Solid state hard disk data storage security testing method and device

Abstract

The present invention relates to the technical field of solid-state hard disks, and provides a method and device for testing the data storage security of a solid-state hard disk, the method comprising: generating original test data of a solid-state hard disk in a preset test environment; performing a simulated attack on the solid-state hard disk according to a preset intensity level and a preset duration, and obtaining a simulated attack data block of the original test data after the simulated attack ends; restoring the simulated attack data block based on verification data, and obtaining a primary data recovery rate, a secondary data recovery rate, and a data error rate of the simulated attack data block during the recovery process; calculating a data storage security score of the solid-state hard disk according to the primary data recovery rate, the secondary data recovery rate, and the data error rate; and determining a data storage security level of the solid-state hard disk according to the data storage security score. The present invention realizes a comprehensive, systematic, and in-depth evaluation of the data storage security of solid-state hard disks under various complex environments and security threats.

Description

Technical Field

[0001] The present invention relates to the technical field of solid state hard disks, and in particular to a solid state hard disk data storage security testing method and device thereof. Background Art

[0002] As a new type of storage device, solid-state drives (SSDs) have been widely used in the field of computer storage due to their advantages such as fast read and write speeds, strong shock resistance, and low power consumption. As the amount of data stored in SSDs increases and the importance of data continues to increase, testing their data storage security becomes critical.

[0003] At present, common solid-state drive data storage test methods mainly focus on data read and write speed, durability and other aspects of the test. For example, by writing a large amount of random data to the solid-state drive and measuring the time to write and read these data to evaluate the read and write speed; using specific test software to repeatedly write and erase the solid-state drive to test its durability. However, on the one hand, solid-state drives may face various complex environmental factors and unexpected situations, such as sudden power outages, electromagnetic interference, malicious attacks, etc. These factors may cause data loss, damage or tampering, and traditional test methods are difficult to effectively evaluate the data storage reliability of solid-state drives under these security threats. On the other hand, focusing only on read and write speed and durability cannot fully reflect the data storage status of solid-state drives under the influence of multi-dimensional security factors. It is difficult to accurately judge whether the data storage security of solid-state drives at different security risk levels meets actual needs, and it is impossible to provide users with accurate security performance references. Summary of the invention

[0004] The present invention provides a solid state hard disk data storage security testing method and device thereof, which are used to comprehensively, systematically and deeply evaluate the data storage security of solid state hard disks under various complex environments and security threats, so as to fill the deficiencies of existing testing methods and meet the growing data security needs.

[0005] In a first aspect, the present invention provides a method for testing the security of data storage in a solid state drive, comprising:

[0006] Generating original test data of the solid state drive in a preset test environment; the original test data includes an original data block and its corresponding check data;

[0007] Performing a simulated attack on the solid-state drive according to a preset intensity level and a preset duration, and obtaining a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attack includes a sudden power failure attack, an electromagnetic interference attack, and a malicious data tampering attack;

[0008] Recovering the simulated attack data block based on the verification data, and obtaining a primary data recovery rate, a secondary data recovery rate, and a data error rate of the simulated attack data block during the recovery process;

[0009] Calculating a data storage security score of the solid state drive according to the primary data recovery rate, the secondary data recovery rate, and the data error rate;

[0010] The data storage security level of the solid state drive is determined according to the data storage security score.

[0011] The solid state drive data storage security testing method provided by an embodiment of the present invention generates verification data of the original data block, including:

[0012] Acquire sensitive data and common data in the preset test environment;

[0013] After the sensitive data and the common data are mixed in a preset ratio, the mixed data are segmented according to a preset data block size to generate the original data block; the original data block includes multiple data elements, and the original data block can be represented as , Represents the original data block The data elements;

[0014] Based on a preset encryption strategy function, each data element in the original data block is encrypted Encryption is performed to obtain verification data of the original data block.

[0015] According to the solid state drive data storage security testing method provided by an embodiment of the present invention, the verification data of the original data block can be expressed as:

[0016] ;

[0017] Preset encryption policy function The formula can be expressed as:

[0018] ;

[0019] ;

[0020] in, Represents the check data of the original data block, Represents the encrypted data of each data element in the original data block, Represents the position weight factor of each data element in the original data block, represents the base of the exponential function, Represents the position index of each data element in the original data block.

