ื™ื‘ื, ื’ื•ื’ืœ, ืžื™ื™ืงืจืึธืกืึธืคึฟื˜ ืื•ืŸ ื™ื ื˜ืขืœ ื”ืึธื‘ืŸ ื’ืขื’ืจื™ื ื“ืขื˜ ืึท ื‘ื•ื ื“ ืฆื• ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ืึธืคึฟืŸ ื“ืึทื˜ืŸ ืฉื•ืฅ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื–

ืœื™ื ื•ืงืก ื•ื•ื™ืงื™ืคึผืขื“ื™ืข ืžื•ื“ื™ืข ื“ืขื ืื•ื™ืฃ ื“ื™ ื’ืจื™ื ื“ื•ื ื’ ืคื•ืŸ ืึท ืงืึธื ืกืึธืจื˜ื™ื•ื ืงืึทื ืคืึทื“ืขื ืฉืึทืœ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ืงืึธื ืกืึธืจื˜ื™ื•ื, ืึทื™ืžืขื“ ื‘ื™ื™ึท ื“ืขื•ื•ืขืœืึธืคึผื™ื ื’ ืขืคืขื ืขืŸ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืื•ืŸ ืกื˜ืึทื ื“ืึทืจื“ืก ืฉื™ื™ึทื›ื•ืช ืฆื• ื–ื™ื›ืขืจ ืื™ืŸ-ื–ื™ืงืึธืจืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืื•ืŸ ืงืึทื ืคืึทื“ืขื ืฉืึทืœ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’. ื“ื™ ืฉืœืึธืก ืคึผืจื•ื™ืขืงื˜ ืื™ื– ืฉื•ื™ืŸ ื“ื–ืฉื•ื™ื ื“ ื“ื•ืจืš ืงืึธืžืคึผืึทื ื™ืขืก ืึทื–ืึท ื•ื•ื™ Alibaba, Arm, Baidu, Google, IBM, Intel, Tencent ืื•ืŸ Microsoft, ื•ื•ืึธืก ื”ืึธื‘ืŸ ื‘ื“ืขื” ืฆื• ืึทืจื‘ืขื˜ืŸ ืฆื•ื–ืึทืžืขืŸ ืื•ื™ืฃ ืึท ื ื™ื™ื˜ืจืึทืœ ืคึผืœืึทื˜ืคืึธืจืžืข ืฆื• ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืคึฟืึทืจ ื™ื™ืกืึทืœื™ื™ื˜ื™ื ื’ ื“ืึทื˜ืŸ ืื™ืŸ ื–ื›ึผืจื•ืŸ ื‘ืขืฉืึทืก ื“ื™ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ืคึผืจืึธืฆืขืก.

ื“ื™ ืœืขืฆื˜ ืฆื™ืœ ืื™ื– ืฆื• ืฆื•ืฉื˜ืขืœืŸ ื“ื™ ืžื™ื˜ืœ ืฆื• ืฉื˜ื™ืฆืŸ ื“ื™ ืคื•ืœ ืฆื™ืงืœ ืคื•ืŸ ื“ืึทื˜ืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืื™ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ืคืึธืจืขื, ืึธืŸ ื“ืขืจื’ื™ื™ื•ื ื’ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื™ืŸ ืึธืคึฟืŸ ืคืึธืจืขื ืื™ืŸ ื™ื—ื™ื“ ืกื˜ืึทื’ืขืก. ื“ื™ ื™ื ื˜ืขืจืขืก ื’ืขื’ื ื˜ ืคื•ืŸ ื“ื™ ืงืึธื ืกืึธืจื˜ื™ื•ื ื›ื•ืœืœ ื‘ืคึฟืจื˜ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ื“ืึทื˜ืŸ ืื™ืŸ ื“ื™ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ืคึผืจืึธืฆืขืก, ื ื™ื™ืžืœื™ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ื™ื ืงืœืึทื•ื•ืขืก, ืคึผืจืึธื˜ืึธืงืึธืœืก ืคึฟืึทืจ ืžื•ืœื˜ื™ืคึผืึทืจื˜ื™ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’, ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ื“ืึทื˜ืŸ ืื™ืŸ ื–ื™ืงืึธืจืŸ ืื•ืŸ ื’ืึทื ืฅ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜ ืคื•ืŸ ื“ืึทื˜ืŸ ืื™ืŸ ื–ื™ืงืึธืจืŸ (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืฆื• ืคืึทืจืžื™ื™ึทื“ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืกื™ืกื˜ืขื ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ืคื•ืŸ ืึทืงืกืขืก ื“ืึทื˜ืŸ ืื™ืŸ ื“ืขืจ ื–ื›ึผืจื•ืŸ ืคื•ืŸ ื’ืึทืกื˜ ืกื™ืกื˜ืขืžืขืŸ).

