Protecting the integrity of an entire file system

First IEEE International Workshop on Information Assurance, 2003. IWIAS 2003. Proceedings. Pub Date : 2003-03-24 DOI:10.1109/IWIAS.2003.1192462

Fujita Tomonori, Ogawara Masanori

引用次数: 17

Abstract

This paper describes Arbre, a file system designed to run on untrusted remote storage connected to a server by networking fabrics. Arbre structures all blocks as a tree, and stores a pointer pointing to a block and a cryptographic hash of the block's contents together. This scheme allows Arbre to protect the integrity of the entire file system rather than the integrity of each block or each file individually. In addition, the root of a tree is not written to disk after until all modified data are written to disk, and modified data are always written to new locations on disk. With this scheme, in the event of a system failure, both meta-data and file-data are maintained in a consistent state, and there is no possibility that users see any inconsistency between contents of a block and its hash.

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

保护整个文件系统的完整性

本文描述了Arbre，这是一个文件系统，设计用于运行在通过网络结构连接到服务器的不受信任的远程存储上。Arbre将所有块结构为树，并存储指向块的指针和块内容的加密散列。该方案允许Arbre保护整个文件系统的完整性，而不是单独保护每个块或每个文件的完整性。此外，直到所有修改过的数据都被写入磁盘后，才会将树的根写入磁盘，并且修改过的数据总是被写入磁盘上的新位置。使用这种方案，在系统发生故障时，元数据和文件数据都保持在一致的状态，并且用户不可能看到块的内容与其散列之间的任何不一致。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

First IEEE International Workshop on Information Assurance, 2003. IWIAS 2003. Proceedings.

自引率

0.00%

发文量

期刊最新文献

IT design criteria for damage reduction Designing a framework for active worm detection on global networks Protecting the integrity of an entire file system Stochastic protocol modeling for anomaly based network intrusion detection A tamper-resistant framework for unambiguous detection of attacks in user space using process monitors