November 2021
Beginner to intermediate
239 pages
4h 15m
Chinese
Content preview from Dapr学习手册
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
144
｜
第
4
章
4.1.2.3
保护使用中的数据
无论在静止和传输过程中如何加密和保护，数据通常都是以纯文本的方式处
理。黑客获取访问正在运行的程序的概率很低，但这种攻击往往针对高价值
的目标，如金融信息或访问密钥。一些最严重的信息泄露事件可追溯到怀有
恶意的内部人员，他们有时拥有管理权限。
边缘的情况更加复杂。例如，边缘计算
(
与云计算相比
)
的一个独特挑战是，
对手可以将被篡改的设备连接到计算平面，以获取敏感的用户信息。
幸运的是，有几种可能的方法可以保护数据免受特权用户的攻击。例如，
机密计算使用可信执行环境（
trusted execution environment,TEE
，又称为
enclave
）。基于软件或硬件的
TEE
创建了一个隔离的执行环境，任何人都无
法从外部观察到该环境，即使是系统管理员。
TEE
可以请求认证（软件证明
其身份的一种机制），以确保只有经过批准的代码才能被执行。
在算法层面，安全多方计算（
secure multiparty computation,MPC
）允许多方
在其输入上联合计算一个函数，同时保持输入的私密性，同态加密允许在加
密数据上进行计算（如
AI
训练和推理）。
在本书撰写时，
Dapr
还没有计划在使用过程中协助保护数据。
Dapr
在机密计
算提供协助的一种可能方式是与
Open Enclave SDK
（
https://oreil.ly/e7Snk
）
集成，以封装安全区的创建、代码部署、认证以及受信任组件和非信任组件
之间的通信。
Dapr
还可以扩展为支持某些
MPC
场景。例如，自定义 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.