云防御系统中用户隐私保护机制

云防御系统中用户隐私保护机制 User’s Privacy Protection on Cloud-Based Anti-Malware System 胡刚 HU Gang 1 first-author 邹德清 ZOU Deqing 1 孔华峰 KONG Huafeng 2 杨洁勇 YANG Jieyong 1 华中科技大学计算机科学与技术学院 华中科技大学计算机科学与技术学院 School of Computer Science and Technology,Huazhong University of Science and Technology School of Computer Science and Technology,Huazhong University of Science and Technology 公安部第三研究所 公安部第三研究所 The Third Research Institute of Ministry of Public Security The Third Research Institute of Ministry of Public Security 基于云模式,针对不同类型的文件采用了不同的隐私保护处理方法,对Office类型文件,分析了它的二进制格式,清除其中的机密数据,生成一个只保留宏相关信息的文件以用于云端扫描;对其他类型文件,用隐式数据分割机制将文件分片,加密部分分片文件并保存于分布式哈希表（distributed hash table,DHT）网络中,云端扫描完成后销毁分片文件数据.攻击者即使得到部分分片文件也无法恢复出原文件.系统测试结果表明,该方案有效降低用户隐私泄露的风险. In this paper,multiple-level strategies are proposed to handle different kinds of files for privacy protection.We analyze the Office file’s binary format,clear the data stream in it,and generate a new file which contains only micro objects and some format related information.For other kinds of files,we use implicit data partitioning mechanism to divide files into segments,encrypt file segments,and store them into DHT（Distributed Hash Table）network.After the cloud finishes file scanning,the files become unreadable.The experiment shows that our solution has effectively reduced the leakage risk of privacy data. 云计算 主动防御 隐私保护 数据分割 数据自销毁 cloud computing active defense privacy protection data segmentation data self-destruction 10.14188/j.1671-8836.2014.06.007 TP309 国家高技术研究发展（863）计划（2012AA012600）资助项目 2014-06-01 2021-04-01 6 60