Java File Security System JFSS

Nowadays, storage systems are increasingly subject to attacks. So the security system is quickly becoming mendatory feature of the data storage systems. For the security purpose we are always dependent on the cryptography techniques. These techniques take the performance costs for the complete system. So we have proposed the Java File Security System(JFSS). It is based on the on-demand computing system concept, because of the performance issues. It is a greate comback for the system performance. The concept is used because, we are not always in need the secure the files, but the selected one only. In this paper, we have designed a file security system on Windows XP. When we use the operating system, we have to secure some important data. The date is always stored in the files, so we secure the important files well. To check the proposed functionality, we experiment the above said system on the Windows operating system. With these experiments, we have found that the proposed system is working properly, according to the needs of the users

Improving data integrity and performance of Cryptographic Structured Log File Systems

Modern File systems like CLFS (Cryptographic Log Structured File System)are aimed to provide security and confidentiality. Current deployments of such FileSystems do not currently ensure data integrity of the encrypted data that is stored ondisk. Due to Kernel bugs, racing conditions and arbitrary dead-locks, CLFS data onthe disc can be damaged, also there is always the possibility that system users canmodify the encrypted data. Our study aims toward ensuring data integrity on CLFSwithout compromising on overall performance. This paper considers the standardmethods using file metadata check-summing in CLFS with the main goal toovercome one of its major limitations, low performance of File-System checksumming.CLFS matches our performance expectations, as it performs close enoughto non-cryptographic file systems. To improve the performance of the checksummingprocess we try to study and examine various design choices and proposean in-kernel database for storage and reduction of check-sum verification once in Nread requests

Метод организации защищенных файловых систем на основе криптографических примитивов контроля доступа

Modern organizations are increasingly focused on cloud computing, one of the commonly used service of cloud computing is remote storage. Among the key issues surrounding the use of this service is provide security of organization’s data. In this paper we present the method of secured file system organization based on cryptographic primitives for access control supporting enhanced access control model, using the internal key management and provides the necessary security and productivity.Современные организации все больше ориентированы на облачные вычисления, одним из направлений которых являются удаленные системы хранения данных. Среди ключевых вопросов использования этого сервиса можно выделить обеспечение безопасности данных организации. В данной статье предложен метод организации защищенных файловых систем, отличающийся совместным использованием симметричного шифрования и внутренней схемы управления ключами, поддерживающий расширенную модель контроля доступа, и обеспечивающий более высокую производительность при необходимой степени безопасности

CageCoach: Sharing-Oriented Redaction-Capable Distributed Cryptographic File System

The modern data economy is built on sharing data. However, sharing data can be an expensive and risky endeavour. Existing sharing systems like Distributed File Systems provide full read, write, and execute Role-based Access Control (RBAC) for sharing data, but can be expensive and difficult to scale. Likewise such systems operate on a binary access model for their data, either a user can read all the data or read none of the data. This approach is not necessary for a more read-only oriented data landscape, and one where data contains many dimensions that represent a risk if overshared. In order to encourage users to share data and smooth out the process of accessing such data a new approach is needed. This new approach must simplify the RBAC of older DFS approaches to something more read-only and something that integrates redaction for user protections. To accomplish this we present CageCoach, a simple sharing-oriented Distributed Cryptographic File System (DCFS). CageCoach leverages the simplicity and speed of basic HTTP, linked data concepts, and automatic redaction systems to facilitate safe and easy sharing of user data. The implementation of CageCoach is available at https://github.umn.edu/CARPE415/CageCoach

Secure data replication over untrusted hosts

In the Internet age, data replication is a popular technique for achieving fault tolerance and improved performance. With the advent of content delivery networks, it is becoming more and more frequent that data content is placed on hosts that are not directly controlled by the content owner, and because of this, security mechanisms to protect data integrity are necessary. In this paper we present a system architecture that allows arbitrary queries to be supported on data content replicated on untrusted servers. To prevent these servers from returning erroneous answers to client queries, we make use of a small number of trusted hosts that randomly check these answers and take corrective action whenever necessary. Additionally, our system employs an audit mechanism that guarantees that any untrusted server acting maliciously will eventually be detected and excluded from the system