost propus un complex hardware-software Sparrow, combin\u00e2nd KataOS cu cipuri securizate bazate pe platforma OpenTitan. Solu\u021bia propus\u0103 permite combinarea unei nuclee de sistem de operare verificate logic cu componente hardware de \u00eencredere (RoT, Root of Trust), construite folosind platforma OpenTitan \u0219i arhitectura RISC-V. Pe l\u00e2ng\u0103 codul KataOS, se preconizeaz\u0103 deschiderea tuturor celorlalte componente Sparrow, inclusiv partea hardware. <\/p>\n

Platforma se dezvolt\u0103 av\u00e2nd \u00een vedere utilizarea \u00een cipuri specializate, destinate s\u0103 execute aplica\u021bii pentru \u00eenv\u0103\u021barea automat\u0103 \u0219i procesarea informa\u021biilor confiden\u021biale, care necesit\u0103 un anumit nivel de protec\u021bie \u0219i confirmare a lipsei defec\u021biunilor. Un exemplu de astfel de aplica\u021bii sunt sistemele care manipuleaz\u0103 imagini ale oamenilor \u0219i \u00eenregistr\u0103ri vocale. Utilizarea \u00een KataOS a verific\u0103rii fiabilit\u0103\u021bii garanteaz\u0103 c\u0103, \u00een cazul unei defec\u021biuni \u00eentr-o parte a sistemului, aceasta nu se va r\u0103sp\u00e2ndi la restul sistemului, \u00een special la nucleu \u0219i p\u0103r\u021bile critice. <\/p>\n

Arhitectura seL4 este remarcabil\u0103 prin externalizarea p\u0103r\u021bilor de gestionare a resurselor nucleului \u00een spa\u021biul utilizatorului \u0219i prin aplicarea acelora\u0219i mijloace de separare a accesului pentru aceste resurse ca pentru resursele utilizatorului. Microkernelul nu ofer\u0103 abstractions de nivel \u00eenalt gata f\u0103cute pentru gestionarea fi\u0219ierelor, proceselor, conexiunilor de re\u021bea etc.; \u00een schimb, ofer\u0103 doar mecanisme minime pentru gestionarea accesului la spa\u021biul de adresare fizic, la \u00eentreruperi \u0219i la resursele procesorului. Abstrac\u021biile de nivel \u00eenalt \u0219i driverele pentru interac\u021biunea cu hardware-ul sunt implementate separat, deasupra microkernelului, sub form\u0103 de sarcini executate la nivel de utilizator. Accesul acestor sarcini la resursele disponibile \u00een microkernel este organizat prin definirea unor reguli. <\/p>\n

Pentru o protec\u021bie suplimentar\u0103, toate componentele, cu excep\u021bia microkernelului, sunt ini\u021bial dezvoltate \u00een limbajul Rust, folosind tehnici de programare sigure, care minimizeaz\u0103 erorile \u00een exploatarea memoriei, ce pot duce la probleme precum accesarea unei zone de memorie dup\u0103 ce aceasta a fost eliberat\u0103, dereferin\u021bierea pointerilor nuli \u0219i dep\u0103\u0219irea limitelor buffer-ului. \u00cen Rust sunt scrise, de asemenea, \u00eenc\u0103rc\u0103torul de aplica\u021bii \u00een mediul seL4, serviciile de sistem, cadrul pentru dezvoltarea aplica\u021biilor, API-ul pentru accesul la apelurile de sistem, managerul de procese, mecanismul de alocare dinamic\u0103 a memoriei \u0219.a. Pentru compilarea verificat\u0103 este folosit uneltele CAmkES, dezvoltate de proiectul seL4. Componentele pentru CAmkES pot fi, de asemenea, create \u00een limbajul Rust. <\/p>\n

Siguran\u021ba \u00een exploatarea memoriei este asigurat\u0103 \u00een Rust \u00een timpul compil\u0103rii prin verificarea referin\u021belor, urm\u0103rirea propriet\u0103\u021bii obiectelor \u0219i luarea \u00een considerare a duratei de via\u021b\u0103 a obiectelor (zona de vizibilitate), precum \u0219i prin evaluarea corectitudinii accesului la memorie \u00een timpul execu\u021biei codului. Rust ofer\u0103, de asemenea, mijloace pentru prevenirea dep\u0103\u0219irii \u00eentregului, impune ini\u021bializarea obligatorie a valorilor variabilelor \u00eenainte de utilizare, aplic\u0103 conceptul de imutabilitate (immutable) pentru referin\u021be \u0219i variabile \u00een mod implicit \u0219i ofer\u0103 o tipizare static\u0103 puternic\u0103 pentru minimizarea erorilor logice.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c KataOS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b KataOS \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0438\u043a\u0440\u043e\u044f\u0434\u0440\u0430 seL4, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 RISC-V \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e \u043f\u043e\u043b\u043d\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u0435. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105309","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google a lansat codul sistemului de operare sigur KataOS | ProHoster","description":"Compania Google a anun\u021bat deschiderea cercet\u0103rilor legate de proiectul KataOS, destinat cre\u0103rii unui sistem de operare sigur pentru echipamentele \u00eencorporate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b KataOS | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c KataOS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-15T13:37:02+00:00","article:modified_time":"2022-10-15T13:37:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105309"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105309\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}