[0021] According to the solid state drive data storage security testing method provided by the embodiment of the present invention, the data block after the simulated attack can be expressed as The specific process of recovering the data block after the simulated attack based on the verification data includes:

[0022] For the first data recovery of the data block after the simulated attack, the first data recovery of the data block Each restored data element in It can be expressed as:

[0023] ;

[0024] ;

[0025] For the second data recovery of the data block after the simulated attack, the data block after the second recovery Each restored data element in It can be expressed as:

[0026] ;

[0027] in, Represents the preset encryption strategy function The inverse function of Represents an auxiliary function used to measure the difference between data elements and the recovery tendency.

[0028] According to the solid state disk data storage security testing method provided by an embodiment of the present invention, the consistency verification of the original data block and the restored data block after the simulated attack includes:

[0029] Performing consistency verification on the first data recovery of the data block after the simulated attack;

[0030] If the consistency measurement value between the original data block and the first recovered data block is greater than or equal to a preset measurement threshold, it is determined that the data in the simulated attack data block is successfully recovered;

[0031] If the consistency measurement value between the original data block and the first restored data block is less than the preset measurement threshold, it is determined that the data in the simulated attack data block is not successfully restored, and consistency verification is performed on the second data recovery of the simulated attack data block;

[0032] If the consistency measurement value between the original data block and the second restored data block is greater than or equal to the preset measurement threshold, it is determined that the data in the simulated attack data block is successfully restored;

[0033] If the consistency measurement value between the original data block and the second restored data block is less than the preset measurement threshold, a data recovery error in the simulated attack data block is determined.

[0034] According to the solid state drive data storage security testing method provided by an embodiment of the present invention, the formula for verifying the consistency of the data block after the first recovery can be expressed as:

[0035] ;

[0036] in, Indicates the consistency measure of the original data block and the data block after the first recovery.

[0037] According to the solid state drive data storage security testing method provided by an embodiment of the present invention, determining the data storage security level of the solid state drive according to the data storage security score includes:

[0038] If the data storage security score is greater than or equal to a first preset security threshold, determining that the data storage security level of the solid state drive is the first level;

[0039] If the data storage security score is greater than or equal to a second preset security threshold and less than the first preset security threshold, determining that the data storage security level of the solid state drive is the second level;

[0040] If the data storage security score is less than the second preset security threshold, determining that the data storage security level of the solid state drive is the third level;

[0041] The calculation formula of the data storage security score is as follows:

[0042] ;

[0043] in, Indicates the data storage security score, Indicates the one-time data recovery rate, represents the secondary data recovery rate, Indicates the data error rate.

[0044] In a second aspect, the present invention further provides a solid state hard disk data storage security testing device, comprising:

[0045] A data generation module, used to generate original test data of the solid state drive in a preset test environment; the original test data includes an original data block and its corresponding check data;

[0046] A simulated attack module, used to perform a simulated attack on the solid-state hard disk according to a preset intensity level and a preset duration, and obtain a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attack includes a sudden power failure attack, an electromagnetic interference attack, and a malicious data tampering attack;

[0047] A data recovery module, used to recover the data block after the simulated attack based on the verification data, and obtain a primary data recovery rate, a secondary data recovery rate and a data error rate of the data block after the simulated attack during the recovery process;

[0048] A score calculation module, used to calculate the data storage security score of the solid state drive according to the primary data recovery rate, the secondary data recovery rate and the data error rate;

[0049] A security level evaluation module is used to determine the data storage security level of the solid state drive according to the data storage security score.

[0050] In a third aspect, the present invention further provides an electronic device, comprising: a memory for storing a computer software program; a processor for reading and executing the computer software program, thereby implementing any of the above-mentioned methods for testing the security of solid-state hard disk data storage.

[0051] In a fourth aspect, the present invention further provides a non-transitory computer-readable storage medium, wherein the storage medium stores a computer software program, and when the computer software program is executed by a processor, the solid-state hard disk data storage security testing method as described in any one of the above is implemented.

