ImgFS:一种利用用户空间文件系统的图片存储透明加密技术

Khashan A.; Zin M.; Sundararajan A.

doi:10.1631/FITEE.1400133

Your Location：

Home >

Browse articles >

ImgFS:一种利用用户空间文件系统的图片存储透明加密技术

计算机与自动化 | Updated：2022-06-06

- ImgFS:一种利用用户空间文件系统的图片存储透明加密技术
- ImgFS: a transparent cryptography for stored images using a filesystem in userspace*
- 信息与电子工程前沿（英文） 2015年16卷第1期页码：28-42
- Affiliations：
  
  Centre for Software Technology and Management, Faculty of Information Science and Technology, National University of Malaysia (UKM), Bangi 43600, Selangor, Malaysia
- Author bio：
  
  ‡Corresponding Author
- Funds：
  
  *Project partly supported by the Ministry of Higher Education of Malaysia under Grant LRGS/TD/2011/UKM/ICT/02
- DOI：10.1631/FITEE.1400133
  中图分类号：
- 收稿：2014-04-08，
  
  修回：2014-12-11，
  
  录用：2014-10-09，
  
  纸质出版：2015-01
- Accepted：
Scan QR Code
ImgFS:一种利用用户空间文件系统的图片存储透明加密技术[J]. 信息与电子工程前沿（英文）, 2015,16(1):28-42.

Khashan A., Zin M., Sundararajan A.. ImgFS: a transparent cryptography for stored images using a filesystem in userspace*[J]. Frontiers of Information Technology & Electronic Engineering, 2015, 16(1): 28-42.
ImgFS:一种利用用户空间文件系统的图片存储透明加密技术[J]. 信息与电子工程前沿（英文）, 2015,16(1):28-42. DOI： 10.1631/FITEE.1400133.

Khashan A., Zin M., Sundararajan A.. ImgFS: a transparent cryptography for stored images using a filesystem in userspace*[J]. Frontiers of Information Technology & Electronic Engineering, 2015, 16(1): 28-42. DOI： 10.1631/FITEE.1400133.

摘要

目的

透明加密技术克服了传统加密技术中面临的使用方便性、运行效率、安全等级等缺陷。然而已有的透明加密技术依赖于对核数据空间的深度理解。本文提出一种基于用户空间的全透明加密文件系统，有效克服已有的基于用户空间的加密文件系统运行中的不足之处。

创新

提出的ImgFS全透明加密文件系统平衡了图像存储文件的安全等级要求和使用方便性，并且能够克服现有的基于用户空间的加密文件系统的缺陷。

方法

设计ImgFS结构，并在不同规格图像文件下测试其读写性能。将读写时间与标准Ext4下的读写时间进行比较（图5-8）；对读写进程中主程序执行时间做进一步分析（图9-11）；并将ImgFS的性能与相关工作中的结论进行比较（图12）。

结论

实验结果表明当ImgFS提供更高等级安全性与透明度时，其性能可与已有的基于加密用户空间文件系统的高性能机制相比拟。

Abstract

Real-time encryption and decryption of digital images stored on end-user devices is a challenging task due to the inherent features of the images. Traditional software encryption applications generally suffered from the expense of user convenience

performance efficiency

and the level of security provided. To overcome these limitations

the concept of transparent encryption has been proposed. This type of encryption mechanism can be implemented most efficiently with kernel file systems. However

this approach has some disadvantages since developing a new file system and attaching it in the kernel level requires a deep understanding of the kernel internal data structure. A filesystem in userspace (FUSE) can be used to bridge the gap. Nevertheless

current implementations of cryptographic FUSE-based file systems suffered from several weaknesses that make them less than ideal for deployment. This paper describes the design and implementation of ImgFS

a fully transparent cryptographic file system that resides on user space. ImgFS can provide a sophisticated way to access

manage

and monitor all encryption and key management operations for image files stored on the local disk without any interaction from the user. The development of ImgFS has managed to solve weaknesses that have been identified on cryptographic FUSE-based implementations. Experiments were carried out to measure the performance of ImgFS over image files’ read and write against the cryptographic service

and the results indicated that while ImgFS has managed to provide higher level of security and transparency

its performance was competitive with other established cryptographic FUSE-based schemes of high performance.

