{"id":100680,"date":"2021-07-05T10:22:35","date_gmt":"2021-07-05T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym"},"modified":"2021-07-05T10:22:35","modified_gmt":"2021-07-05T08:22:35","slug":"opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/opublikovana-fs-oramfs-skryvayushhaya-harakter-dostupa-k-dannym","title":{"rendered":"\u00cbsht\u00eb publikuar FS Oramfs, e cila fsheh natyr\u00ebn e aksesit n\u00eb t\u00eb dh\u00ebna","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Kudelski Security, e specializuar n\u00eb auditimin e siguris\u00eb, publikoi sistemin e skedar\u00ebve Oramfs me zbatimin e teknologjis\u00eb ORAM (Oblivious Random Access Machine), e cila maskon natyr\u00ebn e aksesit n\u00eb t\u00eb dh\u00ebna (data access pattern). Projekti ofron nj\u00eb modul FUSE p\u00ebr Linux me implementimin e nj\u00eb shtrese FS q\u00eb nuk lejon t\u00eb ndjeket struktura e operacioneve t\u00eb shkruara dhe lexuara. Kodi Oramfs \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Rust dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn GPLv3. <\/p>\n
Teknologjia ORAM n\u00ebnkupton krijimin e nj\u00eb shtrese tjet\u00ebr p\u00ebrve\u00e7 enkriptimit, e cila nuk lejon t\u00eb p\u00ebrcaktohet natyra e aktivitetit aktual gjat\u00eb pun\u00ebs me t\u00eb dh\u00ebnat. P\u00ebr shembull, n\u00eb rastin e p\u00ebrdorimit t\u00eb enkriptimit p\u00ebr ruajtjen e t\u00eb dh\u00ebnave n\u00eb nj\u00eb sh\u00ebrbim t\u00eb tret\u00eb, pronar\u00ebt e k\u00ebtij sh\u00ebrbimi nuk mund t\u00eb din\u00eb t\u00eb dh\u00ebnat vet\u00eb, por mund t\u00eb p\u00ebrcaktojn\u00eb se cilat blloqe po konsultohen dhe cilat operacione po kryhen. ORAM fsheh informacionin se n\u00eb cilat pjes\u00eb t\u00eb FS b\u00ebhet akses dhe \u00e7far\u00eb operacioni po kryhet (lexim apo shkruaj). <\/p>\n
Oramfs ofron nj\u00eb sistem t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb skedar\u00ebve, q\u00eb leht\u00ebson organizimin e ruajtjes s\u00eb t\u00eb dh\u00ebnave n\u00eb \u00e7do ruajtje t\u00eb jashtme. T\u00eb dh\u00ebnat ruhen n\u00eb form\u00eb t\u00eb enkriptuar me mund\u00ebsin\u00eb opsionale p\u00ebr verifikimin e autentikimit. P\u00ebr enkriptimin mund t\u00eb p\u00ebrdoren algoritme si ChaCha8, AES-CTR dhe AES-GCM. Rregullat gjat\u00eb aksesit p\u00ebr shkruar dhe lexuar fshihen duke p\u00ebrdorur skem\u00ebn Path ORAM. N\u00eb t\u00eb ardhmen parashikohet implementimi i skemave t\u00eb tjera, por n\u00eb formatin aktual zhvillimi \u00ebsht\u00eb ende n\u00eb faz\u00ebn e prototipit, i cili nuk rekomandohet t\u00eb p\u00ebrdoret n\u00eb sisteme aktive. <\/p>\n
Oramfs mund t\u00eb p\u00ebrdoret me \u00e7do sistem skedar\u00ebsh dhe nuk varet nga lloji i ruajtjes s\u00eb jashtme t\u00eb synuar \u2014 \u00ebsht\u00eb e mundur t\u00eb sinkronizohen skedar\u00ebt me \u00e7do sh\u00ebrbim q\u00eb mund t\u00eb montosh si nj\u00eb katalog lokal (SSH, FTP, Google Drive, Amazon S3, Dropbox, Google Cloud Storage, Mail.ru Cloud, Yandex.Disk dhe sh\u00ebrbime t\u00eb tjera q\u00eb mb\u00ebshteten n\u00eb rclone ose p\u00ebr t\u00eb cilat ka module FUSE p\u00ebr montim). Kapaciteti i ruajtjes nuk \u00ebsht\u00eb i fiksuar dhe n\u00ebse nevojitet hap\u00ebsir\u00eb shtes\u00eb, madh\u00ebsia e ORAM mund t\u00eb rritet dinamikisht. <\/p>\n