Encrypting File System Research Articles

Dynamic Multimedia Encryption Using a Parallel File System Based on Multi-Core Processors

Securing multimedia data on disk drives is a major concern because of their rapidly increasing volumes over time, as well as the prevalence of security and privacy problems. Existing cryptographic schemes have high computational costs and slow response speeds. They also suffer from limited flexibility and usability from the user side, owing to continuous routine interactions. Dynamic encryption file systems can mitigate the negative effects of conventional encryption applications by automatically handling all encryption operations with minimal user input and a higher security level. However, most state-of-the-art cryptographic file systems do not provide the desired performance because their architectural design does not consider the unique features of multimedia data or the vulnerabilities related to key management and multi-user file sharing. The recent move towards multi-core processor architecture has created an effective solution for reducing the computational cost and maximizing the performance. In this paper, we developed a parallel FUSE-based encryption file system called ParallelFS for storing multimedia files on a disk. The developed file system exploits the parallelism of multi-core processors and implements a hybrid encryption method for symmetric and asymmetric ciphers. Usability is significantly enhanced by performing encryption, decryption, and key management in a manner that is fully dynamic and transparent to users. Experiments show that the developed ParallelFS improves the reading and writing performances of multimedia files by approximately 35% and 22%, respectively, over the schemes using normal sequential encryption processing.

DSVN: A Flexible and Secure Data-Sharing Model for VANET Based on Blockchain

Vehicular Ad Hoc Network (VANET) is an important part of the modern intelligent transportation system, which can provide vehicle communication at a certain distance. More importantly, VANET can provide route planning and autonomous driving for drivers by analyzing data. However, VANET’s data privacy and security are a huge challenge when serving drivers. In this paper, we propose a VANET data-sharing model (DSVN) that combines ciphertext-based attribute encryption (CP-ABE), blockchain, and InterPlanetary File System (IPFS). DSVN uses an outsourced and revocable ciphertext policy attribute-based encryption (ORCP-ABE) scheme, which is improved based on CP-ABE. ORCP-ABE uses key encryption key (KEK) trees to manage user attribute groups and revoke user-level attributes. It eliminates redundant attributes in the access policy by attribute-weighted access trees. Moreover, DSVN has no single point of failure. We demonstrate the indistinguishability under the chosen-plaintext attack (IND-CPA) security of DSVN by a game based on the computational Diffie–Hellman (CDH) assumption. Experimental results show that DSVN can store and share data with low overhead. Additionally, it can revoke attributes of users safely.

A Peer-to-Peer File Storage System Using Blockchain and Interplanetary File System

People’s lives have been profoundly impacted by the headway of innovation which has worked on their lives from each viewpoint. Clearly, innovation assumes a significant part in each circle of life and information stockpiling and sharing is a significant part of it. Current information sharing and storage devices depend on trusted third parties (TTP) and because of the contribution of third parties, such frameworks need straightforwardness, security, trust and strength. To solve these issues, this paper proposes a blockchain-based secure information sharing application by consolidating the highlights of IPFS and Ethereum. In this proposed scheme ethereum blockchain, decentralized storage, encryption and IPFS are combined to build an application that maximizes the technological resources and provide with an effective storage website ,Ethereum blockchain, decentralized capacity, encryption, and InterPlanetary File System are consolidated to assemble an application that boosts the innovative assets and gives a viable storage site. To carry out the proposed situation, smart contracts are written in solidity and sent on the nearby Ethereum test network. The proposed plot accomplishes security, transparency, legitimacy of owner, access control and nature of information.

Encryption File System Framework - Proof of Concept

Abstract Edge Computing, also known as the IoT ecosystem, has recently become a cornerstone of computational evolution. Most recently, challenges emerged in the act of protecting such technology, hence it became increasingly popular in recent years, and with this growth, safety concerns increased due the recent growing number of hacking events. Recent challenges rely in the IoT technologies e.g., virtual interfaces, to deliver solutions to end point terminals and securing this relation is significantly important hence these terminals are commonly in the end user pocket, where other personal information is also present. There are several tools available for developers to protect data, comprising international mandatory rules for security has there is common sense to do it. The purpose of this project was to create one specific and unique framework where the developer has no need to possess knowledge in the subject of cryptography, to be able to perform security operations on files with data encrypted.