ื“ื™ ืคืืœื’ืขื ื“ืข ืคึผืจืึทื“ื–ืฉืขืงืก ื–ืขื ืขืŸ ื˜ืจืึทื ืกืคืขืจื“ ืคึฟืึทืจ ืคืจื™ื™ึท ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ื•ื•ื™ ืึท ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืงืึธื ืคื™ื“ืขื ื˜ื™ืึทืœ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ืงืึธื ืกืึธืจื˜ื™ื•ื:

  • ื™ื ื˜ืขืœ ืื™ื‘ืขืจื’ืขื’ืขื‘ืŸ ืคึฟืึทืจ ืคืืจื‘ืœื™ื‘ืŸ ืฉืœืึธืก ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคืจื™ืขืจ ื’ืขืขืคื ื˜
    ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืคึฟืึทืจ ื ื™ืฆืŸ ื˜ืขื›ื ืึธืœืึธื’ื™ืข SGX (Software Guard Extensions) ืื•ื™ืฃ ืœื™ื ื•ืงืก, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืึท SDK ืžื™ื˜ ืึท ื’ืึทื ื’ ืคื•ืŸ ืžื›ืฉื™ืจื™ื ืื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื–. SGX ืœื™ื™ื’ื˜ ืฆื• ื ื•ืฆืŸ ืึท ืกื›ื•ื ืคื•ืŸ ืกืคึผืขืฆื™ืขืœ ืคึผืจืึทืกืขืกืขืจ ืื™ื ืกื˜ืจื•ืงืฆื™ืขืก ืฆื• ืึทืœืึทืงื™ื™ื˜ ืคึผืจื™ื•ื•ืึทื˜ ื–ื›ึผืจื•ืŸ ื’ืขื‘ื™ื˜ืŸ ืฆื• ื‘ืึทื ื™ืฆืขืจ-ืžื“ืจื’ื” ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–, ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื•ื•ืึธืก ืื™ื– ื™ื ืงืจื™ืคึผื˜ื™ื“ ืื•ืŸ ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืœื™ื™ืขื ืขืŸ ืึธื“ืขืจ ืžืึทื“ืึทืคื™ื™ื“ ืืคื™ืœื• ื“ื•ืจืš ื“ื™ ืงืขืจืŸ ืื•ืŸ ืงืึธื“ ืคืœื™ืกื ื“ื™ืง ืื™ืŸ ืจื™ื ื’0, SMM ืื•ืŸ VMM ืžืึธื“ืขืก;

