摘要
针对Linux剩余信息安全删除目前存在的耗时问题,设计一种基于LKM的加密安全删除方法。该方法通过LKM的形式利用系统调用劫持来修改unlinkat系统调用的逻辑,可以减少上下文切换及数据拷贝次数。针对大文件且I/O次数少的场景,添加加密模块实现文件头和文件体不同粒度的删除,可以减少总体的覆写次数,使得整体的安全删除性能有所提升。通过实验证明基于LKM的加解密剩余信息保护功能是可用的。
Aiming at the current time-consuming problem of the safe deletion of the remaining information in Linux,an encryption safe deletion method based on LKM was designed. This method used system call hijacking in the form of LKM to modify the logic of the unlinkat system call,which reduced context switching and data copy times. For scenarios with large files and few I/O times,the encryption module was added to implement the deletion of file headers and file bodies with different granularities,which reduced the overall number of overwrites and improved the overall secure deletion performance. Experiments prove that the LKM-based encryption and decryption residual information protection function is available.
作者
陈莉君
田野
郑华利
Chen Lijun;Tian Ye;Zheng Huali(School of Computer Science and Technology, Xi＇ an University of Posts and Telecommunications, Xi＇ an 710121, Shaanxi, China)
出处
《计算机应用与软件》
北大核心
2018年第6期325-329,共5页
Computer Applications and Software
关键词
剩余信息
安全删除
LKM
加解密
LINUX内核
Remaining information
Safe deletion
LKM
Encryption and decryption Linux kernel
