Ensuring data integrity in storage: Techniques and applications

StorageSS'05 - Proceedings of the 2005 ACM Workshop on Storage Security and Survivability

Volumn , Issue , 2005, Pages 26-36

  Sivathanu, Gopalan ^a   Wright, Charles P ^a   Zadok, Erez ^a  

^a Stony Brook University   (United States)

Author keywords

File systems; Intrusion detection; Storage integrity

Indexed keywords

FILE SYSTEMS; INTRUSION DETECTION; STORAGE INTEGRITY;

DATA REDUCTION; INFORMATION TECHNOLOGY; QUALITY ASSURANCE; REDUNDANCY;

DATA STORAGE EQUIPMENT;

EID: 33244492171     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1103780.1103784     Document Type: Conference Paper

References (43)

1. W. Barlett and L. Spainbower. Commercial fault tolerance: A tale of two systems. In Proceedings of the IEEE Transactions on Dependable and Secure Computing, pages 87-96, January 2004.
2. E. W. Biersack. Performance evaluation of Forward Error Correction in ATM networks. In SIGCOMM '92; Conference proceedings on Communications architectures & protocols, pages 248-257, New York, NY, USA, 1992. ACM Press.
3. M. Blaze. A Cryptographic File System for Unix. In Proceedings of the first ACM Conference on Computer and Communications Security, pages 9-16, Fairfax, VA, 1993. ACM.
4. CERT Coordination Center. CERT/CC Overview incident and Vulnerability Trends Technical Report. www.cert.org/present/cert-overview-trends.
5. W. Craig and P. M. McNeal. Radmind: The Integration of Filesystem Integrity Checking with File System Management. In Proceedings of the 17th USENIX Large Installation System Administration Conference (LISA 2003), October 2003.
6. P. A. DesAutels. SHA1: Secure Hash Algorithm. www.w3.org/PICS/DSig/ SHA1_1_0.html, 1991.
7. K. Fu, M. F. Kaashoek, and D. Mazières. Fast and Secure Distributed Read-Only File System. In Proceedings of the Fourth Symposium on Operating Systems Design and Implementation (OSDI 2000), pages 181-196, San Diego, CA, October 2000.
8. E. Gal and S. Toledo. A transactional flash file system for microcontrollers. In Usenix '05; Proceedings of the Usenix Annual Technical Conference, pages 89-104, Anaheim, CA., USA, 2005. Usenix.
9. S. Ghemawat, H. Gobioff, and S. T. Leung. The Google File System. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP '03), pages 29-43, Bolton Landing, NY, October 2003.
10. G. A. Gibson, D. F. Nagle, W. Courtright II, N. Lanza, P. Mazaitis, M. Unangst, and J. Zelenka. NASD Scalable Storage Systems. In Proceedings of the 1999 USENIX Extreme Linux Workshop, Monterey, CA, June 1999.
11. L. Golubchik and R. Muntz. Fault tolerance issues in data declustering for parallel database systems. Bulletin of the Technical Committee on Data Engineering, 14-28, September 1994.
12. R. Hagmann. Reimplementing the cedar file system using logging and group commit. ACM SIGOPS Operating Systems Review, 21(5):155-162, 1987.
13. R. W. Hamming. Error detecting and error correcting codes. The Bell System Technical Journal, Vol XXVI, April 1950.
14. W. Hsu and S. Ong. Fossilization: A Process for Establishing Truly Trustworthy Records. IBM Research Report, (10331), 2004.
15. A. Kashyap, J. Dave, M. Zubair, C. P. Wright, and E. Zadok. Using the Berkeley Database in the Linux Kernel. www.fsl.cs.suysb.edu/project-kbob.html, 2004.
16. A. Kashyap, S. Patil, G. Sivathanu, and E. Zadok. I3FS: An In-Kernel Integrity Checker and Intrusion Detection File System. In Proceedings of the 18th USENIX Large Installation System Administration Conference (LISA 2004), pages 69-79, Atlanta, GA, November 2004. USENIX Association.
17. G. Kim and E. Spafford. Experiences with Tripwire: Using Integrity Checkers for Intrusion Detection. In Proceedings of the Usenix System Administration, Networking and Security (SANS III), 1994.
18. G. Kim and E. Spafford. The Design and Implementation of Tripwire: A File System Integrity Checker. In Proceedings of the 2nd ACM Conference on Computer Commutations and Society (CCS), November 1994.
19. H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-hashing for message authentication. Technical Report RFC 2104, Internet Activities Board, February 1997.
