基于散列存储和数据加密的数据安全保护研究

随着计算机科学技术和计算机网络的飞速发展,网络信息安全和个人数据的隐私保护越来越受到人们的重视。数据安全保护技术的研究目的在于保护人们的数据安全,通过数据存储以及数据加密等技术方法,实现增强数据的安全性、可靠性和可用性。同时,平衡数据安全保护所消耗的时间资源和空间资源。

GPU上典型存储器难散列函数的优化

由于占用存储器容量大和访存频繁的特点,抗ASIC攻击的存储器难散列函数有可能成为下一代口令散列函数的基础。针对存储器难散列函数的口令恢复问题,基于GPU体系结构的特点提出了性能优化方法:一方面分析和比较了交织存储和顺序存储2种方法的存储器带宽利用率,另一方面使用多个线程完成一个散列函数实例计算,并通过warp混洗指令提升线程间数据交换的性能。基于4线程顺序存储方法,在GPU上优化实现了Scrypt和Argon2d 2种存储器难散列函数,其中Scrypt的性能达到了hashcat软件实现性能的2.03倍。与此同时,还分析了存储器难散列函数中存储器容量增加对性能的影响,指出可执行的线程数减少是影响GPU上存储器难散列函数性能的主要原因。

Research on the Security of the United Storage Network Based on NAS

A multi-user view file system (MUVFS) and a security scheme are developed to improve the security of the united storage network (USN) that integrates a network attached storage (NAS) and a storage area network (SAN). The MUVFS offers a storage volume view for each authorized user who can access only the data in his own storage volume, the security scheme enables all users to encrypt and decrypt the data of their own storage view at client-side, and the USN server needs only to check the users’ identities and the data’s integrity. Experiments were performed to compare the sequential read, write and read/write rates of NFS+MUVFS+secure_module with those of NFS. The results indicate that the security of the USN is improved greatly with little influence on the system performance when the MUVFS and the security scheme are integrated into it.