ZFS Data Concealment Based On Reliability Pentration

With the rapid development of computer and network technologies, the degree of society's dependence on information is increasing and, the amount of information is continuously growing. As a consequence, the storage and management of large amount of data becomes critically important. As an innovation file system, ZFS could help resolving problems of storage capacity limitation, data corruption, device management complexity and so on. However, how to prevent the theft and destruction of critical data stored in the storage system is always a concern. Because ZFS is relatively new and not many researches have been conducted on it, our research on data concealment on ZFS file system has both practical significance and reference value.This paper introduces a data concealment method based on the penetration of ZFS's reliability mechanism. First, we modify target file's metadata in accordance to the characteristics of the data structure of ZFS. Then, we penetrate the reliability mechanisms by hooking appropriate system calls to make concealment possible. This paper also introduces a method to protect the temporary data generated by our concealment mechanism, and thus renders our target data on ZFS more secure. The main advantages of our data concealment on ZFS are as follows. First, it renders the data invisible to attackers and thus much less vulnerable to intrusion and tampering. Second, the modification to the system is minimal and does not alter ZFS's reliability mechanisms. Third, the extra information required by the concealment is very little and its confidentiality is very high. Finally, the impact of the concealment to system efficiency is less than 2%.