基于闪存冗余块的文件隐藏技术

File hiding based on flash redundant blocks

为保护闪存型存储设备上的敏感文件,提出基于闪存冗余块的文件隐藏方法。该方法在分析Nand型flash特点及FAT32文件系统管理机制的基础上,将闪存中冗余的物理块有机组合以存储敏感文件,并采用与文件隐藏相似的方法恢复原始文件。实验结果表明,基于闪存冗余块的文件隐藏方法不占用闪存有效空间,具有隐蔽性高、鲁棒性强且隐藏容量大的特点,能有效抵抗软件取证攻击。

For protecting sensitive files stored on the flash-based storage devices, this paper presented a file hiding method based on the redundant blocks. Based on analyzing the characteristics of NAND-type flash and the file management mechanism of FAT32 file system, the method made the redundant physical blocks organic combination to store sensitive files, and restored the original files by similar method to hiding. Experimental results show that the file hiding method based on the redundant blocks does not take up the flash effective space, has the characteristics of high concealment, strong robustness, considerable hiding capacity, and can effectively resist the evidence-taken attack of software.