关键词

Keywords

references

JM Amigó , L Kocarev , J Szczepanski . Theory and practice of chaotic cryptography . Phys Lett A , 2007 . 366 ( 3 ): 211 - 216 . DOI: 10.1016/j.physleta.2007.02.021 http://doi.org/10.1016/j.physleta.2007.02.021 .

M Bellare , R Canetti , H Krawczyk . Message authentication using hash functions—the HMAC construction . RSA Lab CryptoBytes , 1996 . 2 ( 1 ): 1 - 5 . .

M Blaze . A cryptographic file system for UNIX . 1993 . Proc. 1st ACM Conf. on Computer and Communications Security . 9 - 16 . DOI: 10.1145/168588.168590 http://doi.org/10.1145/168588.168590 .

G Cattaneo , L Catuogno , AD Sorbo , 等 . The design and implementation of a transparent cryptographic filesystem for UNIX . 2001 . Proc. USENIX Annual Technical Conf . 199 - 212 . .

RC Dowdeswell , J Ioannidis . The CryptoGraphic disk driver . 2003 . Proc. USENIX Annual Technical Conf . 179 - 186 . .

V Gough . EncFS Encrypted Filesystem . 2008 . Available from http://www.arg0.net/encfs [Accessed on Jan. 12, 2014] . .

MA Halcrow . eCryptfs: an enterprise-class encrypted filesystem for Linux . 2005 . Proc. Linux Symp . 201 - 218 . .

C Hohmann . CryptoFS . 2006 . Available from https://github.com/reboot/cryptofs [Accessed on Jan. 26, 2014] . .

T Jaeger , PC van Oorschot , G Wurster . Countering unauthorized code execution on commodity kernels: a survey of common interfaces allowing kernel code modification . Comput Secur , 2011 . 30 ( 8 ): 571 - 579 . DOI: 10.1016/j.cose.2011.09.003 http://doi.org/10.1016/j.cose.2011.09.003 .

M Kerrisk . Linux Programmer’s Manual: Kernel Random Number Source Devices . 2013 . Available from http://man7.org/linux/man-pages/man4/random.4.html [Accessed on Feb. 7, 2014] . .

G Kessler . File Signatures Table . 2014 . Available from http://www.garykessler.net/library/file_sigs.html [Accessed on Feb. 16, 2014] . .

OA Khashan , AM Zin . An efficient adaptive of transparent spatial digital image encryption . 2013 . Proc. 4th Int. Conf. on Electrical Engineering and Informatics . 288 - 297 . DOI: 10.1016/j.protcy.2013.12.193 http://doi.org/10.1016/j.protcy.2013.12.193 .

OA Khashan , AM Zin , EA Sundararajan . Performance study of selective encryption in comparison to full encryption for still visual images . J Zhejiang Univ-Sci C (Comput & Electron) , 2014 . 15 ( 6 ): 435 - 444 . DOI: 10.1631/jzus.C1300262 http://doi.org/10.1631/jzus.C1300262 .

K Lee , H Ewe . Multiple hashes of single key with passcode for multiple accounts . J Zhejiang Univ-Sci A , 2007 . 8 ( 8 ): 1183 - 1190 . DOI: 10.1631/jzus.2007.A1183 http://doi.org/10.1631/jzus.2007.A1183 .

SB Li , X Jia . Research and application of transparent encrypting file system based on windows kernel . 2010 . Proc. Int. Conf. on Computational Intelligence and Software Engineering . 1 - 4 . DOI: 10.1109/CISE.2010.5677091 http://doi.org/10.1109/CISE.2010.5677091 .

