【作者】 敖一峰；

【导师】 邹恒明；

【作者基本信息】 上海交通大学 ， 计算机软件与理论， 2010， 硕士

【摘要】 计算机应用正朝着数据密集型发展。同时,随着物联网的兴起,越来越多的物品被接入到互联网,产生了新的海量数据并通过云端进行上传和下载。而近年来,用户生成的内容也增长了15倍。数据的爆炸式增长超出了摩尔定律。今后4年内产生的数据量将超出历史的总和。当前磁盘驱动器的容量每9到12个月就会翻倍,按照这个速度,在未来10到15年内需要为文件系统增加64位的寻址能力。传统文件系统将无法满足需求。ZFS是一种创新的适应未来发展需要的海量文件系统,支持128位寻址,同时提供了丰富的特性。但目前关于ZFS的文献并不多,也很少提及切实可行的研究手段。本文提出了一种对ZFS文件数据进行跟踪和隐藏的方法,通过磁盘级的访问,从目标文件的路径和文件名开始,在磁盘上逐步地找到所有与其相关的源信息和数据信息,实现跟踪的目标。进而,通过直接修改磁盘数据来实现ZFS的文件数据隐藏。实现ZFS数据跟踪与隐藏的意义在于:通过全面的数据跟踪,直观地揭示了ZFS的存储机制。本文设计的软件可以作为ZFS的分析工具,用于数字取证和其他的相关研究。鉴于ZFS的独特设计,可以使用该软件恢复同一文件过去时间点的数据。而ZFS文件数据隐藏在结合了数据扰乱以后,能够防范系统的入侵者,最大程度地保护用户的敏感数据。更多还原

【Abstract】 Many researches and applications are based on data-intensive computing. With the advent of the Internet of Things, a massive amount of new data will be uploaded to and downloaded from the cloud. And this is in addition to the burgeoning amount of user-generated content. The data explosion is bigger than Moore’s law. More data will be created in the next four years than ever before.As the volume of disk driver doubles every 9 to 12 months, file systems will be equipped with extra 64-bit addressing capability within 10 to 15 years. Among all the potential wide-address file systems, Zettabyte File System stands out as one of the most innovative, feature-rich, and future-proof 128-bit system. However, the literature on ZFS is very limited and not many researches provide pragmatic approaches.This paper introduces a solution to implement ZFS data tracing and concealment at disk level. By accessing on-disk data directly, we dig out all the metadata and file content for a designated ZFS file and establish a holistic view of data tracing. Afterward, we modify all relevant metadata to conceal a ZFS file. Meanwhile, data scrambling is adopted to enhance the security of the hidden data.The paper reveals some significant insights into the storage mechanism of ZFS. The data tracing can be applied to digital forensics or other researches of ZFS as an analysis tool. Owing to the unique design of ZFS, we can utilize the data tracing to recover data at a previous time. Combined with data scrambling, the data concealment dramatically boosts data security. It can defeat some smart intruders and protect sensitive user data from leaking.更多还原