一篇新论文分析了 Qubes OS 的公开安全记录，考察了 2011 年至 2025 年间的 109 份 Qubes 安全公告 (QSB)。研究发现，绝大多数公告 (79.8%) 可归因于 Xen 或 CPU 微架构等上游组件，而非 Qubes-core 逻辑。尽管自 2015 年以来，总体披露活动已趋于平稳并处于较高水平，但安全问题的负担仍然集中在这些上游信任锚上，表明存在持续的外部依赖。 AI
影响 这项研究强调了复杂软件依赖项的安全影响，这与依赖多个上游组件的 AI 系统相关。
排序理由 该集群基于发表在 arXiv 上的学术论文，详细介绍了安全分析。[lever_c_demoted from research: ic=3 ai=0.4]
AI 生成摘要 · Google Gemini · 来自 3 个来源。 我们如何撰写摘要 →
arXiv:2607.14587v1 Announce Type: cross Abstract: Qubes OS is a revealing case for security measurement because its architecture makes component boundaries security-relevant. We present a protocol-driven longitudinal analysis of 109 public Qubes Security Bulletins (QSBs, 2011--20…
Qubes OS is a revealing case for security measurement because its architecture makes component boundaries security-relevant. We present a protocol-driven longitudinal analysis of 109 public Qubes Security Bulletins (QSBs, 2011--2025), the official Qubes-maintained Xen Security Ad…
Qubes OS is a revealing case for security measurement because its architecture makes component boundaries security-relevant. We present a protocol-driven longitudinal analysis of 109 public Qubes Security Bulletins (QSBs, 2011--2025), the official Qubes-maintained Xen Security Ad…