Carp: A cost-aware relaxed protocol for encrypted data stores

Distributed data stores are critical to the success of applications in cloud. Massive volumes of user data are stored and processed with the support of underlying distributed data stores. With large amounts of data stored remotely in the cloud, security becomes a major concern. Authentication and access control are provided by cloud storage providers. But even with proper authentication and access control policies, storage systems are still vulnerable to attackers who have direct access to storage devices such as disks. Encryption makes it computational difficult to retrieve the original data even when the attackers have the access to the disks. However, there are many challenges in designing an encrypted distributed data store that is highly secure and cost-aware.In this paper, we show that security flexibility and cost efficiency can be achieved at the same time. We present Carp, a cost- aware relaxed protocol for encrypted data stores. Carp is a heuristic solution instead of an optimal one. The key idea is to reduce additional encryption operations for frequently accessed data. It is achieved by allowing data objects stay unencrypted for a short time period after the data are accessed. Reducing encryption operations eventually means reducing the computational cost and power consumption in the data store. Unlike conventional encrypted file systems which store data encryption keys on disks, we present a hybrid design of key generation and caching. Data encryption keys are generated for individual objects or a group of them using cryptographic hashing. We develop a prototype data store and conduct experiments. The experimental results show that Carp can reduce up to 20% encryption operations with high-level security.

Secure Outsourcing and Sharing of Cloud Data Using a User-Side Encrypted File System

Cloud computing is an emerging paradigm that aims to provide computing resources, massive data storage capacity and, flexible data sharing services. The explosive growth of data produced persuade business and users, driven by the cloud-top features, to outsource their data to the cloud storage systems. However, the confidentiality and integrity of outsourced sensitive data in remote cloud servers are becoming a major concern. Data must be encrypted prior to storing it in the, potentially untrustworthy cloud. Existing traditional encryption systems impose a heavy burden of managing files and encryption operations on data owners. They suffer from serious security, efficiency, and usability issues, and some schemes are inappropriate for protecting cloud data. In this paper, we introduce OutFS, a user-side encrypted file system, focused on providing a transparent encryption for stored and shared outsourced data. In OutFS, we utilize a hybrid encryption scheme structure based on symmetric and asymmetric methods. The key management is conveniently designed. In order to ensure robust data sharing security, the identity-based encryption scheme (IBE) is integrated with OutFS. OutFS is designed to preserve the integrity of outsourced file data and file system data structure. Analysis of performance and experimental results show that OutFS is efficient. It can achieve an average throughput of 8.8 MB/sec, and 10.5 MB/sec for writing and reading outsourced files. Security analysis indicates that OutFS is extremely secure and robust against attacks such as brute-force, eavesdropping, man-in-the-middle, and offline-dictionary attacks.

A Research Threshold Efficient Hybrid Encryption Schema for Secure File System

Electronic technologies have radically changed the way of doing business and the way of storing and sharing information. In the technology revolution, security is more affected with the introduction of distributed environment where data requires accessing from remote computers. When Operating Systems (OS) are running on a device with no file encryption, normally file access is controlled through user authentication mechanisms by its own operating system. However, an invader can easily bypass this fence if he gains physical access to the computer. To protect sensitive files/data even if physically accessed the device, the most widely accepted solution to this is to store the files encrypted on the physical media. Windows family of OS uses an EFS, similarly Gnupg is an encryption tool for operating systems such as FreeBSD, Solaris, MacOS to enforce security measure and much more algorithm which are using short length key or keys for encrypting the file-system. Even though these systems are good, still there is a question about confidentiality and privacy because of explosive growth of computing power and cryptanalysis tools and techniques. In this paper a novel approach for encrypting file system using Rbits cipher with PKC is proposed. In brief, Rbits enforce unlimited sub-keying mechanism in encryption process to avoid any sort of cryptanalysis

Design and Implementation of Students’ File Encryption and Decryption System Using One Time Pad Algorithm for Computer Science Department, Adsu Mubi

The research, design and implementation of students file encryption and decryption system using one-time pad algorithm seeks to improve the security of student records in tertiary institutions by using trusted techniques as given in the research. The purpose is to develop an automated student’s data protection application in order to consolidate existing security measures as it pertains to data integrity and privacy. The software design methodology adopted for the research is the waterfall model due to the fact that is does not allow overlapping of processes. For the system design and implementation. Pelles C programming for windows version 9.00.9 for code generation and startUML was used for user interface design all in a bid to actualize the objectives of the research.

