Research On The Security Protection Of Data Stored On Hard Disk

With more and more important data are stored on hard disk, the protection of these data has become a hot issue. Various security threats such as malicious data modification, data leak and hard disk stolen, etc., will all bring inestimable loss to the organizations that hold these critical data,such as army, government and enterprises.The hard disk data security protection techniques were explored from the angle of confidentiality protection and integrity protection in this thesis. On the confidentiality protection side, a fast hard disk cipher FastDiskEnc was devised and its performance was about 20% faster than the cipher adopted by Windows Vista Bitlocker. Besides that, a secure stackable file system based on the new cipher was implemented under Linux 2.4. On the integrity protection side, an incremental hash function EHASH was devised and the experiment results showed that when only little modifications were made on a large amount of data, it is much more efficient than the traditional hash algorithm SHA1. Besides, a hard disk data integrity protection solution, which was targeted at the scenario of backup hard disk data integrity protection, was proposed based on the incremental authentication technique. The solution was able to protect against the replay attack, which was a difficult issue in hard disk data integrity protection.