[0052] In a fifth aspect, the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements any of the solid-state hard disk data storage security testing methods described above.

[0053] The solid state drive data storage security test method provided by the embodiment of the present invention, on the one hand, can comprehensively and truly evaluate the data storage security of the solid state drive in a complex security environment by simulating sudden power failure, electromagnetic interference attack and malicious data tampering attack, and can more accurately discover the potential problems that may exist in the data security of the solid state drive. Secondly, by using the primary data recovery rate, secondary data recovery rate and data error rate as evaluation indicators, a quantitative evaluation of the data storage security of the solid state drive is achieved, overcoming the defect that the existing test lacks a comprehensive security evaluation indicator system. On the other hand, the generation and use of verification data enhances the reliability and accuracy of data recovery, and in the face of data damage, can effectively improve the success rate of data recovery, reduce the risk of data loss or error, and ensure the security of the solid state drive data storage. Therefore, the embodiment of the present invention realizes a comprehensive, systematic and in-depth evaluation of the data storage security of the solid state drive under various complex environments and security threats, fills the shortcomings of the existing test method and meets the growing data security needs. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 is a flow chart of a solid state hard disk data storage security testing method provided by an embodiment of the present invention;

[0055] Figure 2 is a structural diagram of a solid state hard disk data storage security testing device provided by an embodiment of the present invention;

[0056] Figure 3 An embodiment diagram of an electronic device provided by an embodiment of the present invention;

[0057] Figure 4 An embodiment diagram of a computer-readable storage medium provided for an embodiment of the present invention. DETAILED DESCRIPTION

[0058] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0059] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0060] In the description of the present invention, the term "for example" is used to mean "used as an example, illustration or explanation". Any embodiment described as "for example" in the present invention is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is given to enable any technician in the field to implement and use the present invention. In the following description, details are listed for the purpose of explanation. It should be understood that a person of ordinary skill in the art can recognize that the present invention can be implemented without using these specific details. In other examples, well-known structures and processes will not be elaborated in detail to avoid obscuring the description of the present invention with unnecessary details. Therefore, the present invention is not intended to be limited to the embodiments shown, but is consistent with the widest scope consistent with the principles and features disclosed in the present invention.

[0061] See also Figure 1 As shown, Figure 1 : is a flow chart of a solid state drive data storage security test method provided by the present invention. The execution subject of the solid state drive data storage security test method in the embodiment of the present invention is a security test device. Therefore, the solid state drive data storage security test method includes:

[0062] Step 10: Generate original test data of the solid state drive in a preset test environment.

[0063] Among them, the preset test environment in the embodiment of the present invention at least includes a software environment and a hardware environment, the hardware environment such as a test platform and heat dissipation conditions, and the software environment such as an operating system and test software.

[0064] For the test platform, a stable computer hardware platform is required to connect the SSD. The platform should have sufficient interfaces (such as SATA interface, M.2 interface, etc., depending on the interface type of the SSD), and its motherboard, power supply and other components can stably provide power and data transmission support for the SSD. For example, a motherboard with a high-performance chipset is used to ensure that data loss or errors will not occur during data transmission due to the performance bottleneck of the motherboard.

[0065] For heat dissipation conditions, in order to prevent the SSD from overheating and causing performance degradation or data anomalies during the test, a suitable heat dissipation environment needs to be set. You can use a dedicated radiator or control the temperature of the test environment within a certain range. For example, keep the temperature of the test environment between 20-25 degrees Celsius and ensure good air circulation around the SSD, just like in a professional data center room, the normal operating temperature of the equipment is maintained through the ventilation design of the air conditioning system and the server cabinet.

[0066] For the operating system, select a suitable operating system to run the test software, such as Windows, Linux, etc. Different operating systems have different ways of managing file systems and storage devices, which will affect the performance test results of the SSD. Taking Linux as an example, it provides more sophisticated storage device management tools, such as "fdisk" for partitioning, "mkfs" for creating file systems, etc., and can optimize access to the SSD by modifying the system kernel parameters.