  • ืžื™ื™ืงืจืึธืกืึธืคึฟื˜ ื”ืึธื˜ ืื™ื‘ืขืจื’ืขื’ืขื‘ืŸ ื“ืขื ืคืจื™ื™ืžื•ื•ืขืจืง ืขืคืขื ืขืŸ ืขื ืงืœืึทื•ื•, ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืฆื• ืฉืึทืคึฟืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืŸ ื˜ืขืข (ื˜ืจืึทืกื˜ืขื“ ืขืงืกืขืงื•ื˜ื™ืึธืŸ ืขื ื•ื•ื™ืจืึธื ืžืขื ื˜) ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจื– ื ื™ืฆืŸ ืึท ืื™ื™ืŸ ืึทืคึผื™ ืื•ืŸ ืึทื‘ืกื˜ืจืึทืงื˜ ืขื ืงืœืึทื•ื•ืข ืคืึทืจื˜ืจืขื˜ื•ื ื’. ืึท ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืฆื•ื’ืขื’ืจื™ื™ื˜ ืžื™ื˜ Open Enclav ืงืขื ืขืŸ ืœื•ื™ืคืŸ ืื•ื™ืฃ ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ ืคืึทืจืฉื™ื“ืขื ืข ืขื ืงืœืึทื•ื• ื™ืžืคึผืœืึทืžืึทื ืฅ. ืคื•ืŸ ื“ื™ TEE, ื‘ืœื•ื™ื– Intel SGX ืื™ื– ื“ืขืจื•ื•ื™ื™ึทืœ ื’ืขืฉื˜ื™ืฆื˜. ืงืึธื“ ืฆื• ืฉื˜ื™ืฆืŸ ARM TrustZone ืื™ื– ืื™ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’. ื•ื•ืขื’ืŸ ืฉื˜ื™ืฆืŸ ืฉืœื™ืกืœืฉื˜ื™ื™ืŸ, AMD PSP (ืคึผืœืึทื˜ืคืึธืจื ืกืขืงื•ืจื™ื˜ื™ ืคึผืจืึทืกืขืกืขืจ) ืื•ืŸ AMD SEV (Secure Encryption Virtualization) ื–ืขื ืขืŸ ื ื™ืฉื˜ ื’ืขืžืืœื“ืŸ.
  • ืจืขื“ ื”ืื˜ ื”ืื˜ ืื™ื‘ืขืจื’ืขื’ืขื‘ืŸ ื“ืขื ืคืจืื™ืขืงื˜ ืขื ืึทืจืงืก, ื•ื•ืึธืก ื’ื™ื˜ ืึทืŸ ืึทื‘ืกื˜ืจืึทืงืฆื™ืข ืฉื™ื›ื˜ืข ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ื•ื ื™ื•ื•ืขืจืกืึทืœ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืฆื• ืœื•ื™ืคืŸ ืื™ืŸ ื™ื ืงืœืึทื•ื•ืขืก ื•ื•ืึธืก ืฉื˜ื™ืฆืŸ ืคืึทืจืฉื™ื“ืŸ ื˜ื™ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ, ื™ื ื“ื™ืคึผืขื ื“ืึทื ื˜ืœื™ ืคื•ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจื– ืื•ืŸ ืึทืœืึทื•ื™ื ื’ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืฉืคึผืจืึทื›ืŸ (ื•ื•ืขื‘ืึทืกืกืขืžื‘ืœื™-ื‘ืื–ื™ืจื˜ ืจื•ื ื˜ื™ืžืข ืื™ื– ื’ืขื ื™ืฆื˜). ื“ืขืจ ืคึผืจื•ื™ืขืงื˜ ื“ืขืจื•ื•ื™ื™ึทืœ ืฉื˜ื™ืฆื˜ AMD SEV ืื•ืŸ Intel SGX ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื–.

ืฆื•ื•ื™ืฉืŸ ื“ื™ ืึธื•ื•ื•ืขืจืœื•ืงื˜ ืขื ืœืขืš ืคึผืจืึทื“ื–ืฉืขืงืก, ืžื™ืจ ืงืขื ืขืŸ ื˜ืึธืŸ ื“ื™ ืคืจื™ื™ืžื•ื•ืขืจืง ืึทืกื™ืœืึธ, ื•ื•ืึธืก ืื™ื– ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ืขืจ ื”ื•ื™ืคึผื˜ ื“ื•ืจืš Google ืขื ื“ื–ืฉืึทื ื™ืจื–, ืึธื‘ืขืจ ืื™ื– ื ื™ืฉื˜ ืึทืŸ ืึทืคื™ืฉืึทืœื™ ื’ืขืฉื˜ื™ืฆื˜ Google ืคึผืจืึธื“ื•ืงื˜. ื“ื™ ืคืจื™ื™ืžื•ื•ืขืจืง ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืœื™ื™ื›ื˜ ืึทื“ืึทืคึผื˜ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืขื˜ืœืขื›ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ื•ื•ืึธืก ืจื™ืงื•ื•ื™ื™ืขืจื– ืึท ื’ืขื•ื•ืืงืกืŸ ืฉื•ืฅ ืฆื• ื“ื™ ื–ื™ื™ึทื˜ ืคื•ืŸ ืึท ืคึผืจืึธื˜ืขืงื˜ืขื“ ืขื ืงืœืึทื•ื•ืข. ืคื•ืŸ ื“ื™ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืืคื’ืขื–ื•ื ื“ืขืจื˜ืงื™ื™ื˜ ืžืขืงืึทื ื™ื–ืึทืžื– ืื™ืŸ Asylo, ื‘ืœื•ื™ื– Intel SGX ืื™ื– ื’ืขืฉื˜ื™ืฆื˜, ืึธื‘ืขืจ ืึท ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืžืขืงืึทื ื™ื–ืึทื ืคึฟืึทืจ ืคืึธืจืžื™ื ื’ ืขื ืงืœืึทื•ื•ืขืก ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ืื™ื– ืื•ื™ืš ื‘ื ื™ืžืฆื.

