基于闪存冗余块的文件隐藏技术  

File hiding based on flash redundant blocks

作　　者：郭松辉[1] 王玉龙[1,2] 牛小鹏[1,2] 

机构地区：[1]解放军信息工程大学,郑州450000 [2]数学工程与先进计算国家重点实验室,郑州450000

出　　处：《计算机应用研究》2015年第3期900-904,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61072047)

摘　　要：为保护闪存型存储设备上的敏感文件,提出基于闪存冗余块的文件隐藏方法。该方法在分析Nand型flash特点及FAT32文件系统管理机制的基础上,将闪存中冗余的物理块有机组合以存储敏感文件,并采用与文件隐藏相似的方法恢复原始文件。实验结果表明,基于闪存冗余块的文件隐藏方法不占用闪存有效空间,具有隐蔽性高、鲁棒性强且隐藏容量大的特点,能有效抵抗软件取证攻击。For protecting sensitive files stored on the flash-based storage devices, this paper presented a file hiding method based on the redundant blocks. Based on analyzing the characteristics of NAND-type flash and the file management mechanism of FAT32 file system, the method made the redundant physical blocks organic combination to store sensitive files, and restored the original files by similar method to hiding. Experimental results show that the file hiding method based on the redundant blocks does not take up the flash effective space, has the characteristics of high concealment, strong robustness, considerable hiding capacity, and can effectively resist the evidence-taken attack of software.

关 键 词：文件隐藏 文件恢复 文件系统 电子取证 隐藏容量 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]