[0067] For testing software, use specialized storage device testing software that can generate raw test data and perform various test operations on SSDs. For example, Crystal Disk Mark software can be used to test the read and write speed of SSDs. In this preset test environment, it can be customized to generate raw data blocks containing a mixture of sensitive data and ordinary data as required, and can simulate data recovery tests after attacks.

[0068] Therefore, the security testing device generates original test data of the solid state drive in a preset test environment, wherein the original test data includes original data blocks and corresponding verification data.

[0069] In an embodiment of the present invention, the original data block is obtained by segmenting based on a mixture of sensitive data and ordinary data. The sensitive data may be data containing user privacy information (such as passwords, ID numbers, etc.), and the ordinary data may be general text, images, audio, and other non-sensitive information data.

[0070] In one embodiment, generating verification data of an original data block includes:

[0071] Step 101, obtaining sensitive data and common data in a preset test environment;

[0072] Step 102, after the sensitive data and the common data are mixed according to a preset ratio, the mixed data is segmented according to a preset data block size to generate original data blocks;

[0073] Step 103: Encrypt each data element in the original data block based on the preset encryption strategy function. Encryption is performed to obtain the verification data of the original data block.

[0074] Specifically, the security testing device obtains sensitive data and ordinary data in a preset test environment, and mixes the sensitive data and ordinary data in a preset ratio, wherein the preset ratio is set according to actual conditions, such as the preset ratio is set to set sensitive data to 30% of the original data block and ordinary data to 70%, and the sensitive data and ordinary data are randomly distributed.

[0075] Furthermore, the security testing device divides the mixed data of sensitive data and common data according to a preset ratio according to a preset data block size to generate an original data block, wherein the preset data block size is set according to actual conditions, and the preset data block size is different in size such as 1GB, 2GB, etc., and the data block format of the original data block is a binary format. In one embodiment, each original data block in the embodiment of the present invention includes multiple data elements, and each original data block can be represented as , Represents the original data block The data elements, Represents the original data block The data elements.

[0076] Furthermore, the security testing device uses a preset encryption strategy function to encrypt each data element in the original data block. Encryption is performed to obtain the verification data of the original data block, wherein the encryption strategy function is preset The formula can be specifically expressed as:

[0077] ;

[0078] Therefore, for each data element in the original data block After encryption, the verification data of the original data block can be expressed as:

[0079] ;

[0080] ;

[0081] in, Represents the check data of the original data block, Represents the encrypted data of each data element in the original data block, Represents the position weight factor of each data element in the original data block, represents the base of the exponential function, Represents the position index of each data element in the original data block.

[0082] Step 20, performing a simulated attack on the solid state drive according to a preset intensity level and a preset duration, and obtaining a post-simulated attack data block of the original test data after the simulated attack ends.

[0083] Furthermore, the security testing device simulates attacks on the solid-state drive according to a preset intensity level and a preset duration, wherein the preset intensity level and the preset duration are set according to actual conditions, and the simulated attacks include sudden power failure attacks, electromagnetic interference attacks, and malicious data tampering attacks. The sudden power failure attack is achieved by controlling the power supply module to cut off the power supply to the solid-state drive at random time intervals. The electromagnetic interference attack utilizes an electromagnetic signal generator to generate electromagnetic interference fields of different frequencies and intensities around the solid-state drive. The malicious data tampering attack is simulated by writing maliciously modified data blocks to the solid-state drive.

[0084] Furthermore, the security testing device obtains a post-simulated attack data block of the original test data after the simulated attack ends, wherein the post-simulated attack data block can be expressed as .

[0085] Step 30, recovering the data block after the simulated attack based on the verification data, and obtaining the primary data recovery rate, secondary data recovery rate and data error rate of the data block after the simulated attack during the recovery process.

[0086] Among them, after two recovery operations in the embodiment of the present invention, if the data in the data block after the simulated attack has not been recovered, that is, it is inconsistent with the data in the original data block, it indicates a data recovery error. Therefore, the security testing device recovers the data block after the simulated attack by verifying the data, and obtains the number of restored data blocks after the simulated attack that are consistent with the original data blocks after one recovery, the number of restored data blocks after the simulated attack that are consistent with the original data blocks after the second recovery, and the number of restored data blocks after the simulated attack that are inconsistent with the original data blocks after the second recovery.

