A Cross-layer Plausibly Deniable Encryption System for Mobile Devices
A Cross-layer Plausibly Deniable Encryption System for Mobile Devices
复制标题
DOI：
10.1007/978-3-031-25538-0_9
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Niusen Chen;Bo Chen;Weisong Shi
中科院分区：
文献类型：
--
作者：
Niusen Chen;Bo Chen;Weisong Shi
移动计算设备已被用于存储和处理敏感甚至关键任务数据。为了保护移动设备中的敏感数据，加密通常被纳入主要的移动操作系统。然而，传统的加密不能抵御强制攻击，在这种攻击中，受害者被迫披露用于解密敏感数据的密钥。为了对抗强制攻击者，引入了可信可否认加密（PDE），允许受害者否认敏感数据的存在。然而，现有的针对移动设备设计的PDE系统要么不安全（即存在可否认性问题），要么不切实际（即无法与主流移动设备的存储架构兼容，不是轻量级的，或者不是面向用户的）。本文设计了第一个安全、兼容主流移动设备存储架构、轻量级、面向用户的跨层移动PDE系统CrossPDE。我们的关键思想是拦截移动存储系统的主要层，包括文件系统层（防止隐藏的敏感数据丢失并允许用户使用隐藏模式），块层（照顾昂贵的加密和解密）和闪存转换层（消除隐藏的敏感数据造成的痕迹）。对我们真实世界原型的实验评估表明，CrossPDE可以在吞吐量适度降低的情况下确保可否认性。
Mobile computing devices have been used to store and process sensitive or even mission critical data. To protect sensitive data in mobile devices, encryption is usually incorporated into major mobile operating systems. However, traditional encryption can not defend against coercive attacks in which victims are forced to disclose the key used to decrypt the sensitive data. To combat the coercive attackers, plausibly deniable encryption (PDE) has been introduced which can allow the victims to deny the existence of the sensitive data. However, the existing PDE systems designed for mobile devices are either insecure (i.e., suffering from deniability compromises) or impractical (i.e., unable to be compatible with the storage architecture of mainstream mobile devices, not lightweight, or not user-oriented).In this work, we design CrossPDE, the first cross-layer mobile PDE system which is secure, being compatible with the storage architecture of mainstream mobile devices, lightweight as well as user-oriented. Our key idea is to intercept major layers of a mobile storage system, including the file system layer (preventing loss of hidden sensitive data and enabling users to use the hidden mode), the block layer (taking care of expensive encryption and decryption), and the flash translation layer (eliminating traces caused by the hidden sensitive data). Experimental evaluation on our real-world prototype shows that CrossPDE can ensure deniability with a modest decrease in throughput.