MobiCeal: Towards Secure and Practical Plausibly Deniable Encryption on Mobile Devices
MobiCeal: Towards Secure and Practical Plausibly Deniable Encryption on Mobile Devices
复制标题
DOI：
10.1109/dsn.2018.00054
复制
发表时间：
2018-06
期刊：
影响因子：
--
通讯作者：
Bing Chang;Fengwei Zhang;Bo Chen-;Yingjiu Li;W. Zhu;Yangguang Tian;Zhan Wang;A. Ching
中科院分区：
文献类型：
--
作者：
Bing Chang;Fengwei Zhang;Bo Chen-;Yingjiu Li;W. Zhu;Yangguang Tian;Zhan Wang;A. Ching
我们介绍MobiCeal，这是首个用于移动设备的实用的合理可否认加密（PDE）系统，它能够抵御强大的强制多快照敌手，这些敌手可能在不同时间点检查用户移动设备的存储介质，并强迫用户解密数据。MobiCeal依靠“虚拟写入”来混淆由于隐藏数据的存在而导致的存储介质多个快照之间的差异。通过在块层中整合PDE，MobiCeal支持在移动设备上广泛部署任何基于块的文件系统。更重要的是，MobiCeal能抵御对现有PDE方案构成严重威胁的侧信道攻击。在一台使用安卓4.2.2系统的LG Nexus 4安卓手机上提供了MobiCeal的概念验证实现。结果表明，针对多快照敌手，MobiCeal的性能明显优于先前的PDE系统。
We introduce MobiCeal, the first practical Plausibly Deniable Encryption (PDE) system for mobile devices that can defend against strong coercive multi-snapshot adversaries, who may examine the storage medium of a user's mobile device at different points of time and force the user to decrypt data. MobiCeal relies on "dummy write" to obfuscate the differences between multiple snapshots of storage medium due to existence of hidden data. By incorporating PDE in block layer, MobiCeal supports a broad deployment of any block-based file systems on mobile devices. More importantly, MobiCeal is secure against side channel attacks which pose a serious threat to existing PDE schemes. A proof of concept implementation of MobiCeal is provided on an LG Nexus 4 Android phone using Android 4.2.2. It is shown that the performance of MobiCeal is significantly better than prior PDE systems against multi-snapshot adversaries.