[0087] Furthermore, the security testing device calculates a data recovery rate of the data blocks after the simulated attack in the recovery process based on the total number of original data blocks and the number of restored data blocks that are consistent with the original data blocks after the simulated attack is restored once.

[0088] Furthermore, the security testing device calculates the secondary data recovery rate of the data blocks after the simulated attack during the recovery process based on the total number of original data blocks and the number of restored data blocks that are consistent with the original data blocks after the secondary recovery of the data blocks after the simulated attack.

[0089] Furthermore, the security testing device calculates the data error rate of the data blocks after the simulated attack in the recovery process based on the total number of original data blocks and the number of inconsistencies between the restored data blocks and the original data blocks after the secondary recovery of the data blocks after the simulated attack.

[0090] Therefore, the security testing device can obtain the primary data recovery rate, secondary data recovery rate and data error rate of the data block in the recovery process after the simulated attack.

[0091] In one embodiment, the specific process of restoring the data block after the simulated attack by the verification data is analyzed as follows: For the first data recovery of the data block after the simulated attack, the data block after the first recovery Each restored data element in It can be expressed as:

[0092] ;

[0093] ;

[0094] For the second data recovery of the data block after the simulated attack, the data block after the second recovery Each restored data element in It can be expressed as:

[0095] ;

[0096] in, Represents the preset encryption strategy function The inverse function of Represents an auxiliary function used to measure the difference between data elements and the recovery tendency.

[0097] In one embodiment, the specific analysis package of the consistency verification of the original data block and the restored data block after the simulated attack is as follows: the security test device performs consistency verification on the first data recovery of the simulated attack data block to obtain the first verification result. If the first verification result is determined to be: the consistency measurement value between the original data block and the first restored data block is greater than or equal to the preset measurement threshold, the security test device determines that the data in the simulated attack data block is successfully recovered, wherein the preset measurement threshold is such as 0.98, 0.99, 0.995, etc. If the first verification result is determined to be: the consistency measurement value between the original data block and the first restored data block is less than the preset measurement threshold, the security test device determines that the data in the simulated attack data block is not successfully recovered. At this time, it is necessary to perform consistency verification on the second data recovery of the simulated attack data block to obtain the second verification result. If the second verification result is determined to be: the consistency measurement value between the original data block and the second restored data block is greater than or equal to the preset measurement threshold, the security test device determines that the data in the simulated attack data block is successfully recovered. If it is determined that the second verification result is that the consistency measurement value between the original data block and the second restored data block is less than a preset measurement threshold, the security testing device determines that the data recovery error in the data block after the simulated attack.

[0098] Step 40, calculating the data storage security score of the solid state drive according to the primary data recovery rate, the secondary data recovery rate and the data error rate.

[0099] Furthermore, the security testing device calculates the data storage security score of the solid state drive according to the primary data recovery rate, the secondary data recovery rate and the data error rate. The calculation formula of the data storage security score is as follows:

[0100] ;

[0101] in, Indicates the data storage security score, Indicates the one-time data recovery rate, represents the secondary data recovery rate, Indicates the data error rate.

[0102] Step 50: Determine the data storage security level of the solid state drive according to the data storage security score.

[0103] Furthermore, the security testing device determines the data storage security level of the solid-state drive according to the data storage security score, and the specific analysis is as follows: If it is determined that the data storage security score is greater than or equal to the first preset security threshold, the security testing device determines that the data storage security level of the solid-state drive is the first level, the first preset security threshold is 90 points, and the first level is a high security level. If it is determined that the data storage security score is greater than or equal to the second preset security threshold, and is less than the first preset security threshold, the first preset security threshold determines that the data storage security level of the solid-state drive is the second level, the second preset security threshold is 60 points, and the second level is a medium security level. If it is determined that the data storage security score is less than the second preset security threshold, the data storage security level of the solid-state drive is determined to be the third level, and the third level is a low security level.