S Ludwig , W Kalfa . File system encryption with integrated user management . ACM SIGOPS Oper Syst Rev , 2001 . 35 ( 4 ): 88 - 93 . DOI: 10.1145/506084.506092 http://doi.org/10.1145/506084.506092 .

J Ma , Z Li , J Li . A novel secure virtual storage device scheme . 2010 . Proc. IEEE Int. Conf. on Intelligent Computing and Intelligent Systems . 271 - 275 . DOI: 10.1109/ICICISYS.2010.5658742 http://doi.org/10.1109/ICICISYS.2010.5658742 .

D Mazières . A toolkit for user-level file systems . 2001 . Proc. USENIX Annual Technical Conf . 261 - 274 . .

D Mellado , C Blanco , L Sánchez , 等 . A systematic review of security requirements engineering . Comput Stand Interface , 2010 . 32 ( 4 ): 153 - 165 . DOI: 10.1016/j.csi.2010.01.006 http://doi.org/10.1016/j.csi.2010.01.006 .

OpenSSL Project . OpenSSL Project . 2014 . Available from https://www.openssl.org/ [Accessed on Mar. 15, 2014] . .

B Preneel . HCA van Tilborg , S Jajodia . Modes of operation of a block cipher . Encyclopaedia of Cryptography and Security , 2011 . Springer US , 789 - 794 . DOI: 10.1007/978-1-4419-5906-5_599 http://doi.org/10.1007/978-1-4419-5906-5_599 .

A Rajgarhia , A Gehani . Performance and extension of user space file systems . 2010 . Proc. ACM Symp. on Applied Computing . 206 - 213 . DOI: 10.1145/1774088.1774130 http://doi.org/10.1145/1774088.1774130 .

R Rivest . The MD5 Message-Digest Algorithm . 1992 . Technical Report No. RFC-1321, MIT Laboratory for Computer Science and RSA Data Security, Inc . .

M Schiesser . Complete hard disk encryption using FreeBSD’s GEOM framework . 2005 . Proc. 4th European BSD Conf. Available from h . ttp://events.ccc.de/congress/2005/fahrplan/attachments/586-paper_Complete_Hard_Disk_Encryption.pd .

V Shukela . Chaoticfs Project . 2013 . Available from h . ttps://github.com/vi/chaoticf .

V Singh , D Lakshminarasimhaiah , Y Mishra , 等 . An implementation and evaluation of online disk encryption for windows systems . 2006 . Proc. 2nd Int. Conf. on Information Systems Security . 337 - 348 . DOI: 10.1007/11961635_24 http://doi.org/10.1007/11961635_24 .

Sunsoft . Linux-PAM . 2014 . Available from h . ttp://www.linux-pam.or .

M Szeredi . FUSE: Filesystem in Userspace . 2010 . Available from http://fuse.sourceforge.net/ [Accessed on Jan. 13, 2014] . .

Trusted Computing Group TPM Main Part 1: Design Principles . 2011 . Specification Version 1.2, Revision 116 . .

OP Verma , R Agarwal , D Dafouti , 等 . Performance analysis of data encryption algorithms . 2011 . Proc. 3rd Int. Conf. on Electronics Computer Technology . 399 - 403 . DOI: 10.1109/ICECTECH.2011.5942029 http://doi.org/10.1109/ICECTECH.2011.5942029 .

CP Wright , MC Martino , E Zadok . NCryptfs: a secure and convenient cryptographic file system . 2003 . Proc. USENIX Annual Technical Conf . 197 - 210 . .

X Zhang , F Liu , T Chen , 等 . Research and application of the transparent data encryption in intranet data leakage prevention . 2009 . Proc. Int. Conf. on Computational Intelligence and Security . 376 - 379 . DOI: 10.1109/CIS.2009.107 http://doi.org/10.1109/CIS.2009.107 .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

暂无数据