基于Thin Hypervisor的USB设备访问控制

USB移动存储设备体积小、容量大、便于携带等优点，被广泛应用于数据的传输和备份.但是USB移动存储设备的这些特点也给数据的保护带来了很大的挑战.因为盗窃数据者可以轻易的利用USB移动存储设备带走数据.目前存在的针对USB存储设备访问控制的研究，主要基于应用层或操作系统内核层.当系统中存在恶意代码时，这些安全访问控制实施的模块很容易被旁路.为解决实施模块的安全性问题，实现了一种基于Thin Hypervisor的USB存储设备安全访问控制系统，它利用Thin Hypervisor对操作系统透明的特点，使得该系统不受操作系统安全性的影响，从而达到更加安全的目的.

Access Control on USB Mass Storage Devices Based on Thin Hypervisor

USB mobile storage devices are widely used to transfer and exchange data for their small size and large capacity. These features provide challenges for us to protect our confidential information because thieves can take secrets away by USB storage devices easily. At present, there are many studies on how to protect confidential data on USB storage devices. Most of these studies are based on application layer or operating system layer. When there are malicious codes on operating system, the operations protecting confidential information can be easily bypassed by attackers. In this paper, we present a USB devices access control system which is implemented on a thin hypervisor. The thin hypervisor is transparent to OS, which can guarantee that the security of the system is independent of OS, so that the system can be more secure.