安全增强型虚拟磁盘加密系统技术

应用文件系统过滤驱动技术,结合审计、防U盘扩散、防缓存泄漏方法,对现阶段流行的虚拟磁盘加密软件的透明加解密方案进行改进,在其虚拟驱动层上增加了旨在提升整体安全性能的文件系统过滤驱动层(下面称之为安全层).针对开源的truecrypt进行测试,结果表明,在Windows各版本操作系统下,对虚拟磁盘加密软件上加入安全层以后,解决了U盘扩散、虚拟磁盘卸载之后缓存泄漏等安全问题,实现了对用户操作的审计监控,能有效增强虚拟磁盘加密软件的安全性能.

Security enhanced virtual disk encryption system and technology

The authors studied and improved the transparent encryption and decryption program of virtual disk encryption software, using technology of file system filter driver and methods of auditing, preventing U disk proliferation and cache leakage. A file system filter driver layer was attached to the virtual driver layer in the program of virtual disk encryption. Test results in Truecrypt under various versions of Windows operation system show that problems of U disk proliferation and cache leakage can be avoided when the security layer is attached onto the virtual disk encryption software, and users' operations can also be monitored and audited. The results indicate that the security layer can effectively enhance security performance of the virtual disk encryption software.