Space文件系统安全可靠机制的研究与实现

Study on the Security mechanism of Space FS

首先通过对传统文件系统在安全可靠方面存在的问题进行研究分析,然后提出了一种基于Linux操作系统的文件系统安全可靠机制,即将操作系统安装在相对独立的物理空间中,与其他应用软件在物理空间上分隔开来,同时将安装操作系统的物理存储介质限定为只读方式,使所安装的操作系统在物理层上不可被改写,从而达到安全可靠;同时将用户空间在物理上与系统空间相互隔绝,当用户需要安装软件或保存各种文档时,可以透明地存储在该空间中。透明是指对用户来说,看到的文件系统视图或在操作方式上与传统操作系统完全相同,感觉不到底层系统空间和用户空间的存在。同时,详细描述了提出的SpaceFS文件系统的设计原理和实现细节,最后通过对其进行充分的测试数据,得出了在不损失系统性能的基础上保证了安全可靠的结论。

By analyzing the problem of security and reliability existing in the traditional file system , this paper firstly proposes a security mechanism based on linux OS which means that the OS will be installed into a relatively independent space and separated with other software. Meantime, the phisical storage medium is only -read to make the OS un - rewritten. Users can install the software and save documents pellucidly in the user＇s space which is isolated with system space in phisical space. For the users, the views or the operation of the document system is as same as the traditional OS and the rock - bottom system space and user＇s space can not be felt. The principle of design and its practical details of space FS system are described particularly. Finally, the test data prove that the system is safe and reliable without performance loss.