{"id":119948,"date":"2024-09-26T15:43:01","date_gmt":"2024-09-26T13:43:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/metody-bezopasnoj-raboty-s-pamyatyu-pozvolili-sushhestvenno-snizit-chislo-uyazvimostej-v-android"},"modified":"2024-09-26T15:43:01","modified_gmt":"2024-09-26T13:43:03","slug":"metody-bezopasnoj-raboty-s-pamyatyu-pozvolili-sushhestvenno-snizit-chislo-uyazvimostej-v-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/metody-bezopasnoj-raboty-s-pamyatyu-pozvolili-sushhestvenno-snizit-chislo-uyazvimostej-v-android","title":{"rendered":"Metodat e sigurt t\u00eb pun\u00ebs me kujtes\u00ebn kan\u00eb arritur t\u00eb reduktojn\u00eb ndjesh\u00ebm numrin e dob\u00ebsive n\u00eb Android.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Google p\u00ebrfundoi iniciativ\u00ebn p\u00ebr p\u00ebrmir\u00ebsimin e metodave t\u00eb zhvillimit t\u00eb sigurt n\u00eb Android (Safe Coding), si\u00e7 jan\u00eb p\u00ebrdorimi i gjuh\u00ebve t\u00eb programimit q\u00eb garantojn\u00eb pun\u00eb t\u00eb sigurt me memorjen, p\u00ebrdorimi i analizer\u00ebve statik\u00eb dhe projektimi i API-ve me nj\u00eb fokus n\u00eb siguri. K\u00ebto ndryshime lejuan q\u00eb pjesa e dob\u00ebsive t\u00eb lidhura me memorjen n\u00eb Android t\u00eb ulet nga 76% n\u00eb vitin 2019 n\u00eb 24% deri n\u00eb vitin 2024, q\u00eb \u00ebsht\u00eb ndjesh\u00ebm m\u00eb e ul\u00ebt se mesatarja e industris\u00eb \u2014 70%. <\/p>\n

Inxhinier\u00ebt e Google gjithashtu kan\u00eb arritur n\u00eb p\u00ebrfundimin se burimi kryesor i problemeve me sigurin\u00eb \u00ebsht\u00eb kodi i ri dhe prandaj v\u00ebmendja duhet t\u00eb p\u00ebrqendrohet n\u00eb modernizimin e metodave t\u00eb zhvillimit t\u00eb kodit t\u00eb ri. Kodi ekzistues, me kalimin e koh\u00ebs, b\u00ebhet m\u00eb i provuar dhe m\u00eb i sigurt (v\u00ebrehet nj\u00eb var\u00ebsi eksponenciale e siguris\u00eb nga koha), gj\u00eb q\u00eb e b\u00ebn investimin n\u00eb projekte p\u00ebr rishkrimin e kodit ekzistues m\u00eb pak t\u00eb kthyesh\u00ebm. P\u00ebr shembull, kodi 5-vje\u00e7ar mesatarisht ka nj\u00eb densitet t\u00eb dob\u00ebsuar t\u00eb vulnerabiliteteve 3.4 her\u00eb m\u00eb t\u00eb ul\u00ebt se kodi i ri. P\u00ebr projektet Android dhe Chromium, fal\u00eb zbatimit t\u00eb metodave t\u00eb sigurta t\u00eb menaxhimit t\u00eb memories, diferenca arrin n\u00eb 7.4 her\u00eb.

\"Metodat<\/center> <\/p>\n

Prandaj, n\u00ebse parandalohen gabimet n\u00eb menaxhimin e memories n\u00eb kodin e ri, n\u00eb koh\u00eb, gabime t\u00eb ngjashme n\u00eb kodin e vjet\u00ebr do t\u00eb identifikohen gjithnj\u00eb e m\u00eb pak. N\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrgjithshme, Google rekomandon t\u00eb mos rishkruhet kodi i vjet\u00ebr, por t\u00eb p\u00ebrqendrohet n\u00eb shkrimin e kodit t\u00eb ri n\u00eb gjuh\u00eb q\u00eb menaxhojn\u00eb sigurt\u00eb memorjen dhe t\u00eb sigurohet portabiliteti midis kodit t\u00eb ri dhe atij t\u00eb vjet\u00ebr. <\/p>\n

P\u00ebrve\u00e7 uljes s\u00eb numrit t\u00eb vulnerabiliteteve, p\u00ebrdorimi i metodave t\u00eb sigurta t\u00eb programimit rrit produktivitetin e zhvillimit, lejon arritjen e cil\u00ebsis\u00eb m\u00eb t\u00eb lart\u00eb t\u00eb kodit dhe ka nj\u00eb ndikim pozitiv n\u00eb performanc\u00eb. P\u00ebr shembull, riprogramimi n\u00eb Chromium t\u00eb kodit p\u00ebr gjenerimin e QR-kodeve n\u00eb gjuh\u00ebn Rust ka mund\u00ebsuar rritjen e performanc\u00ebs me 95% p\u00ebr shkak t\u00eb eliminimit t\u00eb shpenzimeve t\u00eb p\u00ebrfshira nga nevoja p\u00ebr zbatimin e nj\u00eb izolimi t\u00eb shtes\u00eb sandbox. <\/p>\n

Shpejt\u00ebsia dhe cil\u00ebsia e zhvillimit rritet p\u00ebrmes thjeshtimit t\u00eb testimit dhe zhvendosjes s\u00eb identifikimit t\u00eb gabimeve n\u00eb fazat e hershme t\u00eb zhvillimit, kur gabimet b\u00ebhen t\u00eb dukshme p\u00ebrpara se zhvilluesi t\u00eb filloj\u00eb verifikimin e kodit. Si shembull jepen statistikat e rikthimeve t\u00eb ndryshimeve \u2014 p\u00ebr kodin n\u00eb Rust, numri i rikthimeve t\u00eb ndryshimeve p\u00ebr shkak t\u00eb identifikimit t\u00eb gabimeve t\u00eb papritura \u00ebsht\u00eb dy her\u00eb m\u00eb i ul\u00ebt sesa p\u00ebr kodin n\u00eb C++. <\/p>\n

N\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrgjithshme, p\u00ebrdorimi i metodave t\u00eb sigurta t\u00eb programimit paraqitet si paradigmat m\u00eb efektive p\u00ebr zhvillimin e sot\u00ebm, e cila ka z\u00ebvend\u00ebsuar tre qasje q\u00eb ishin p\u00ebrdorur m\u00eb par\u00eb: <\/p>\n