本文選題：移動(dòng)存儲(chǔ) + 操作監(jiān)控�。� 參考：《南京理工大學(xué)》2013年碩士論文

【摘要】：移動(dòng)存儲(chǔ)介質(zhì)作為數(shù)據(jù)和信息交換的重要載體,在帶給我們便捷的同時(shí)也帶來(lái)了安全隱患。此類(lèi)設(shè)備中的數(shù)據(jù)很容易因?yàn)樵O(shè)備丟失,以及用戶(hù)非授權(quán)的惡意行為而導(dǎo)致信息泄漏或丟失,進(jìn)而帶來(lái)重大的損失。因此,保護(hù)移動(dòng)存儲(chǔ)設(shè)備的數(shù)據(jù)安全非常重要,已有技術(shù)主要著眼于保護(hù)存儲(chǔ)數(shù)據(jù)的安全,而對(duì)用戶(hù)的操作監(jiān)控尤其是離線(xiàn)的操作監(jiān)控探討的較少。據(jù)此,本論文設(shè)計(jì)了具有操作監(jiān)控的可移動(dòng)存儲(chǔ)設(shè)備軟件系統(tǒng),主要的研究工作包括： (1)對(duì)具有操作監(jiān)控的(離線(xiàn)的)安全存儲(chǔ)設(shè)備的總體架構(gòu)和功能要求進(jìn)行了設(shè)計(jì),并對(duì)其中涉及的一些密碼基本概念,如AES、HMAC、LRW和Salt等進(jìn)行了介紹,對(duì)(?)Windows系統(tǒng)的過(guò)濾驅(qū)動(dòng)技術(shù)進(jìn)行了簡(jiǎn)介； (2)針對(duì)密盤(pán)化模塊的設(shè)計(jì)與開(kāi)發(fā),介紹了整體工作流程、基于鼠標(biāo)位置的隨機(jī)數(shù)生成方法,以及可實(shí)現(xiàn)離線(xiàn)的用戶(hù)操作監(jiān)控并滿(mǎn)足透明加解密需要的密鑰設(shè)計(jì),并對(duì)密盤(pán)的數(shù)據(jù)格式和相關(guān)控制頭的安全存儲(chǔ)技術(shù)進(jìn)行了分析； (3)針對(duì)掛載模塊的設(shè)計(jì)與開(kāi)發(fā),介紹了用戶(hù)操作口令的驗(yàn)證過(guò)程,虛擬磁盤(pán)的開(kāi)發(fā)和掛載,以及過(guò)濾驅(qū)動(dòng)的綁定與過(guò)濾函數(shù)的功能實(shí)現(xiàn),并對(duì)磁盤(pán)使用的時(shí)間控制技術(shù)進(jìn)行了介紹； (4)針對(duì)監(jiān)控模塊的設(shè)計(jì)與開(kāi)發(fā),介紹了管理員口令的驗(yàn)證過(guò)程,用戶(hù)操作記錄的數(shù)據(jù)結(jié)構(gòu),以及管理員對(duì)用戶(hù)操作記錄的讀取和操作記錄的導(dǎo)出功能。 論文最后對(duì)全文進(jìn)行了總結(jié),提出了當(dāng)前軟件存在的不足之處,并對(duì)下一步的工作進(jìn)行了展望。
[Abstract]:As an important carrier of data and information exchange, mobile storage media not only brings us convenience, but also brings security risks. The data in this kind of equipment is easy to be leaked or lost because of the loss of the device and the unauthorized malicious behavior of the user. Therefore, it is very important to protect the data security of mobile storage devices. The existing technologies mainly focus on the security of stored data, while the operational monitoring of users, especially off-line operation monitoring, is less discussed. Therefore, a removable storage device software system with operation monitoring is designed in this paper. The main research work includes: (1) the general architecture and functional requirements of the (offline) secure storage devices with operational monitoring are designed, and some basic cryptographic concepts involved in them are also discussed. For example, AESHMACU LRW and Salt are introduced, and the filter driver technology of Windows system is introduced. (2) aiming at the design and development of compact disk module, the whole work flow is introduced, and the method of generating random number based on mouse position is introduced. And the key design which can realize the off-line user operation monitoring and satisfy the need of transparent encryption and decryption, and analyzes the data format of the secret disk and the security storage technology of the relative control head. (3) aiming at the design and development of the mount module, This paper introduces the verification process of user operation password, the development and mounting of virtual disk, the binding of filter driver and the function of filter function, and introduces the time control technology of disk usage. (4) aiming at the design and development of the monitor module, this paper introduces the verification process of the administrator password, the data structure of the user operation record, and the function of the administrator reading the user operation record and exporting the operation record. Finally, the paper summarizes the whole paper, points out the shortcomings of the current software, and looks forward to the next work.
【學(xué)位授予單位】：南京理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2013
【分類(lèi)號(hào)】：TN929.5;TP333

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 郎銳 ,張若蘇 ,徐金云;VC++編程實(shí)現(xiàn)在Windows2000下對(duì)磁盤(pán)扇區(qū)數(shù)據(jù)的直接讀寫(xiě)[J];電腦編程技巧與維護(hù);2004年12期

2 吳世忠;;信息安全風(fēng)險(xiǎn)管理的動(dòng)態(tài)與趨勢(shì)[J];計(jì)算機(jī)安全;2007年04期

3 吳偉理;孫杭;;透明加密——一種新的數(shù)據(jù)加密方式[J];江西測(cè)繪;2009年03期

4 何明星,范平志;新一代私鑰加密標(biāo)準(zhǔn)AES進(jìn)展與評(píng)述[J];計(jì)算機(jī)應(yīng)用研究;2001年10期

5 何明星,林昊;AES算法原理及其實(shí)現(xiàn)[J];計(jì)算機(jī)應(yīng)用研究;2002年12期

6 汪進(jìn)奇;;基于虛擬磁盤(pán)的數(shù)據(jù)保護(hù)管理系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[J];寧夏機(jī)械;2007年04期

7 王紅霞,陸塞群;基于HMAC-SHA1算法的消息認(rèn)證機(jī)制[J];山西師范大學(xué)學(xué)報(bào)(自然科學(xué)版);2005年01期

8 李清俊;甘萌;;基于虛擬磁盤(pán)的文件加密方法[J];計(jì)算機(jī)工程與設(shè)計(jì);2006年15期

9 楊永輝;樊金生;郝U，

本文編號(hào)：2099619