Attack Experiment and Analysis for SSD Security Risks

LIU Zheng-lin; CHEN Xiao-qiang; LIU Wen-chao; ZHENG Yi-kai; ZOU Xue-cheng

Chinese

您当前的位置：

首页 >

文章列表页 >

Attack Experiment and Analysis for SSD Security Risks

更新时间：2026-09-04

- Attack Experiment and Analysis for SSD Security Risks
- Vol. 35, Issue 12, Pages: 16-20(2018)
- 作者机构：
  
  华中科技大学光学与电子信息学院,湖北,武汉,430074
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2018
- 稿件说明：
移动端阅览
刘政林, 陈小强, 刘文超, 郑怡恺, 邹雪城. 固态硬盘安全风险分析与攻击实验[J]. 微电子学与计算机, 2018, 35(12): 16-20, 26.

LIU Zheng-lin, CHEN Xiao-qiang, LIU Wen-chao, et al. Attack Experiment and Analysis for SSD Security Risks[J]. 2018, 35(12): 16-20.
刘政林, 陈小强, 刘文超, 郑怡恺, 邹雪城. 固态硬盘安全风险分析与攻击实验[J]. 微电子学与计算机, 2018, 35(12): 16-20, 26. DOI：

LIU Zheng-lin, CHEN Xiao-qiang, LIU Wen-chao, et al. Attack Experiment and Analysis for SSD Security Risks[J]. 2018, 35(12): 16-20. DOI：

摘要

为了研究固态硬盘由于闪存转换层植入恶意代码引起的安全风险

分类分析了五种安全风险

包括:数据盗取、数据销毁、拒绝服务、攻击主机和性能下降.同时研究了这类恶意代码的作用机理和可能的形式

根据触发条件和攻击负载进行了分类.通过编写恶意代码并植入到固态硬盘中

在Windows平台上成功实施了攻击实验

实现了固态硬盘拒绝服务和数据销毁.实验结果表明

这类固态硬盘安全风险确实存在

向固态硬盘中植入恶意代码的攻击手段十分隐蔽

用户难以发觉.最后

针对这类固态硬盘安全风险

提出了一种简单有效的防御对策。

Abstract

In order to analyze solid state drive (SSD) security risks caused by malicious code in the flash translation layer (FTL)

we classify them into five kinds of risks

including data stealing

data destruction

denial of service

attack host and performance reduction. We also analyze this kind of malicious code about its action mechanism and possible forms

and classify malicious code based on its trigger and attack load. We design malicious code and inject it into SSD

implement attack experiment on Windows platform successfully.Attacks result in SSD denial of service and data destruction.Experiment results show that this kind of SSD security risks is real problem and injecting malicious code into SSD can be very imperceptible

SSD users are unable to aware of it. At last we propose a simple and effective countermeasure for this kind of SSD security risks.

关键词

Keywords

references

Zhou J, Chen X C, Wang J, et al. Leveraging semantic links for high efficiency page-level FTL design[C]//2016 IEEE 36th International Conference on Distributed Computing Systems Workshops.Nara, Japan, 2016: 84-89.

Cui X T, Zou M H, Shi L, et al.Towards trustable storage using SSDs with proprietary FTL[C]//2015 Design, Automation % Test in Europe Conference % Exhibition (DATE).Grenoble, France, 2015: 1213-1216.

Seo B K, Maeng S, Lee J, et al.DRACO:a deduplicating FTL for tangible extra capacity[J].IEEE Computer Architecture Letters, 2015, 14(2):123-126. DOI: 123

Hsieh J W, Lin H Y, Yang D L.Multi-channel architecture-based FTL for reliable and high-performance SSD[J].IEEE Transactions on Computers, 2014, 63(12):3079-3091. DOI: 3079

韩煜, 刘政林.一种高吞吐率、低成本的固态硬盘数据安全方案[J].信息与电子工程, 2011, 9(5):638-641. DOI: 638

田洪亮, 张勇, 许信辉, 等.可信固态硬盘:大数据安全的新基础[J].计算机学报, 2016, 39(1):154-168. DOI: 154

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

A high-efficiency charge pump for ultra-low voltage boost systems

Monte carlo analysis of V-layout trench SiC neutron detector

A feature-oriented context understanding and slice analysis network for tuberculosis detection

Implementation and verification of a dual-chain power gating strategy for low power design

Lightweight countermeasures against Spectre attacks on the branch prediction unit

Related Author

No data

Related Institution

No data

AI问答

Postal code：100079
Tel：（010）53879206 Email：tmw@bjxintong.com.cn
Technical support is provided by Beijing Founder electronics co., LTD 京ICP备09082226号-64 京公网安备11010602201714号
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