{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"FS Oramfs \u00ebsht\u00eb publikuar, e cila fsheh natyr\u00ebn e qasjes n\u00eb t\u00eb dh\u00ebna","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Kudelski Security, e specializuar n\u00eb auditimin e siguris\u00eb, publikoi sistemin e skedar\u00ebve Oramfs me realizimin e teknologjis\u00eb ORAM (Oblivious Random Access Machine), e cila fsheh natyr\u00ebn e aksesit n\u00eb t\u00eb dh\u00ebna (data access pattern). Projekti ofron nj\u00eb modul FUSE p\u00ebr Linux me realizimin e nj\u00eb shtrese t\u00eb FSH, e cila nuk lejon ndjekjen e struktures s\u00eb operacioneve t\u00eb shkruajtjes dhe leximit. Kodi Oramfs \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Rust dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv3. <\/p>\n
Teknologjia ORAM p\u00ebrfshin krijimin e nj\u00eb shtrese shtes\u00eb p\u00ebrve\u00e7 enkriptimit, e cila nuk lejon p\u00ebrcaktimin e natyr\u00ebs s\u00eb aktivitetit aktual gjat\u00eb pun\u00ebs me t\u00eb dh\u00ebna. P.sh., n\u00eb rast se p\u00ebrdoret enkriptimi kur ruhet t\u00eb dh\u00ebna n\u00eb nj\u00eb sh\u00ebrbim t\u00eb jasht\u00ebm, pronar\u00ebt e k\u00ebtij sh\u00ebrbimi nuk mund t\u00eb din\u00eb t\u00eb dh\u00ebnat e veta, por mund t\u00eb p\u00ebrcaktojn\u00eb se n\u00eb cilat blloqe po kryhet akses dhe cilat operacione po kryhen. ORAM fsheh informacionin mbi cilat pjes\u00eb t\u00eb FSH po b\u00ebhet akses dhe cilat operacione po kryhen (lexim ose shkruaj). <\/p>\n
Oramfs ofron nj\u00eb sistem universale t\u00eb skedar\u00ebve q\u00eb lejon thjeshtimin e organizat\u00ebs s\u00eb ruajtjes s\u00eb t\u00eb dh\u00ebnave n\u00eb \u00e7do ruajt\u00ebs t\u00eb jasht\u00ebm. T\u00eb dh\u00ebnat ruhen n\u00eb form\u00eb t\u00eb enkriptuar me mund\u00ebsin\u00eb opsionale p\u00ebr verifikimin e autenticitetit. P\u00ebr enkriptim mund t\u00eb p\u00ebrdoren algoritme si ChaCha8, AES-CTR dhe AES-GCM. Rregullat n\u00eb aksesin p\u00ebr shkruaj dhe lexim fshihen duke p\u00ebrdorur skem\u00ebn Path ORAM. N\u00eb t\u00eb ardhmen \u00ebsht\u00eb parashikuar realizimi i skemave t\u00eb tjera, por n\u00eb form\u00ebn aktuale, zhvillimi \u00ebsht\u00eb ende n\u00eb faz\u00ebn e prototipit, i cili nuk rekomandohet t\u00eb p\u00ebrdoret n\u00eb sistemet e pun\u00ebs. <\/p>\n
Oramfs mund t\u00eb p\u00ebrdoret me \u00e7do sistem skedari dhe nuk varet nga lloji i ruajtjes s\u00eb jashtme — \u00ebsht\u00eb e mundur q\u00eb skedar\u00ebt t\u00eb sinkronizohen me \u00e7do sh\u00ebrbim q\u00eb mund t\u00eb montoni si nj\u00eb direktor lokal (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk dhe sh\u00ebrbime t\u00eb tjera q\u00eb mb\u00ebshteten n\u00eb rclone ose p\u00ebr t\u00eb cilat ka module FUSE p\u00ebr montimin). Madh\u00ebsia e ruajtjes nuk \u00ebsht\u00eb fikse dhe, n\u00ebse \u00ebsht\u00eb e nevojshme, madh\u00ebsia e ORAM mund t\u00eb rritet dinamikisht. <\/p>\n