【作者】 戴翔；

【导师】 王同洋；

【作者基本信息】 华中科技大学 ， 计算机技术， 2014， 硕士

【摘要】 随着网络技术以及存储技术的发展，无论是政府部门、企业或者是个人的信息存储都已逐步信息化存储在网络存储器中，并依赖网络传播以及交换信息。同时为方便信息的管理，将数据进行集中存储已经成为数据存储发展的趋势，因此，数据的集中存储带来的安全问题是信息安全领域的重要问题之一。NAS（网络附加存储器，NetworkAttachedStorage）作为一种专业的网络数据的存储设备，以其连接的方便性、适宜的价格以及高容量成为对网络数据进行集中存储的重要角色。然而对于传统的NAS系统存在着没有严格的信息安全保护措施的弱点，这将使NAS系统在使用的过程中存在的安全隐患。为解决传统NAS系统信息安全保护较弱这一问题，在分析了NAS系统存储过程的存在的安全问题的基础上，提出了一种安全增强型NAS系统以满足NAS的存储安全需求。该系统所采用的访问控制模型针是一个具有较高粒度以及强度的访问控制模型，提高了NAS中的数据安全性；添加了对用户行为的审计，实现了对于NAS中数据访问的不可抵赖性。系统将用户分为三类普通用户、系统管理员以及审计管理员，并在系统中提供了与之相对应的功能：为普通用户提供了文件上传、下载以及目录删除创建的功能；为用户管理员提供了用户、角色、用户组以及环境的管理功能；为审计管理员提供了审计功能。更多还原

【Abstract】 With the development of network technology and storage technology, whether government, corporate or personal information is stored are gradually information stored in the network memory and rely on network communication and exchange of information. Same time to facilitate the management of information, centralized data storage has become a trend in the development of data storage, therefore, centralized storage of data security is an important issue to bring information security field.NAS(Network Attached Storge) storage devices as a professional network data connection with its convenience, reasonable price and high-capacity network data has become an important role for centralized storage. However, the traditional NAS system exists no strict information security measures weaknesses, which will make security risks in the course of using NAS systems.In order to solve the traditional NAS system is weak information security problem in the analysis of the existing NAS system stored procedures on security issues, we propose a security-enhanced NAS storage system to meet the security needs of the NAS. The system used by the access control model and the pin is a high granularity of access control model has the strength and improve the NAS data security; adds auditing of user behavior to achieve the non-repudiation of data access to the NAS. The system will be divided into three categories of users ordinary users, system administrators and audit manager, and provided with the corresponding function in the system:provides a common user file upload function to download and delete the directory created; for users to manage who provides the users, roles, user groups, and environmental management functions administrators to audit the audit function.更多还原