Kompania Google shpalli hapjen e zhvillimeve q\u00eb lidhen me projektin KataOS, i cili \u00ebsht\u00eb fokusuar n\u00eb krijimin e nj\u00eb sistemi operativ t\u00eb mbrojtur p\u00ebr pajisje t\u00eb integruara. Komponent\u00ebt sistemor\u00eb t\u00eb KataOS jan\u00eb shkruar n\u00eb gjuh\u00ebn Rust dhe ekzekutohen mbi mikro-b\u00ebrthamen seL4, p\u00ebr t\u00eb cilin n\u00eb sistemet RISC-V \u00ebsht\u00eb ofruar nj\u00eb prov\u00eb matematikore besueshm\u00ebrie, q\u00eb d\u00ebshmon p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb e plot\u00eb t\u00eb kodit me specifikimet e caktuara n\u00eb nj\u00eb gjuh\u00eb formale. Kodi i projektit \u00ebsht\u00eb i hapur n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n
N\u00eb sistem \u00ebsht\u00eb siguruar mb\u00ebshtetje p\u00ebr platformat e bazuara n\u00eb arkitektur\u00ebn RISC-V dhe ARM64. P\u00ebr simulimin e pun\u00ebs s\u00eb seL4 dhe ambientit KataOS mbi pajisje gjat\u00eb zhvillimit, p\u00ebrdoret sistemi i korniz\u00ebs Renode. Si nj\u00eb zgjidhje standarde propozohet kompleksi softuerik-hardware Sparrow, i cili kombinon KataOS me \u00e7ipe t\u00eb mbrojtura n\u00eb baz\u00eb t\u00eb platform\u00ebs OpenTitan. Zgjidhja e propozuar lejon kombinimin e b\u00ebrthames s\u00eb sistemit operativ t\u00eb verifikuar logjikisht me komponent\u00eb hardware t\u00eb besuesh\u00ebm (RoT, Root of Trust), t\u00eb nd\u00ebrtuar me platform\u00ebn OpenTitan dhe arkitektur\u00ebn RISC-V. P\u00ebrve\u00e7 kodit t\u00eb KataOS, planifikohet q\u00eb m\u00eb tej t\u00eb hapen t\u00eb gjitha komponent\u00ebt e tjera t\u00eb Sparrow, duke p\u00ebrfshir\u00eb komponent\u00ebn hardware. <\/p>\n
Platforma po zhvillohet me nj\u00eb sy n\u00eb p\u00ebrdorimin n\u00eb \u00e7ipa t\u00eb specializuar, t\u00eb dizajnuar p\u00ebr t\u00eb ekzekutuar aplikacione p\u00ebr m\u00ebsimin e makin\u00ebs dhe p\u00ebrpunimin e informacioneve t\u00eb ndjeshme, t\u00eb cil\u00ebve u k\u00ebrkohet nj\u00eb nivel i ve\u00e7ant\u00eb mbrojtjeje dhe konfirmimi t\u00eb pap\u00ebrfshirjes s\u00eb defekteve. Si nj\u00eb shembull i till\u00eb aplikacionesh p\u00ebrmenden sistemet q\u00eb manipullojn\u00eb imazhe t\u00eb njer\u00ebzve dhe regjistrime t\u00eb z\u00ebrit. P\u00ebrdorimi i verifikimit t\u00eb besueshm\u00ebris\u00eb n\u00eb KataOS garanton se n\u00eb rast t\u00eb nj\u00eb defekti n\u00eb nj\u00eb pjes\u00eb t\u00eb sistemit, ky defekt nuk do t\u00eb p\u00ebrhapet n\u00eb pjes\u00ebn tjet\u00ebr t\u00eb sistemit dhe, konkretisht, n\u00eb b\u00ebrtham\u00ebn dhe pjes\u00ebt kritike. <\/p>\n
Arkitektura seL4 \u00ebsht\u00eb ve\u00e7an\u00ebrisht e dukshme p\u00ebr ndarjen e pjes\u00ebve p\u00ebr menaxhimin e burimeve t\u00eb b\u00ebrtham\u00ebs n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit dhe p\u00ebrdorimin e t\u00eb nj\u00ebjtave mjete ndar\u00ebse p\u00ebr k\u00ebto burime, ashtu si p\u00ebr burimet e p\u00ebrdoruesit. Mikro-b\u00ebrthama nuk ofron abstraksione t\u00eb gatshme t\u00eb nivelit t\u00eb lart\u00eb p\u00ebr menaxhimin e skedar\u00ebve, proceseve, lidhjeve rrjet\u00ebrore etj., por ofron vet\u00ebm mekanizma minimale p\u00ebr menaxhimin e aksesit n\u00eb hap\u00ebsir\u00ebn fizike t\u00eb adresave, nd\u00ebrprerjet dhe burimet e procesorit. Abstraksionet dhe drejtuesit e nivelit t\u00eb lart\u00eb p\u00ebr nd\u00ebrveprimin me pajisjet realizohen ve\u00e7mas mbi mikro-b\u00ebrtham\u00ebn n\u00eb form\u00ebn e detyrave q\u00eb ekzekutohen n\u00eb nivelin e p\u00ebrdoruesit. Aksi i k\u00ebtyre detyrave n\u00eb burimet q\u00eb ka mikro-b\u00ebrthama organizohet p\u00ebrmes p\u00ebrcaktimit t\u00eb rregullave. <\/p>\n
