Analysis of Implementations to Secure Git for Use as an Encrypted Distributed Version Control System
Analysis of Implementations to Secure Git for Use as an Encrypted Distributed Version Control System
复制标题
DOI：
10.1109/hicss.2015.625
复制
发表时间：
2015-01
期刊：
影响因子：
--
通讯作者：
Russell Shirey;K. Hopkinson;K. E. Stewart;D. Hodson;B. Borghetti
中科院分区：
文献类型：
--
作者：
Russell Shirey;K. Hopkinson;K. E. Stewart;D. Hodson;B. Borghetti
本文分析了两种现有的保护Git存储库的方法，Git-encrypt和Git-crypt，通过比较它们相对于默认Git实现的性能。当存储库包含敏感或受限数据时，保护Git存储库是必要的。这允许存储库存储在任何第三方云提供商上，并确保即使存储库数据泄露，它也将保持安全。对当前Git加密方法的分析是通过一系列测试完成的，这些测试检查了为增加安全性而做出的性能权衡。使用三个不同大小的Git存储库，从大小、时间和功能方面分析了这种性能。这三个实验包括初始化和填充存储库，通过垃圾收集压缩存储库，以及修改文件并将其提交到存储库。结果表明，Git以时间和存储库大小为代价维护了这两种加密实现的功能。时间的增加被发现是一个因素，从14到38倍的原始时间。在编辑文件的多次提交中，大小的增加与文件的工作集成线性比例。
This paper analyzes two existing methods for securing Git repositories, Git-encrypt and Git-crypt, by comparing their performance relative to the default Git implementation. Securing a Git repository is necessary when the repository contains sensitive or restricted data. This allows the repository to be stored on any third-party cloud provider with assurance that even if the repository data is leaked, it will remain secure. The analysis of current Git encryption methods is done through a series of tests that examines the performance trade-offs made for added security. This performance is analyzed in terms of size, time, and functionality using three different Git repositories of varying size. The three experiments include initializing and populating a repository, compressing a repository through garbage collection, and modifying then committing files to the repository. The results show that Git maintains functionality with each of these two encryption implementations at the cost of time and repository size. The time increase is found to be a factor ranging from 14 to 38 times the original time. The size increase over multiple commits of edited files is found to increase linearly proportional to the working set of files.