华中科技大学 光学与电子信息学院,湖北,武汉,430074
纸质出版:2018
移动端阅览
刘政林, 陈小强, 刘文超, 郑怡恺, 邹雪城. 固态硬盘安全风险分析与攻击实验[J]. 微电子学与计算机, 2018, 35(12): 16-20, 26.
LIU Zheng-lin, CHEN Xiao-qiang, LIU Wen-chao, et al. Attack Experiment and Analysis for SSD Security Risks[J]. 2018, 35(12): 16-20.
为了研究固态硬盘由于闪存转换层植入恶意代码引起的安全风险
分类分析了五种安全风险
包括:数据盗取、数据销毁、拒绝服务、攻击主机和性能下降.同时研究了这类恶意代码的作用机理和可能的形式
根据触发条件和攻击负载进行了分类.通过编写恶意代码并植入到固态硬盘中
在Windows平台上成功实施了攻击实验
实现了固态硬盘拒绝服务和数据销毁.实验结果表明
这类固态硬盘安全风险确实存在
向固态硬盘中植入恶意代码的攻击手段十分隐蔽
用户难以发觉.最后
针对这类固态硬盘安全风险
提出了一种简单有效的防御对策。
In order to analyze solid state drive (SSD) security risks caused by malicious code in the flash translation layer (FTL)
we classify them into five kinds of risks
including data stealing
data destruction
denial of service
attack host and performance reduction. We also analyze this kind of malicious code about its action mechanism and possible forms
and classify malicious code based on its trigger and attack load. We design malicious code and inject it into SSD
implement attack experiment on Windows platform successfully.Attacks result in SSD denial of service and data destruction.Experiment results show that this kind of SSD security risks is real problem and injecting malicious code into SSD can be very imperceptible
SSD users are unable to aware of it. At last we propose a simple and effective countermeasure for this kind of SSD security risks.
Zhou J, Chen X C, Wang J, et al. Leveraging semantic links for high efficiency page-level FTL design[C]//2016 IEEE 36th International Conference on Distributed Computing Systems Workshops.Nara, Japan, 2016: 84-89.
Cui X T, Zou M H, Shi L, et al.Towards trustable storage using SSDs with proprietary FTL[C]//2015 Design, Automation % Test in Europe Conference % Exhibition (DATE).Grenoble, France, 2015: 1213-1216.
Seo B K, Maeng S, Lee J, et al.DRACO:a deduplicating FTL for tangible extra capacity[J].IEEE Computer Architecture Letters, 2015, 14(2):123-126. DOI: 123
Hsieh J W, Lin H Y, Yang D L.Multi-channel architecture-based FTL for reliable and high-performance SSD[J].IEEE Transactions on Computers, 2014, 63(12):3079-3091. DOI: 3079
韩煜, 刘政林.一种高吞吐率、低成本的固态硬盘数据安全方案[J].信息与电子工程, 2011, 9(5):638-641. DOI: 638
田洪亮, 张勇, 许信辉, 等.可信固态硬盘:大数据安全的新基础[J].计算机学报, 2016, 39(1):154-168. DOI: 154
0
浏览量
12
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010602201714号