20. M. Mesnier, G. R. Ganger, and E. Riedel. Object based storage. IEEE Communications Magazine, 41, August 2003. ieeexplore.ieee.org.
21. E. Miller, W. Freeman, D. Long, and B. Reed. Strong Security for Network-Attached Storage. In Proceedings of the First USENIX Conference on File and Storage Technologies (FAST 2002), pages 1-13, Monterey, CA, January 2002.
22. A. Muthitacharoen, B. Chen, and D. Mazieres. A Low-Bandwidth Network File System. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP '01), Chateau Lake Louise, Banff, Canada, October 2001.
23. Osiris. Osiris: Host Integrity Management Tool, 2004. www.osiris.can.
24. D. Patterson, G. Gibson, and R. Katz. A case for redundant arrays of inexpensive disks (RAID). In Proceedings of the ACM SIGMOD, pages 109-116, June 1988.
25. E. W. Patterson and E. J. Weldon. Error-correcting codes. MIT Press Cambridge, 2nd ed., 1972.
26. V. Prabhakaran, N. Agrawal, L. N. Bairavasundaram, H. S. Gunawi, A. C. Arpaci-Dusseau, and R. H. Arpaci-Dusseau. IRON File Sysetms. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP '05), Brighton, UK, October 2005.
27. S. Quinlan and S. Dorward. Venti: a new approach to archival storage. In Proceedings of First USENIX conference on File and Storage Technologies, pages 89-101, Monterey, CA, January 2002.
28. R. J. McEliece and D. V. Sarwate. On sharing secrets and Reed-Solomon codes. Commun. ACM, 24(9):583-584, 1981.
29. D. D. Redell, Y. K. Dalal, T. R. Horsley, H. C. Lauer, W. C. Lynch, P. R. McJones, H. G. Murray, and S. C. Purcell. Pilot: An operating system for a personal computer. In Proceedings of the 7th ACM Symposium on Operating Systems Principles (SOSP), pages 106-107, 1979.
30. R. L. Rivest. RFC 1321: The MD5 Message-Digest Algorithm. In Internet Activities Board. Internet Activities Board, April 1992.
31. Samhain Labs. Samhain: File System Integrity Checker, 2004. http://sarhain.sourceforge.net.
32. M. Seltzer and O. Yigit. A new hashing package for UNIX. In Proceedings of the Winter USENIX Technical Conference, pages 173-184, Dallas, TX, January 1991. USENIX Association.
33. G. Sivathanu, C. P. Wright, and E. Zadok. Enhancing File System Integrity Through Checksums. Technical Report FSL-04-04, Computer Science Department, Stony Brook University, May 2004. www.fsl.cs.dunydb.edu/cbcs/rc-checksum-tr/rc- checksum.pdf
34. M. Sivathanu, V. Prabhakaran, F. I. Popovici, T. E. Denehy, A. C. Arpaci-Dusseau, and R. H. Arpaci-Dusseau. Semantically-Smart Disk Systems. In Proceedings of the Second USENIX Conference on File and Storage Technologies (FAST '03), pages 73-88, San Francisco, CA, March 2003. USENIX Association.
35. C. A. Stein, J. H. Howard, and M. I. Seltzer. Unifying file system protection. In Proceedings of the Annual USENIX Technical Conference, pages 79-90, Boston, MA, June 2001. USENIX Association.
36. J. D. Strunk, G. R. Goodson, M. L. Scheinholtz, C. A. N. Soules, and G. R. Ganger. Self-Securing Storage: Protecting Data in Compromised Systems. In Proceedings of the Fourth Symposium on Operating Systems Design and Implementation, pages 165-180, San Diego, CA, October 2000.
37. Sun Microsystems, Inc. Solaris ZFS file storage solution. Solaris 10 Data Sheets, 2004. www.sun.com/software/solaris/ds/zfs.jsp
38. A Trigdell and P Mackerras. The rsync algorithm. 1998. Australian National University.
39. Tripwire Inc. Tripwire Software, www.tripwire.com
40. G. Weinberg. The solaris dynamic file system. 2004.
41. C. P. Wright, J. Dave, and E. Zadok. Cryptographic File Systems Performance: What You Don't Know Can Hurt You. Technical Report FSL-03-02, Computer Science Department, Stony Brook University, August 2003. www.fsl.cs.sunysb.edu/cbcs/nc-perf/perf/pdf.
42. C. P. Wright, M. Martino, and E. Zadok. NCryptfs: A Secure and Convenient Cryptographic File System. In Proceedings of the Annual USENIX Technical Conference, pages 197-210, San Antonio, TX, June 2003. USENIX Association.
43. E. Zadok, J. M. Anderson, I. Bãdulescu, and J. Nieh. Fast Indexing: Support for size-changing algorithms in stackable file systems. In Proceedings of the Annual USENIX Technical Conference, pages 289-304, Boston, MA, June 2001. USENIX Association.