基于Thin Hypervisor的USB设备访问控制  

Access Control on USB Mass Storage Devices Based on Thin Hypervisor

作　　者：刘欢 马恒太[2] 赵培[2] 

机构地区：[1]中国科学院大学,北京100049 [2]中国科学院软件研究所,北京100190

出　　处：《计算机系统应用》2017年第11期76-81,共6页Computer Systems & Applications

基　　金：国家"核高基"科技重大专项(2014ZX01029101-002)

摘　　要：USB移动存储设备体积小、容量大、便于携带等优点,被广泛应用于数据的传输和备份.但是USB移动存储设备的这些特点也给数据的保护带来了很大的挑战.因为盗窃数据者可以轻易的利用USB移动存储设备带走数据.目前存在的针对USB存储设备访问控制的研究,主要基于应用层或操作系统内核层.当系统中存在恶意代码时,这些安全访问控制实施的模块很容易被旁路.为解决实施模块的安全性问题,实现了一种基于Thin Hypervisor的USB存储设备安全访问控制系统,它利用Thin Hypervisor对操作系统透明的特点,使得该系统不受操作系统安全性的影响,从而达到更加安全的目的.USB mobile storage devices are widely used to transfer and exchange data for their small size and large capacity. These features provide challenges for us to protect our confidential information because thieves can take secrets away by USB storage devices easily. At present, there are many studies on how to protect confidential data on USB storage devices. Most of these studies are based on application layer or operating system layer. When there are malicious codes on operating system, the operations protecting confidential information can be easily bypassed by attackers. In this paper, we present a USB devices access control system which is implemented on a thin hypervisor. The thin hypervisor is transparent to OS, which can guarantee that the security of the system is independent of OS, so that the system can be more secure.

关 键 词：USB存储设备 访问控制 THIN HYPERVISOR 数据安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP333[自动化与计算机技术—计算机科学与技术]