摘要
针对移动存储设备在不同密级主机间交叉使用时可能造成信息泄漏的安全问题,提出了一种基于文件系统过滤驱动的移动存储设备多密级交互方案。该方案基于移动存储设备的特殊硬件结构,通过文件系统过滤驱动在Windows文件操作中加入访问控制机制,实现了主机对移动存储设备的分级受控访问。实验结果表明,该方案实现了文件操作的细粒度控制及文件的加密存储,有效地保证了移动存储设备多密级交互时的安全。
To solve the problem of information leakage while removable storage devices being used among PCs with different secure,a scheme of multilevel security of removable storage device based on file system filter driver is proposed.On the basis of special hardware structure of removable storage device,access control mechanism is added to file operations through the file system filter deriver,and made the access of PC to removable storage device under control.Experimental results demonstrate that this scheme realize the fine grain control of file operations and encryption of document storage,protecting the security while removable storage device using among PCs with different security level effectively.
出处
《计算机工程与设计》
CSCD
北大核心
2011年第12期3969-3972,共4页
Computer Engineering and Design
关键词
移动存储设备
多密级
文件系统过滤驱动
存储加密
密钥管理
removable storage device
multilevel
file system filter driver
encrypted storage
key management