[0104] On the one hand, the embodiment of the present invention can comprehensively and truly evaluate the data storage security of the solid-state hard disk in a complex security environment by simulating sudden power failure, electromagnetic interference attack and malicious data tampering attack, and can more accurately discover the potential problems that may exist in the data security of the solid-state hard disk. Secondly, by using the primary data recovery rate, secondary data recovery rate and data error rate as evaluation indicators, a quantitative evaluation of the data storage security of the solid-state hard disk is achieved, overcoming the defect that the existing test lacks a comprehensive security evaluation indicator system. On the other hand, the generation and use of verification data enhances the reliability and accuracy of data recovery. When faced with data damage, it can effectively improve the success rate of data recovery, reduce the risk of data loss or error, and ensure the security of the data storage of the solid-state hard disk. Therefore, the embodiment of the present invention realizes a comprehensive, systematic and in-depth evaluation of the data storage security of the solid-state hard disk under various complex environments and security threats, fills the shortcomings of the existing testing methods and meets the growing data security needs.

[0105] Furthermore, the solid state drive data storage security testing system provided by the present invention is described below. The solid state drive data storage security testing system described below and the solid state drive data storage security testing method described above can be referenced to each other.

[0106] Optional, see Figure 2 , Figure 2 : is a structural diagram of a solid state hard disk data storage security test device provided by the present invention, and the solid state hard disk data storage security test device comprises:

[0107] The data generation module 210 is used to generate original test data of the solid state drive in a preset test environment; the original test data includes an original data block and its corresponding check data;

[0108] The simulated attack module 220 is used to simulate the attack on the solid state drive according to the preset intensity level and the preset duration, and obtain the simulated attack data block of the original test data after the simulated attack ends; the simulated attack includes a sudden power failure attack, an electromagnetic interference attack, and a malicious data tampering attack;

[0109] The data recovery module 230 is used to recover the data block after the simulated attack based on the verification data, and obtain the primary data recovery rate, secondary data recovery rate and data error rate of the data block after the simulated attack during the recovery process;

[0110] A score calculation module 240, for calculating a data storage security score of the solid state drive according to a primary data recovery rate, a secondary data recovery rate, and a data error rate;

[0111] The security level evaluation module 250 is used to determine the data storage security level of the solid state drive according to the data storage security score.

[0112] On the one hand, the embodiment of the present invention can comprehensively and truly evaluate the data storage security of the solid-state hard disk in a complex security environment by simulating sudden power failure, electromagnetic interference attack and malicious data tampering attack, and can more accurately discover the potential problems that may exist in the data security of the solid-state hard disk. Secondly, by using the primary data recovery rate, secondary data recovery rate and data error rate as evaluation indicators, a quantitative evaluation of the data storage security of the solid-state hard disk is achieved, overcoming the defect that the existing test lacks a comprehensive security evaluation indicator system. On the other hand, the generation and use of verification data enhances the reliability and accuracy of data recovery. When faced with data damage, it can effectively improve the success rate of data recovery, reduce the risk of data loss or error, and ensure the security of the data storage of the solid-state hard disk. Therefore, the embodiment of the present invention realizes a comprehensive, systematic and in-depth evaluation of the data storage security of the solid-state hard disk under various complex environments and security threats, fills the shortcomings of the existing testing methods and meets the growing data security needs.

[0113] See also Figure 3 , Figure 3 FIG. 1 is an embodiment diagram of an electronic device provided by an embodiment of the present invention. Figure 3 As shown, an embodiment of the present invention provides an electronic device 300, including a memory 310, a processor 320, and a computer program 311 stored in the memory 310 and executable on the processor 320. When the processor 320 executes the computer program 311, the following steps are implemented:

[0114] Generate original test data of the solid state drive in a preset test environment; the original test data includes original data blocks and corresponding check data;

[0115] Performing a simulated attack on the solid-state drive according to a preset intensity level and a preset duration, and obtaining a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attacks include sudden power failure attacks, electromagnetic interference attacks, and malicious data tampering attacks;

[0116] Recover the data block after the simulated attack based on the verification data, and obtain the primary data recovery rate, secondary data recovery rate and data error rate of the data block after the simulated attack during the recovery process;

[0117] The data storage security score of the solid-state drive is calculated based on the primary data recovery rate, secondary data recovery rate, and data error rate;

[0118] The data storage security level of the solid-state drive is determined based on the data storage security score.

