基于分布式文件系统glusterfs的安全技术分析-analysis of security technology based on distributed file system glusterfs.docxVIP

AbstractWiththefastdevelopmentoftheinformationtechnology,allkindsofnetworkattackhasalreadybeenaveryprevalentphenomenon.Datasecurityandnetworksecurityhavebeenpaidmoreattentionbypeople,andhowtoofferperfectsecurityserviceswithensuringtheperformancebecomesahotproblem.ThispaperstudiesdistributedfilesystemGlusterFS,affirmsitsadvantageinextensionandperformation，butanalyzestheproblemsofitssecuirtymechanism,suchasitdoesntofferanyauthenticationmechanismandaccesscontrolmechanismandsoon,anditsencryptionalgorithm-rot13iscrackedveryeasily.So,onthebasisofdistributedfilesystemGlusterFS,anewkindofsecurityarchitectureisproposed.Namely,weaddanewmodule--securitymanagerbasedontheprevious,andformanewtripartitestructure.Thesystemmakesuseofthreedifferentkindsofkey.Theynotonlymakeconfidentialdatainsystemtobestoredsecurely,butalsolightentheburdenthatusersmanagekeysgreatlyandrestricttheAdministratorsprivileges.Inaddition,thesystemusesauthenticationtoavoidfalsified,steal,fakeandreplayattackintheprocessofcommunication.Itusesaccesscontrolmechanismtopreventusersfromunauthorizedaccessingduringoperation.Thesystemalsoimportsblacklistauthenticatedmechanismtomakethesystemmoresecure,andtoholdbackmalicioususersthreattosystemsecurity.Afterdescribingthedesignandimplementationmethodindetail,thispaperilluminatethatthesecuritymechanismeffectstheperformanceofthesystembytestresult.keywords:Distributedfilesystem,Key,Authentication,Accesscontrol,Blacklist目录摘要.................................................................................................................IAbstract..........................................................................................................II1绪论1.1课题背景...........................................................................................(1)1.2课题研究的目的和意义..................................................................(1)1.3课题国内外研究现状......................................................................(1)1.4本文研究的内容和目的..................................................