云存储中支持失效文件快速查询的批量审计方法

发布时间：2018-01-05 20:27

  本文关键词：云存储中支持失效文件快速查询的批量审计方法　出处：《计算机学报》2017年10期 　论文类型：期刊论文

  更多相关文章： 数据安全 云存储 数据完整性验证 批量审计 快速查询 失效文件

【摘要】：云存储服务中,批量审计是高效验证云端数据完整性的关键技术.批量审计容易遭受"失效文件"攻击,并且查询失效文件代价高、速度慢,严重影响着批量审计方案的可用性和效率.针对该问题,提出一种支持失效文件快速查询的批量审计方法,该方法通过建立批量审计过程的关联性,改变了二分查询树中右孩子节点的计算方式,减少了整个查找过程的批量审计次数;并在批量审计过程中执行幂指测试,通过一次审计就可完成含有单个失效文件的子树查找过程,有效缩短了子树的查找长度;采用混合型查询方法,根据历史查询信息设置幂指测试的深度,降低了"失效文件聚集处"的查询开销.安全分析和性能表明,该方法能够快速完成失效文件定位,有效抵抗"失效文件"攻击,保证了批量审计方案的可用性和效率.在少量文件失效的情景下,相较于简单二分查找方法,文中方法耗费的批量审计次数减少了30%.
[Abstract]:In cloud storage service, batch audit is the key technology to verify the integrity of cloud data efficiently. Batch audit is vulnerable to "invalid file" attack, and the cost of querying invalid files is high and the speed is slow. The availability and efficiency of batch audit schemes are seriously affected. In order to solve this problem, a batch audit method is proposed to support fast query of failure files, which establishes the relevance of batch audit process. The calculation method of the right child node in the binary query tree is changed, and the batch audit times of the whole searching process are reduced. In the process of batch audit, the power index test is carried out, and the searching process of subtree with a single invalid file can be completed by one audit, which effectively shortens the searching length of the subtree. The hybrid query method is used to set the depth of power index test according to the historical query information, which reduces the query cost of "failure file aggregation". The security analysis and performance show. This method can locate the failure file quickly, resist the attack of the failure file effectively, and ensure the availability and efficiency of the batch audit scheme. In the case of a few file failure, the method is compared with the simple binary search method. The number of batch audits consumed by this method is reduced by 30%.
【作者单位】： 西北工业大学计算机学院;
【基金】：国家“八六三”高技术研究发展计划项目基金(2013AAOIA215) 国家自然科学基金(61472323,61502392) 中央高校基本科研业务费专项资金项目(3102015JSJ0009) 华为创新基金项目(YB2014040023)资助~~
【分类号】：TP309;TP333
【正文快照】： i引言 云存储服务作为互联网+应用的重要支撑技术,为用户(企业和个人)提供了低成本、高质量、易扩展的在线数据存储服务.很多互联网+应用以云存储服务为载体,例如协同办公、安全食品、远程诊疗、智慧城市等,这些应用不仅有助于企业转型,而且将引领社会的变革.与此同时,由于云，

本文编号：1384716