Linux file protection system and method

Abstract

The invention discloses a Linux file protection system and a method. System call of Linux core file system is substituted, a HOOK function is added between a core system call interface and a file system, so as to intercept access of process to the file system, and process verification and access control are carried out; the way that access control based on process verification is combined with a transparent encryption file system is adopted, so that the protected file can be dynamically protected when system is in operation, and a file protection core module closes an encryption disk where the transparent encryption file system is located when the system is shut down, so that the protected file is statically protected in time.

Description

technical field [0001] The invention relates to information system and file safety protection technology, in particular to a Linux file protection system and method. Background technique [0002] In recent years, with the popularity of personal computers and office automation, protecting sensitive files from leakage has become a hot issue that people pay attention to. In addition to directly stealing storage information, system intruders can also steal file data through network attacks; moreover, due to the need for sharing, sensitive data will be accessed by multiple people, which also increases the possibility of data leakage. [0003] At present, file security protection can be roughly divided into three levels: (1) Identity identification: judging whether it is a permitted user, that is, verifying the user's identity based on a password; (2) Access control: autonomous access based on user and group authority allocation Control and mandatory access control based on the p...

AI Technical Summary

Problems solved by technology

However, none of these methods can completely prevent illegal access to the plaintext content of sensitive files in the following ways; for example, process counterfeiting can penetrate mandatory access control, and super users can easily obtain the plaintext of files in the transparently encrypted file system. Manual decryption cannot Prevent other illegal intrusion users from viewing the plaintext content after decryption

Images