|
Qubes OS is a security-focused desktop operating system that aims to provide security through isolation.〔(【引用サイトリンク】title=Qubes OS bakes in virty system-level security )〕 Virtualization is performed by Xen, and user environments can be based on Fedora, Debian, Whonix, and Microsoft Windows, among other operating systems. On February 16, 2014, Qubes was selected as a finalist of Access Innovation Prize 2014 for Endpoint Security Solution.〔(【引用サイトリンク】url=https://www.accessnow.org/blog/2014/02/13/endpoint-security-prize-finalists-announced )〕 ==Security goals== Qubes implements a ''Security by Isolation'' approach.〔(【引用サイトリンク】title=The three approaches to computer security )〕 The assumption is that there can be no perfect, bug-free desktop environment. Such an environment counts millions of lines of code, billions of software/hardware interactions. One critical bug in any of these interactions may be enough for malicious software to take control over a machine.〔(【引用サイトリンク】title=Qubes OS: An Operating System Designed For Security )〕〔(【引用サイトリンク】title= A digital fortress? )〕 In order to secure a desktop, a Qubes user should take care of isolating various environments, so that if one of the components get compromised, the malicious software would get access to only the data inside that environment.〔(【引用サイトリンク】title=How Splitting a Computer Into Multiple Realities Can Protect You From Hackers )〕 In Qubes, the isolation is provided in two dimensions: hardware controllers are isolated into functional domains (GUI, network and storage domains), whereas the user's digital life is decided in domains with different levels of trust. For instance: work domain (most trusted), shopping domain, random domain (less trusted).〔(【引用サイトリンク】publisher=Joanna Rutkowska )〕 Each of those domains is run in a separate virtual machine. Qubes is not a multiuser system. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Qubes OS」の詳細全文を読む スポンサード リンク
|