ื’ืขื“ืขื ืงื˜ ืึทื– ื“ื™ ืขื ืงืœืึทื•ื•ืข (ื˜ื™, Trusted Execution Environment) ื™ื ื•ื•ืึทืœื•ื•ื– ื“ื™ ืคึผืจืึทืกืขืกืขืจ ื˜ื ื™ื™ึท ืคื•ืŸ ืึท ืกืคึผืขืฆื™ืขืœ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ื’ืขื’ื ื˜, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื•ืŸ ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื ืื™ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืกื•ื•ื™ื•ื•ืข, ื“ื™ ื–ื›ึผืจื•ืŸ ืื™ื ื”ืึทืœื˜ ืื•ืŸ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ืงืึธื“ ืื™ืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ื™ื ืึทืงืกืขืกืึทื‘ืึทืœ ืคึฟื•ืŸ ื“ื™ ื”ื•ื™ืคึผื˜. ืกื™ืกื˜ืขื, ืจืึทื’ืึทืจื“ืœืึทืก ืคื•ืŸ ื“ื™ ืžื“ืจื’ื” ืคื•ืŸ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ื‘ื ื™ืžืฆื. ืคึฟืึทืจ ื–ื™ื™ืขืจ ื“ื•ืจื›ืคื™ืจื•ื ื’, ื™ืžืคึผืœืึทืžืึทื ืฅ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ ืึทืœื’ืขืจื™ื“ืึทืžื–, ืคืึทื ื’ืงืฉืึทื ื– ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’ ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœืขืŸ ืื•ืŸ ืคึผืึทืกื•ื•ืขืจื“ื–, ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืคึผืจืึธื•ืกื™ื“ื–ืฉืขืจื– ืื•ืŸ ืงืึธื“ ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืงืึทื ืคืึทื“ืขื ืฉืึทืœ ื“ืึทื˜ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืฆื• ื“ื™ ืขื ืงืœืึทื•ื•ืข.

ืื•ื™ื‘ ื“ื™ ื”ื•ื™ืคึผื˜ ืกื™ืกื˜ืขื ืื™ื– ืงืึทืžืคึผืจืึทืžื™ื™ื–ื“, ื“ืขืจ ืึทื˜ืึทืงืขืจ ื•ื•ืขื˜ ื ื™ืฉื˜ ืงืขื ืขืŸ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืกื˜ืึธืจื“ ืื™ืŸ ื“ื™ ืขื ืงืœืึทื•ื•ืข ืื•ืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืœื™ืžื™ื˜ืขื“ ื‘ืœื•ื™ื– ืฆื• ื“ื™ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืฆื•ื‘ื™ื ื“. ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืขื ืงืœืึทื•ื•ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืื˜ืจืื›ื˜ ื•ื•ื™ ืึทืŸ ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ืฆื• ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืžืขื˜ื”ืึธื“ืก ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื”ืึธืžืึธืžืึธืจืคื™ืง ืขื ืงืจื™ืคึผืฉืึทืŸ ืึธื“ืขืจ ืงืึทื ืคืึทื“ืขื ืฉืึทืœ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ืคึผืจืึธื˜ืึธืงืึธืœืก, ืึธื‘ืขืจ ื ื™ื˜ ืขื ืœืขืš ื“ื™ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื–, ื“ื™ ืขื ืงืœืึทื•ื•ืข ื”ืื˜ ื›ืžืขื˜ ืงื™ื™ืŸ ื•ื•ื™ืจืงื•ื ื’ ืื•ื™ืฃ ื“ื™ ืคืึธืจืฉื˜ืขืœื•ื ื’ ืคื•ืŸ ื—ืฉื‘ื•ื ื•ืช ืžื™ื˜ ืงืึทื ืคืึทื“ืขื ืฉืึทืœ ื“ืึทื˜ืŸ ืื•ืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืกื™ืžืคึผืœืึทืคื™ื™ื– ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’