摘要： 为增强数据的机密性，在对存储读写流程优化的基础上提出一种内核级加密文件系统(KCFS)，该内核级加密文件系统能克服加密应用程序的使用不便利性和用户级加密文件系统的低效性，在内核级文件系统层提供加/解密功能，从而保护存储系统中的数据。对比测试结果表明，KCFS比用户级加密文件系统CFS具有更好的读写性能。
关键词:
存储安全性,
内核级加密文件系统,
加密策略
Abstract: In order to strengthen the confidentiality of data, this paper proposes a kind of Kernel-level Cryptographic File System(KCFS) combining the optimized data read/write flow. The kernel-level cryptographic file system can overcome the inconvenience of encryption application and the low efficiency of user-level encryption file system, so as to provide the encryption/decryption function in the kernel-level file system, protecting the data stored in the storage system. The result of comparative experiment shows that KCFS can reach better read/write performance compared to user-level encryption file, such as CFS.
Key words:
storage security,
Kernel-level Cryptographic File System(KCFS),
encryption policy
中图分类号:
裴灿浩, 谢长生, 黄建忠. 基于读写优化的内核级加密文件系统[J]. 计算机工程, 2010, 36(15): 137-139.
FEI Can-Gao, XIE Chang-Sheng, HUANG Jian-Zhong. Kernel-level Cryptographic File System Based on Read/Write Optimization[J]. Computer Engineering, 2010, 36(15): 137-139.