本地无数据的iSCSI磁盘数据保护机制

doi:10.11772/j.issn.1001-9081.2017.02.0412

计算机应用 ›› 2017, Vol. 37 ›› Issue (2): 412-416.DOI: 10.11772/j.issn.1001-9081.2017.02.0412

• 第十届中国可信计算与信息安全学术会议 • 上一篇下一篇

本地无数据的iSCSI磁盘数据保护机制

张晋卿¹, 姚淑珍¹, 谭火彬²

1. 北京航空航天大学计算机学院, 北京 100191;
2. 北京航空航天大学软件学院, 北京 100191

收稿日期:2016-08-15 修回日期:2016-09-04 出版日期:2017-02-10 发布日期:2017-02-11
通讯作者: 张晋卿,jinqz1992@163.com
作者简介:张晋卿(1992-),男,山东青岛人,硕士研究生,主要研究方向:信息安全;姚淑珍(1965-),女,北京人,教授,博士,CCF会员,主要研究方向:软件工程、Petri网;谭火彬(1979-),男,北京人,讲师,博士,主要研究方向:软件工程。

Data protection mechanism of local-no-data for iSCSI disk

ZHANG Jinqing¹, YAO Shuzhen¹, TAN Huobin²

1. School of Computer Science and Engineering, Beihang University, Beijing 100191, China;
2. School of Software, Beihang University, Beijing 100191, China

Received:2016-08-15 Revised:2016-09-04 Online:2017-02-10 Published:2017-02-11

摘要/Abstract

摘要： 在信息窃取者合法登录系统的情况下，现有的Internet小型计算机系统接口（iSCSI）磁盘数据保护措施并不能保证数据不被窃取。通过结合磁盘读写重定向算法、磁盘透明加解密机制，提出一种本地无数据的iSCSI磁盘数据保护机制iSCSI_SEC。本地无数据指的是iSCSI磁盘中的重要数据只会存在于iSCSI磁盘服务器中而不会因为用户操作或者程序拷贝等原因在本地存储介质上存在，从而能够保证磁盘中重要数据的机密性。通过在系统内核层加载磁盘过滤驱动程序的方式来实现数据保护机制，并与TrueCrypt进行磁盘读写性能对比，实验结果显示iSCSI_SEC使磁盘读、写性能下降幅度小于TrueCrypt。结果表明，iSCSI_SEC不仅能够保证iSCSI磁盘数据的机密性，并且在iSCSI磁盘环境下比TrueCrypt有更好的性能表现。

关键词: iSCSI协议, 磁盘过滤, 数据窃取

Abstract: The existing Internet Small Computer System Interface (iSCSI) disk data protection measures cannot guarantee that the data will not be stolen when unexpected user logs into the system legally. By combining algorithm of redirect disk read and write, transparent encryption and decryption of disk, local-no-data iSCSI disk data protection mechanism named iSCSI_SEC (iSCSI disk data SECurity) was proposed. The concept of local-no-data means that the important data in iSCSI disk will only be stored in the server and not be stored in the local storage by user operation or program copy or some other reasons, which can guarantee the confidentiality of important data on the disk. iSCSI_SEC was realized in system kernel by loading a layer of disk filter. The experimental results show that compared with TrueCrypt, although iSCSI_SEC decreased the disk read and write performance, but the decrease is less than that of TrueCrypt. iSCSI_SEC not only can guarantee the confidentiality of data on iSCSI disk, but also has better performance than TrueCrypt under the environment of iSCSI.

Key words: Internet Small Computer System Interface (iSCSI)protocol, disk filter, data theft

中图分类号:

TP309.2

张晋卿, 姚淑珍, 谭火彬. 本地无数据的iSCSI磁盘数据保护机制[J]. 计算机应用, 2017, 37(2): 412-416.

ZHANG Jinqing, YAO Shuzhen, TAN Huobin. Data protection mechanism of local-no-data for iSCSI disk[J]. Journal of Computer Applications, 2017, 37(2): 412-416.

