USB存储设备所造成的数据泄漏问题日益严重.对USB存储设备进行访问控制,可以有效阻止USB存储设备的数据泄漏.文中主要研究基于Linux操作系统的USB存储设备访问控制机制,并且从用户态、内核Lsm框架以及驱动这三个不同层次分别提出了三种可行的USB存储设备访问控制机制.在这基础上,结合这三种访问控制机制各自的特点以及关键技术对它们的有效性、可用性进行了分析.作为验证,在Linux平台上实现了这三种机制.三种方法均可以有效地进行USB存储设备访问控制.%USB storage devices lead to data leakage easily. USB storage device access control technology can effectively prevent data leakage by USB storage device. Study the USB storage device access control technology based on the Linux operating system,and propose three possible access control mechanism of USB storage devices from the three levels which are user space, kernel and driver respectively. On this basis,analyze effectiveness and availability according to their characteristics and key technologies. As the demonstration,have implemented three methods based on Linux kernel. All methods can be effective access control for USB storage devices.
展开▼
