Abstract:
With Linux system call interception and loadable kernel module technique, the file filtering drive is studied and developed. And a file encryption/decryption server is implemented using blowfish algorithm on kernel-level about file filtering drive and its analysis of performance is presented. The result shows that, if the software functions are added to kernel-level, the kernel mechanism greatly improves the operation efficiency of the software and enhances the safeness on Main Machine System(MMS).
Key words:
filtering drive,
system call,
kernel
摘要: 应用Linux内核中的系统调用劫持技术和模块动态装载机制,研究与开发Linux下的文件过滤驱动。通过对文件标识的注入与识别,采用blowfish加密算法,设计和实现内核级的文件加/解密服务,并对软件的性能进行分析。结果表明,在内核级增添软件功能,可以提高软件的运行效率,而计算机主机系统的安全性在内核机制的安全保障下得以增强。
关键词:
过滤驱动,
系统调用,
内核
CLC Number:
DAI Hao; LIU Jia-yong; FANG Yong. Design and Implementation of Filtering Driver Based on File Encryption/Decryption Under Linux[J]. Computer Engineering, 2009, 35(9): 144-146.
戴 浩;刘嘉勇;方 勇. Linux文件加/解密过滤驱动的设计与实现[J]. 计算机工程, 2009, 35(9): 144-146.