[0119] See also Figure 4 , Figure 4Detailed description of an embodiment of a computer-readable storage medium provided by an embodiment of the present invention. Figure 4 As shown, this embodiment provides a computer-readable storage medium 400, on which a computer program 311 is stored. When the computer program 311 is executed by a processor, the following steps are implemented:

[0120] Generate original test data of the solid state drive in a preset test environment; the original test data includes original data blocks and corresponding check data;

[0121] Performing a simulated attack on the solid-state drive according to a preset intensity level and a preset duration, and obtaining a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attacks include sudden power failure attacks, electromagnetic interference attacks, and malicious data tampering attacks;

[0122] Recover the data block after the simulated attack based on the verification data, and obtain the primary data recovery rate, secondary data recovery rate and data error rate of the data block after the simulated attack during the recovery process;

[0123] The data storage security score of the solid-state drive is calculated based on the primary data recovery rate, secondary data recovery rate, and data error rate;

[0124] The data storage security level of the solid-state drive is determined based on the data storage security score.

[0125] On the other hand, the present invention further provides a computer program product, the computer program product includes a computer program, the computer program can be stored on a non-transitory computer-readable storage medium, when the computer program is executed by a processor, the computer can execute the solid-state hard disk data storage security testing method provided by the above methods, the method includes:

[0126] Generate original test data of the solid state drive in a preset test environment; the original test data includes original data blocks and corresponding check data;

[0127] Performing a simulated attack on the solid-state drive according to a preset intensity level and a preset duration, and obtaining a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attacks include sudden power failure attacks, electromagnetic interference attacks, and malicious data tampering attacks;

[0128] Recover the data block after the simulated attack based on the verification data, and obtain the primary data recovery rate, secondary data recovery rate and data error rate of the data block after the simulated attack during the recovery process;

[0129] The data storage security score of the solid-state drive is calculated based on the primary data recovery rate, secondary data recovery rate, and data error rate;

[0130] The data storage security level of the solid-state drive is determined based on the data storage security score.

[0131] The system embodiment described above is merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Those of ordinary skill in the art may understand and implement it without creative effort.

[0132] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0133] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for testing the security of data storage in a solid state drive, characterized in that: include: Generate original test data of SSD in a preset test environment; The original test data includes an original data block and its corresponding verification data; Performing a simulated attack on the solid-state drive according to a preset intensity level and a preset duration, and obtaining a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attack includes a sudden power failure attack, an electromagnetic interference attack, and a malicious data tampering attack; Recovering the simulated attack data block based on the verification data, and obtaining a primary data recovery rate, a secondary data recovery rate, and a data error rate of the simulated attack data block during the recovery process; Calculating a data storage security score of the solid state drive according to the primary data recovery rate, the secondary data recovery rate, and the data error rate; Determining a data storage security level of the solid state drive according to the data storage security score; The original data block is represented as , Represents the original data block The data elements, the data block after the simulated attack is represented as The specific process of recovering the data block after the simulated attack based on the verification data includes: For the first data recovery of the data block after the simulated attack, the first data recovery of the data block Each restored data element in It is expressed as: ； ； For the second data recovery of the data block after the simulated attack, the data block after the second recovery Each restored data element in It is expressed as: ； in, Represents the check data of the original data block, Represents the position weight factor of each data element in the original data block, Represents the preset encryption strategy function The inverse function of represents auxiliary functions, used to measure the differences between data elements and the tendency to recover; The calculation formula of the data storage security score is as follows: ； in, Indicates the data storage security score, Indicates the one-time data recovery rate, represents the secondary data recovery rate, Indicates the data error rate.

2. The solid state drive data storage security testing method according to claim 1, characterized in that: Generating verification data of the original data block includes: Acquire sensitive data and common data in the preset test environment; After mixing the sensitive data and the common data according to a preset ratio, the mixed data is segmented according to a preset data block size to generate the original data block; the original data block includes a plurality of data elements; Based on a preset encryption strategy function, each data element in the original data block is encrypted Encryption is performed to obtain verification data of the original data block.