P\u00ebr nj\u00eb mbrojtje shtes\u00eb, t\u00eb gjitha komponentet, p\u00ebrve\u00e7 mikro-b\u00ebrtham\u00ebs, zhvillohen fillimisht n\u00eb gjuh\u00ebn Rust duke p\u00ebrdorur praktika t\u00eb sigurta programimi, q\u00eb minimizojn\u00eb gabimet q\u00eb kan\u00eb t\u00eb b\u00ebjn\u00eb me kujtes\u00ebn, t\u00eb cilat \u00e7ojn\u00eb n\u00eb probleme t\u00eb tilla si referimi n\u00eb hap\u00ebsir\u00ebn e kujtes\u00ebs pas \u00e7lirimit t\u00eb saj, dereferencimi i treguesve t\u00eb nul dhe dalja jasht\u00eb kufijve t\u00eb buferit. Edhe menaxhuesi i aplikacioneve n\u00eb mjedisin seL4, sh\u00ebrbimet sistemike, struktura p\u00ebr zhvillimin e aplikacioneve, API p\u00ebr qasje n\u00eb thirrjet sistemike, menaxheri i proceseve, mekanizmi i shp\u00ebrndarjes dinamike t\u00eb kujtes\u00ebs etj. jan\u00eb shkruar n\u00eb Rust. P\u00ebr nd\u00ebrtimin e verifikuar p\u00ebrdoret mjet CAmkES, i zhvilluar nga projekti seL4. Komponent\u00ebt p\u00ebr CAmkES gjithashtu mund t\u00eb krijohen n\u00eb gjuh\u00ebn Rust. <\/p>\n
Sigurimi i pun\u00ebs s\u00eb sigurt me kujtes\u00ebn sigurohet n\u00eb Rust gjat\u00eb kompilimit p\u00ebrmes kontrollit t\u00eb referencave, gjurmimit t\u00eb pron\u00ebsis\u00eb s\u00eb objekteve dhe llogaritjes s\u00eb jet\u00ebgjat\u00ebsis\u00eb s\u00eb objekteve (fusha e dukshm\u00ebris\u00eb), si dhe p\u00ebrmes vler\u00ebsimit t\u00eb sakt\u00ebsis\u00eb s\u00eb aksesit n\u00eb kujtes\u00eb gjat\u00eb ekzekutimit t\u00eb kodit. Rust gjithashtu ofron mjete p\u00ebr mbrojtje nga mbinxehjet num\u00ebrike, k\u00ebrkon inicializimin e detyruesh\u00ebm t\u00eb vlerave t\u00eb variablave para p\u00ebrdorimit, zbatojn\u00eb konceptin e referencave dhe variablave t\u00eb pandryshuesh\u00ebm (immutable) si parazgjedhje dhe ofron nj\u00eb tipizim t\u00eb fort\u00eb statik p\u00ebr minimizimin e gabimeve logjike. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c KataOS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b KataOS \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0438\u043a\u0440\u043e\u044f\u0434\u0440\u0430 seL4, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 RISC-V \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e \u043f\u043e\u043b\u043d\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u0435. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105309","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google hap kodin e sistemit operativ t\u00eb sigurt KataOS | ProHoster","description":"Kompania Google shpalli hapjen e zhvillimeve t\u00eb lidhura me projektin KataOS, i cili synon t\u00eb krijoj\u00eb nj\u00eb sistem operativ t\u00eb sigurt p\u00ebr pajisjet e integruara.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b KataOS | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c KataOS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-otkryl-kod-zashhishhyonnoj-operaczionnoj-sistemy-kataos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-15T13:37:02+00:00","article:modified_time":"2022-10-15T13:37:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105309"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105309\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"