KVEFS: Encrypted File System Based on Distributed Key-Value Stores and FUSE

File System is an important component of a secure operating system. The need to build data protection systems is extremely important in open source operating systems, high mobility hardware systems, and miniaturization of storage devices that make systems available. It is clear that the value of the data is much larger than the value of the storage device. Computers access protection mechanism does not work if the thief retrieves the hard drive from the computer and reads data from it on another computer. Encrypted File System (EFS) is a secure level of operating system kernel. EFS uses cryptography to encrypt or decrypt files and folders when they are being saved or retrieved from a hard disk. EFS is often integrated transparently in operating system There are many encrypted filesystems commonly used in Linux operating systems. However, they have some limitations, which are the inability to hide the structure of the file system. This is a shortcoming targeted by the attacker, who will try to decrypt a file to find the key and then decrypt the entire file system. In this paper, we propose a new architecture of EFS called KVEFS which is based on cryptographic algorithms, FUSE library and key-value store. Our method makes EFS portable and flexible; Kernel size will not increase in Operating System.

File Encryption System Based on Symmetric Key Cryptography

In Today’s scenario, files are not secure. They are fetch by any means of attack by eavesdropper like cracking the pins, crashing the OS by viruses, malwares, and plenty of ways. We today can’t sure that files protection wizards are secure and data can’t be reached to the attacker. But if files are encrypted then even files are accessed original data remains confidential. Therefore, this paper represents the File Encryption System based on Symmetric Key Cryptography. I proposed the strategy to encrypt the files/even multiple files can be encrypted by compressing the files into one ‘rar’ file and it uses Blowfish as encryption/decryption standard and Cipher Block Chain Mode to perform the operations. I implemented compression function for 64-bit Initialization Vector(IV), use CBC mode with Blowfish and RC4 for 256-bit keystream. It is more efficient and secure then other general encryption process

Implementation of a File System with Encryption and De-duplication

With the rapid advance of society, especially the development of computer technology, network technology and information technology, there is an increasing demand for systems that can provide secure data storage in a cost-effective manner. In this paper, we propose a prototype file system called EDFS (Encryption and De-duplication File System), which provides both data security and space efficiency in storage systems. We adopt de-duplication technology called CDC (Content-Defined Chunking) to chunk the file and compute its unique fingerprint, lookup different blocks, then store different blocks on server to ensure storage efficiency. Thinking of security, we use convergent encryption to encrypt data blocks, which not only ensure data security but also improve the possibility of de-duplication. Finally, we describe a prototype implementation of EDFS based on FUSE [1] and present an analysis of the potential effectiveness, using real data obtained from a runtime database.

A File Encryption System Based on Fingerprint-Embedded Storage

A file encryption system based on fingerprint-embedded storage is proposed in this paper. The system uses the MBF200 to carry out the collection of fingerprints, uses the embedded chip ARM2410 to process and store the fingerprints as a hardware platform, and customs the man-machine interfaces for the processes of file encryption and decryption on the host side in accordance with the needs of development. Experimental results show that the system is easy to operate, with high stability, versatility, fast speed and high precision in the fingerprint acquisition.

Fuzzy Keyword Search with Safe Index over Encrypted Cloud Computing

As cloud computing becomes more and more utilized, sensitive data are being stored in cloud central servers. To ensure privacy, these data are usually encrypted before uploading, which makes searching complicated. In this paper we propose architecture of fuzzy keyword search with safe index. Bloom filter is used to build safe index which increases the searching effectiveness on a large dataset. The size of index is fixed so that the space efficiency is promoted. The experiment result shows that our searching scheme is effective and can be adapted to large encrypted file system. DOI: http://dx.doi.org/10.11591/telkomnika.v11i10.3419

Programming and Implementation of File Encryption System Based on Matrix Transformation

File transfer and e-mail business dealings have a lot of insecurity on the Internet. This paper presents a encryption algorithm of electronic documents based on matrix, and it brings forward implementing by VC.the algorithm relies on a special class of matrix combination, the method is feasible and effective to improve the security of the electronic document system. Finally, the code is given.

