一种基于区块链的云镜像完整性监测方法

A blockchain based integrity monitoring method for cloud images

针对云环境中镜像文件遭到篡改攻击这一问题,结合区块链技术提出了一种云镜像完整性监测方法.首先,每隔一段时间计算所有云镜像的哈希信息,并将哈希信息记录在Merkel树数据结构中;然后,将这一Merkel树打包成为区块并构成区块链;最后,周期性地对当前区块中Merkel树根节点的验证以实现对全部云镜像的完整性验证,并在发现篡改后定位被篡改的镜像文件.经过实验验证,所提出的方法相比之前的方法有3%的效率提升,同时经过理论分析,方法具有安全性、可追溯性以及可扩展性等特点.

Aiming at the problem of the image files being tampered with in cloud environment,an integrity monitoring method based on blockchain technology for cloud images is proposed.Firstly,hash values of all cloud images are calculated periodically and recorded in a Merkel Tree data structure.Next,the Merkel Tree is packed in a block and then a blockchain would be constructed.And finally,the root node of Merkel Tree in the current block is verified periodically to implement the overall verification for the integrity of all cloud images,and the tampered image file would be located when tampering attack is detected.According to experiments,the method proposed in this paper outperforms former methods for about 3%,and the theoretical analysis indicate that the method in this paper is secure,traceable,and expandable.