【摘要】 在信息窃取者合法登录系统的情况下,现有的Internet小型计算机系统接口(i SCSI)磁盘数据保护措施并不能保证数据不被窃取。通过结合磁盘读写重定向算法、磁盘透明加解密机制,提出一种本地无数据的i SCSI磁盘数据保护机制i SCSI_SEC。本地无数据指的是i SCSI磁盘中的重要数据只会存在于i SCSI磁盘服务器中而不会因为用户操作或者程序拷贝等原因在本地存储介质上存在,从而能够保证磁盘中重要数据的机密性。通过在系统内核层加载磁盘过滤驱动程序的方式来实现数据保护机制,并与True Crypt进行磁盘读写性能对比,实验结果显示i SCSI_SEC使磁盘读、写性能下降幅度小于True Crypt。结果表明,i SCSI_SEC不仅能够保证i SCSI磁盘数据的机密性,并且在i SCSI磁盘环境下比True Crypt有更好的性能表现。更多还原

【Abstract】 The existing Internet Small Computer System Interface( i SCSI) disk data protection measures cannot guarantee that the data will not be stolen when unexpected user logs into the system legally. By combining algorithm of redirect disk read and write, transparent encryption and decryption of disk, local-no-data i SCSI disk data protection mechanism named i SCSI_SEC( i SCSI disk data SECurity) was proposed. The concept of local-no-data means that the important data in i SCSI disk will only be stored in the server and not be stored in the local storage by user operation or program copy or some other reasons,which can guarantee the confidentiality of important data on the disk. i SCSI_SEC was realized in system kernel by loading a layer of disk filter. The experimental results show that compared with True Crypt, although i SCSI_SEC decreased the disk read and write performance, but the decrease is less than that of True Crypt. i SCSI_SEC not only can guarantee the confidentiality of data on i SCSI disk, but also has better performance than True Crypt under the environment of i SCSI.更多还原