参考文献

[1] WANG J, YAO X, MITCHELL C, et al. A new hierarchical data cache architecture for iSCSI storage server[J]. IEEE Transactions on Computers, 2009, 58(4):433-447.
[2] XU X, SU J. Research and implementation of iSCSI-based SAN static data encryption system[C]//ICCSNT 2012:Proceedings of the 20122nd International Conference on Computer Science and Network Technology. Piscataway, NJ:IEEE, 2012:257-260.
[3] SUNG B, PARK S, LEE W, et al. Enhancing robustness of an iSCSI-based file system in wireless networks[C]//ACSAC 2008:Proceedings of the 13th Asia-Pacific Computer Systems Architecture Conference. Piscataway, NJ:IEEE, 2008:1-7.
[4] GUITIERREZ C M, JEFFREY W, FURLANI C M. FIPS PUB 200:minimum security requirements for federal information and information systems[S/OL]. Gaithersburg, MD, USA:National Institute of Standards and Technology, 2006[2016-03-06]. https://www.mendeley.com/catalog/fips-pub-200-minimum-security-requirements-federal-information-information-systems/.
[5] HUANG J, XIE C, LI X. iOBS3:an iSCSI-based object storage security system[C]//CIS 2006:Proceedings of the 2006 International Conference on Computational Intelligence and Security, LNCS 4456. Berlin:Springer-Verlag, 2006:620-626.
[6] HE J, WANG L, LI Y-S, et al. Research and implement of security iSCSI based on SSL[C]//ICIC 2011:Proceedings of the 2011 Fourth International Conference on Information and Computing. Washington, DC:IEEE Computer Society, 2011:18-21.
[7] LI S, JIA X. Research and application of transparent encrypting file system based on Windows kernel[C]//CiSE 2010:Proceedings of the 2010 International Conference on Computational Intelligence and Software Engineering. Piscataway, NJ:IEEE, 2010:1-4.
[8] YANG L, LI Y, ZHENG L. Transparent encryption based on network file system filtering driver[C]//ICEICE 2011:Proceedings of the 2011 International Conference on Electric Information and Control Engineering. Piscataway, NJ:IEEE, 2011:6339-6342.
[9] MIAO Q-X. Research and analysis on encryption principle of TrueCrypt software system[C]//ICISE 2010:Proceedings of the 2nd International Conference on Information Science and Engineering. Piscataway, NJ:IEEE, 2010:1409-1412.
[10] 陶天一. 基于TrueCrypt的自安全磁盘加密系统的研究与实现[D].北京:北京邮电大学, 2013:22-69. (TAO T Y. Research and implementation of self-securing disk encrypted system based on TrueCrypt[D]. Beijing:Beijing University of Posts and Telecommunications, 2013:22-69.).
[11] BERTINO E. Data Protection from Insider Threats (Synthesis Lectures on Data Management)[M].[S.l.]:Morgan & Claypool Publishers, 2012:1-91.
[12] CHANDOLA V, BANERJEE A, KUMAR V. Anomaly detection:a survey[J]. ACM Computing Surveys (CSUR), 2009, 41(3):Article No. 15.
[13] SUN Y, HOU Z, WEI W. A new approach for data protection in case of the physical device being stolen-Using hybrid storage[C]//JICSIT 2011:Proceedings of the 201113th IEEE Joint International Computer Science and Information Technology Conference. Piscataway, NJ:IEEE, 2013:1-4.

[1]	巫光福, 王影军. 基于区块链与云-边缘计算混合架构的车联网数据安全存储与共享方案[J]. 计算机应用, 2021, 41(10): 2885-2892.
[2]	陈恒恒, 倪志伟, 朱旭辉, 金媛媛, 陈千. 基于聚类分析的差分隐私高维数据发布方法[J]. 计算机应用, 2021, 41(9): 2578-2585.
[3]	张永斌, 常文欣, 孙连山, 张航. 基于字典的域名生成算法生成域名的检测方法[J]. 计算机应用, 2021, 41(9): 2609-2614.
[4]	葛纪红, 沈韬. 基于区块链的能源数据访问控制方法[J]. 计算机应用, 2021, 41(9): 2615-2622.
[5]	李蓓, 张问银, 王九如, 赵伟, 王海峰. 基于区块链的密封式投标拍卖方案[J]. 计算机应用, 2021, 41(4): 999-1004.
[6]	秦静, 安雯, 季长清, 汪祖民. 无线体域网隐私保护机制研究综述[J]. 计算机应用, 2021, 41(4): 970-975.
[7]	张利华, 王欣怡, 胡方舟, 黄阳, 白甲义. 基于双联盟链的智能电网数据共享模型[J]. 计算机应用, 2021, 41(4): 963-969.
[8]	张学旺, 殷梓杰, 冯家琦, 叶财金, 付康. 基于区块链与可信计算的数据交易方案[J]. 计算机应用, 2021, 41(4): 939-944.
[9]	张国潮, 唐华云, 陈建海, 沈睿, 何钦铭, 黄步添. 基于区块链的数字音乐版权管理系统[J]. 计算机应用, 2021, 41(4): 945-955.
[10]	高昊昱, 李雷孝, 林浩, 李杰, 邓丹, 李少旭. 区块链在数据完整性保护领域的研究与应用进展[J]. 计算机应用, 2021, 41(3): 745-755.
[11]	刘向宇, 夏国平, 夏秀峰, 宗传玉, 朱睿, 李佳佳. 个性化时空数据隐私保护[J]. 计算机应用, 2021, 41(3): 643-650.
[12]	黄思远, 张敏情, 柯彦, 毕新亮. 基于显著性检测的图像隐写分析方法[J]. 计算机应用, 2021, 41(2): 441-448.
[13]	张恩, 李会敏, 常键. 可验证的隐私保护k-means聚类方案[J]. 计算机应用, 2021, 41(2): 413-421.
[14]	罗志伟, 刘持标. 基于H.266/通用视频编码的帧内双模式的视频水印算法[J]. 计算机应用, 2021, 41(2): 456-460.
[15]	李秀艳, 刘明曦, 史闻博, 董国芳. 面向资源受限用户的高效动态数据审计方案[J]. 计算机应用, 2021, 41(2): 422-432.

本地无数据的iSCSI磁盘数据保护机制

Data protection mechanism of local-no-data for iSCSI disk

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics