安全增强型虚拟磁盘加密系统技术  

Security enhanced virtual disk encryption system and technology

作　　者：倪凯斌[1] 姚国祥[1] 官全龙[2] 

机构地区：[1]暨南大学信息科学技术学院,广州510632 [2]暨南大学网络中心工程部,广州510632

出　　处：《计算机应用》2009年第11期2987-2989,3026,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60773083);广东省部产学研项目(2008B090500201);广东高校科技成果转化重大项目(cgzhzd0807);广东省科技计划项目(2008A010100001)

摘　　要：应用文件系统过滤驱动技术,结合审计、防U盘扩散、防缓存泄漏方法,对现阶段流行的虚拟磁盘加密软件的透明加解密方案进行改进,在其虚拟驱动层上增加了旨在提升整体安全性能的文件系统过滤驱动层(下面称之为安全层)。针对开源的truecrypt进行测试,结果表明,在Windows各版本操作系统下,对虚拟磁盘加密软件上加入安全层以后,解决了U盘扩散、虚拟磁盘卸载之后缓存泄漏等安全问题,实现了对用户操作的审计监控,能有效增强虚拟磁盘加密软件的安全性能。The authors studied and improved the transparent encryption and decryption program of virtual disk encryption software, using technology of file system filter driver and methods of auditing, preventing U disk proliferation and cache leakage. A file system filter driver layer was attached to the virtual driver layer in the program of virtual disk encryption. Test results in Truecrypt under various versions of Windows operation system show that problems of U disk proliferation and cache leakage can be avoided when the security layer is attached onto the virtual disk encryption software, and users＇ operations can also be monitored and audited. The results indicate that the security layer can effectively enhance security performance of the virtual disk encryption software.

关 键 词：虚拟磁盘 文件加密 审计 过滤驱动 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]