INFUSE: Invisible plausibly-deniable file system for NAND flash
INFUSE: Invisible plausibly-deniable file system for NAND flash
复制标题
INFUSE：NAND 闪存的隐形可否认文件系统
DOI：
--
复制
发表时间：
2020
影响因子：
--
通讯作者：
R. Sion
中科院分区：
文献类型：
--
作者：
Chen Chen;Anrin Chakraborti;R. Sion
在本地存储设备上存储的敏感数据，例如，笔记本电脑，平板电脑等对于对手足够强大，可以揭示使用加密键/密码时，仅需加密就可以隐藏其他机制。敏感的数据的存在。即使对手可以访问存储介质，也可以拒绝某些存储的数据。合理的可否认性系统声称没有隐藏敏感的数据。特定的系统被用于隐藏数据公共数据操作的数量级比现有的多SNAPSHOT弹性PD系统快，并且仅比标准的非PD基线慢15％，并且隐藏的数据操作的执行到现有系统。
Abstract Protecting sensitive data stored on local storage devices e.g., laptops, tablets etc. is essential for privacy. When adversaries are powerful enough to coerce users to reveal encryption keys/passwords, encryption alone becomes insufficient for data protection. Additional mechanisms are required to hide the very presence of sensitive data. Plausibly deniable storage systems (PDS) are designed to defend against such powerful adversaries. Plausible deniability allows a user to deny the existence of certain stored data even when an adversary has access to the storage medium. However, existing plausible deniability solutions leave users at the mercy of adversaries suspicious of their very use. Indeed, it may be difficult to justify the use of a plausible deniability system while claiming that no sensitive data is being hidden. This work introduces INFUSE, a plausibly-deniable file system that hides not only contents but also the evidence that a particular system is being used to hide data. INFUSE is “invisible” (identical layout with standard file system), provides redundancy, handles overwrites, survives data loss, and is secure in the presence of multi-snapshot adversaries. INFUSE is efficient. Public data operations are orders of magnitude faster than existing multi-snapshot resilient PD systems, and only 15% slower than a standard non-PD baseline, and hidden data operations perform comparably to existing systems.