3. The solid state drive data storage security testing method according to claim 2, characterized in that: The check data of the original data block is expressed as: ； Preset encryption policy function The formula is: ； ； in, Represents the encrypted data of each data element in the original data block, represents the base of the exponential function, Represents the position index of each data element in the original data block.

4. The solid state drive data storage security testing method according to claim 1, characterized in that: The consistency verification of the original data block and the restored data block includes: Performing consistency verification on the first data recovery of the data block after the simulated attack; If the consistency measurement value between the original data block and the first recovered data block is greater than or equal to a preset measurement threshold, it is determined that the data in the simulated attack data block is successfully recovered; If the consistency measurement value between the original data block and the first restored data block is less than the preset measurement threshold, it is determined that the data in the simulated attack data block is not successfully restored, and consistency verification is performed on the second data recovery of the simulated attack data block; If the consistency measurement value between the original data block and the second restored data block is greater than or equal to the preset measurement threshold, it is determined that the data in the simulated attack data block is successfully restored; If the consistency measurement value between the original data block and the second restored data block is less than the preset measurement threshold, a data recovery error in the simulated attack data block is determined.

5. The solid state hard disk data storage security testing method according to claim 4, characterized in that: The formula for verifying the consistency of the data block after the first recovery is expressed as: ； in, Indicates the consistency measure of the original data block and the data block after the first recovery.

6. The method for testing the security of data storage in a solid state drive according to any one of claims 1 to 5, characterized in that: Determining the data storage security level of the solid state drive according to the data storage security score includes: If the data storage security score is greater than or equal to a first preset security threshold, determining that the data storage security level of the solid state drive is the first level; If the data storage security score is greater than or equal to a second preset security threshold and less than the first preset security threshold, determining that the data storage security level of the solid state drive is the second level; If the data storage security score is less than the second preset security threshold, it is determined that the data storage security level of the solid state drive is the third level.

7. A solid state hard disk data storage security testing device, characterized in that: include: A data generation module, used for generating original test data of the solid state drive in a preset test environment; The original test data includes an original data block and its corresponding verification data; A simulated attack module, used to perform a simulated attack on the solid-state hard disk according to a preset intensity level and a preset duration, and obtain a post-simulated attack data block of the original test data after the simulated attack ends; the simulated attack includes a sudden power failure attack, an electromagnetic interference attack, and a malicious data tampering attack; A data recovery module, used to recover the data block after the simulated attack based on the verification data, and obtain a primary data recovery rate, a secondary data recovery rate and a data error rate of the data block after the simulated attack during the recovery process; A score calculation module, used to calculate the data storage security score of the solid state drive according to the primary data recovery rate, the secondary data recovery rate and the data error rate; A security level assessment module, used to determine the data storage security level of the solid state drive according to the data storage security score; The original data block is represented as , Represents the original data block The data elements, the data block after the simulated attack is represented as The specific process of recovering the data block after the simulated attack based on the verification data includes: For the first data recovery of the data block after the simulated attack, the first data recovery of the data block Each restored data element in It is expressed as: ； ； For the second data recovery of the data block after the simulated attack, the data block after the second recovery Each restored data element in It is expressed as: ； in, Represents the check data of the original data block, Represents the position weight factor of each data element in the original data block, Represents the preset encryption strategy function The inverse function of represents auxiliary functions, used to measure the differences between data elements and the tendency to recover; The calculation formula of the data storage security score is as follows: ； in, Indicates the data storage security score, Indicates the one-time data recovery rate, represents the secondary data recovery rate, Indicates the data error rate.

8. An electronic device comprising: Memory for storing computer software programs; A processor, used to read and execute the computer software program, characterized in that when the processor executes the computer software program, it implements the solid state hard disk data storage security testing method as described in any one of claims 1 to 6.

9. A non-transitory computer-readable storage medium, wherein a computer software program is stored in the non-transitory computer-readable storage medium, and when the computer software program is executed by a processor, the solid-state hard disk data storage security testing method as described in any one of claims 1 to 6 is implemented.

Images