Storage-based intrusion detection for Storage Area Networks (SANs)

Proceedings - Twenty -second IEEE/Thirteenth NASA Goddard Conference on Mass Storage Systems and Technologies

Volumn , Issue , 2005, Pages 118-127

  Banikazemi, Mohammad ^a   Poff, Dan ^a   Abali, Bulent ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTRUSION DETECTION SYSTEM (IDS); STORAGE AREA NETWORKS (SAN); STORAGE SYSTEMS;

COMPUTER SOFTWARE; REAL TIME SYSTEMS; VISUALIZATION;

DATA STORAGE EQUIPMENT;

EID: 27144528230     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MSST.2005.33     Document Type: Conference Paper

References (18)

1. A. Acharya, M. Uysal, and J. Saltz. Active Disks: Programming model, algorithms and evaluation. In Proceedings of Architectural Support for Programming Languages and Operating Systems, pages 81-91, 1998.
2. S. Axelsson. Research in intrusion-detection systems: a survey. Technical Report 98-17, Chalmers University of Technology, 1998.
3. B. Cheswick and S. Bellovin. Firewalls and Internet Security: Repelling the Wily Hacker. Addison-Wesley, 1994.
4. M. D. Flouris and A. Bilas. Clotho: Transparent data versioning at the block I/O level. In Proceedings of NASA/IEEE Conference on Mass Storage Systems and Technologies, 2004.
5. G. A. Gibson and R. V. Meter. Network attached storage architecture. Communications of the ACM, 43(11):37-45, 2000.
6. J. S. Glider, C. F. Fuente, and W. J. Scales. The software architecture of a SAN storage control system. IBM Systems Journal, 42(2):232-249, 2003.
7. J. L. Griffin, A. G. Pennington, J. S. Bucy, D. Choundappan, N. Muralidharan, and G. R. Ganger. On the feasibility of intrusion detection inside workstation disks. Technical Report CMU-PDL-03-106, Carnegie Mellon University, 2003.
8. G. F. Hughes. Wise drives. IEEE Spectrum, pages 37-41, August 2002.
9. IBM. IBM Total Storage DS4000 Series. http://www.storage.ibm.com/disk/ fastt.
10. K. Keeton, D. A. Patterson, and J. M. Hallerstein. A case for intelligent disks (IDISKs). SIGMOD Record, 27(3):42-52, 1998.
11. G. H. Kim and E. H. Spafford. The design and implementation of Tripwire: A fi le system integrity checker. In Proceedings of the 2nd ACM Conference on Security, 1994.
12. O. S. D. Lab. Iometer. http://www.iometer.org.
13. T. F. Lunt and R. Jagannathan. A prototype real-time intrusion-detection expert system. In Proceedings of IEEE Symposium on Security and Privacy, 1988.
14. NFR. NFR Security, http://www.nfr.net/.
15. A. G. Pennington, J. D. Stunk, J. L. Griffin, C. A. Soules, G. R. Goodson, and G. R. Ganger. Storage-based intrusion detection: Watching storage activity for suspicious behavior. In Proceedings of the 12th USENIX Security Symposium, 2003.
16. P. A. Porras and P. G. Neumann. Emerald: Event monitoring enabling responses to anomalous live disturbances. In Proceedings of National Information Systems Security Conference, 1997.
17. E. Riedel, C. Faloutsos, G. A. Gibson, and D. Nagel. Active disks for large-scale data processing. IEEE Computer, pages 368-74, June 2001.
18. E. Riedel, G. A. Gibson, and C. Faloutsos. Active storage for large-scale data mining and multimedia applications. In Proceedings of International Conference on Very Large Databases, pages 62-73, 1998.