A Newer Secure Communication, File Encryption and User Identification based Cloud Security Architecture

Cloud computing platform gives people the opportunity for sharing resources, services and information among the people of the whole world. In private cloud system, information is shared among the persons who are in that cloud. Because of this, different security related problems have grown in this platform. This paper work has proposed newer security architecture for cloud computing platform, which ensures secured communication system and hiding information from others. DES based file encryption system and asynchronous key system for exchanging information or data is included in this model. This structure is easily applicable with main cloud computing features, e.g. PaaS, SaaS and IaaS. This model also includes unique encryption key for user authentication process. El Gamal has been proposed in this paper for secured communication between users and cloud storage system. This paper work mainly deals with providing security for files stored in cloud computing archtecture.

Distributed Encrypting File System for Linux in User-space

Linux systems use Encrypting File System (EFS) for providing confidentiality and integrity services to files stored on disk in a secure, efficient and transparent manner. Distributed encrypting file system should also provide support for secure remote access, multiuser file sharing, possible use by non-privileged users, portability, incremental backups etc. Existing kernel-space EFS designed at file system level provides all necessary features, but they are not portable and cannot be mounted by non-privileged users. Existing user-space EFS have performance limitations and does not provide support for file sharing. Through this paper, modifications in the design and implementation of two existing user-space EFS, for performance gain and file sharing support, has been presented. Performance gain has been achieved in both the proposed approaches using fast and modern ciphers. File sharing support in proposed approaches has been provided with Public Key Infrastructure (PKI) integration using GnuPG PKI module and Linux Pluggable Authentication Module (PAM) framework. Cryptographic metadata is being stored as extended attributes in file's Access Control List (ACL) to make file sharing task easier and seamless to the end user.

A Newer User Authentication, File encryption and Distributed Server Based Cloud Computing security architecture

The cloud computing platform gives people the opportunity for sharing resources, services and information among the people of the whole world. In private cloud system, information is shared among the persons who are in that cloud. For this, security or personal information hiding process hampers. In this paper we have proposed new security architecture for cloud computing platform. This ensures secure communication system and hiding information from others. AES based file encryption system and asynchronous key system for exchanging information or data is included in this model. This structure can be easily applied with main cloud computing features, e.g. PaaS, SaaS and IaaS. This model also includes onetime password system for user authentication process. Our work mainly deals with the security system of the whole cloud computing platform.

Provably Secure Role-Based Encryption with Revocation Mechanism

Role-Based Encryption (RBE) realizes access control mechanisms over encrypted data according to the widely adopted hierarchical RBAC model. In this paper, we present a practical RBE scheme with revocation mechanism based on partial-order key hierarchy with respect to the public key infrastructure, in which each user is assigned with a unique private-key to support user identification, and each role corresponds to a public group-key that is used to encrypt data. Based on this key hierarchy structure, our RBE scheme allows a sender to directly specify a role for encrypting data, which can be decrypted by all senior roles, as well as to revoke any subgroup of users and roles. We give a full proof of security of our scheme against hierarchical collusion attacks. In contrast to the existing solutions for encrypted file systems, our scheme not only supports dynamic joining and revoking users, but also has shorter ciphertexts and constant-size decryption keys.

Transparent Encrypting Office Document Based on Plug-in Software

More and more file encrypting about office document are required in personal application environment. Limitations about encrypting file system, virtual disk encryption and filtrating driver encryption, are analyzed in this paper, then a kind of encryption system for office document, combing with plug-in software and smart u-key, is put forward and implemented. File's encrypting procedure in this system is transparent, self-determination and visible, and the whole system is convenient to migrate. Mow word and excel files can be encrypted using this system.

Forensic Extraction of EFS-Encrypted Files in Live System Investigation

Encrypted files captured by acquiring a bit-by-bit image in the process of conventional forensic investigation are practically impossible to decrypt without knowing the key and the method of encryption. The Windows operating system provides the option to encrypt files using an encryption driver bundled with the New Technology File System (NTFS) file system, the so-called encrypting file system (EFS). EFS files can be manipulated transparently by the owner and the system administrator as long as they reside in an NTFS file system. In this article we demonstrate the methodology of extracting EFS-decrypted files from a live system. The method of extraction is built around a software utility, Robocopy, which does not modify any metadata of the file system during extraction. The hash value for the encrypted data calculated before and after the extraction is identical, so this approach can be considered to be forensically sound. We present a scenario that shows that live system investigation is indispensable in obtaining complete information about the system being examined. This information would be lost if conventional methods were applied, even when supplemented by the capture and analysis of physical memory.