Design, implementation and evaluation of security in iSCSI-based network storage systems

Proceedings of the Second ACM International Workshop on Storage Security and Survivability, Storage SS'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 17-28

  Chaitanya, Shiva ^a   Butler, Kevin ^a   Sivasubramaniam, Anand ^a   McDaniel, Patrick ^a   Vilayannur, Murali ^b  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

^b ARGONNE NATIONAL LABORATORY   (United States)

Author keywords

Authentication; Encryption; IPSec; ISCSI

Indexed keywords

IPSEC; MICROBENCHMARKS; SECURITY PROTOCOLS; STORAGE AREA NETWORKS;

AUTHENTICATION; CRYPTOGRAPHY; DATABASE SYSTEMS; ETHERNET; NETWORK PROTOCOLS; SERVERS; TELECOMMUNICATION TRAFFIC;

NETWORK SECURITY;

EID: 34547471190     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179559.1179564     Document Type: Conference Paper

References (27)

1. Linux iSCSI Target Implementation, ARDIS Technologies. http://www.ardistech.com/iscsi.
2. Open-iSCSI Project, A Multi-Platform Implementation of iSCSI RFC. http://www.open-iscsi.org.
3. A. Chadda and A. Palekar and R. Russel and N. Ganapathy. Design, implementation and performance analysis of the iSCSI protocol for SCSI over TCP/IP. In Proceedings of the Internetworking 2003 conference, 2003.
4. M. Aguilera, M. Ji, M. Lillibridge, J. Maccormick, E. Oertli, D. Andersen, M. Burrows, T. Mann, and C. Thekkath. Block-level Security for Network-Attached Disks. In Proceedings of the Conference on File and Storage Technologies, 2003.
5. D. H. Bailey, E. Barszcz, J. T. Barton, D. S. Browning, R. L. Carter, D. Dagum, R. A. Fatoohi, P. O. Frederickson, T. A. Lasinski, R. S. Schreiber, H. D. Simon, V. Venkatakrishnan, and S. K. Weeratunga. The NAS Parallel Benchmarks. The International Journal of Supercomputer Applications, pages 63-73, Fall 1991.
6. M. Blaze. A Cryptographic File System for UNIX. In Proceedings of the A CM Conference on Computer and Communications Security, pages 9-16, 1993.
7. E. D. Burgh. SAN Security Beyond Segmentation, 2004. http://www.sans.org/ rr/whitepapers/honors/1489.php.
8. D. Xinidis and M. D. Flouris and A. Bilas. Performance Evaluation of Commodity iSCSI-based Storage Systems. In Proceedings of the Twenty Second IEEE, Thirteenth NASA Goddard Conference on Mass Storage Systems and Technologies, 2005.
9. T. W. Draft. Information Technology - SCSI Object Based Storage Device Commands (OSD). http://www.t10.org/ftp/t10/drafts/osd/osd-r10.pdf.
10. E. Miller and W. Freeman and D. Long and B. Reed. Strong Security for Network-Attached Storage. In Proceedings of the Conference on File and Storage Technologies, 2002.
11. F. Tomonori and O. Masanori. Performance of Optimized Software Implementation of iSCSI. In Proceedings of the Workshop on Storage Network Architecture and Parallel I/Os (SNAPI), 2003.
12. K. Fu, M. F. Kaashoek, and D. Mazieres. Fast and Secure Distributed Read-only File System. In Proceedings of the Usenix Symposium on Operating Systems Design and Implementation, pages 181-196, October 2000.
13. G. Caronni and H. Lubich and A. Aziz and T. Markson and R. Skrenta. SKIP-securing the Internet. In Proceedings of the 5th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WET ICE'96), page 62, Washington, DC, USA, 1996. IEEE Computer Society.
14. G. R. Goodson and J. J. Wylie and G. R. Ganger and M. K. Reiter. Efficient Byzantine-Tolerant Erasure-Coded Storage. In Proceedings of the 2004 International Conference on Dependable Systems and Networks (DSN'04), page 135, Washington, DC, USA, 2004. IEEE Computer Society.
15. E. Goh, H. Shacham, N. Modadugu, and D. Boneh. SiRiUS: Securing Remote Untrusted Storage. In Proceedings of the Internet Society Network and Distributed Systems Security Symposium, 2003.
16. H. Gobioff and D. Nagle and G. Gibson. Integrity and Performance in Network Attached Storage. Technical Report CMU-CS-98-182, Carnegie Mellon University - School of Computer Science, 1998.
17. H. Gobioff and G. Gibson and D. Tygar. Security for Network Attached Storage Devices. Technical Report CMU-CS-97-185, Carnegie Mellon University - School of Computer Science, 1997.
18. H. M. Khosravi and A. Joglekar. Performance Characterization of iSCSI processing in a server platform. In Proceedings of the Twenty Fourth IEEE International Performance Computing and Communications Conference, 2005.
19. M. Kallahalla, E. Riedel, R. Swaminathan, Q. Wang, and K. Fu. Plutus - Scalable Secure File Sharing on Untrusted Storage. In Proceedings of the Conference on File and Storage Technologies, pages 29-42, March 2003.
20. M. Abd-El-Malek and G. R. Ganger and M. K. Reiter and J. J. Wylie and G. R. Goodson. Lazy Verification in Fault-Tolerant Distributed Storage Systems. In Proceedings of the 24th IEEE Symposium on Reliable Distributed Systems (SRDS'05), pages 179-190, Washington, DC, USA, 2005. IEEE Computer Society.
21. E. Riedel, M. Kallahalla, and R. Swaminathan. A Framework for Evaluating Storage System Security. In Proceedings of the Conference on File and Storage Technologies, pages 15-30, 2002.
22. S-Yi Tang and Y. Lu and D. Du. Performance Study of Software-based iSCSI Security. In Proceedings of the First International IEEE Security in Storage Workshop, 2002.
23. J. D. Strunk, G. R. Goodson, M. L. Scheinholtz, C. A. N. Soules, and G. R. Ganger. Self-Securing Storage: Protecting Data in Compromised Systems. In Proceedings of the Usenix Symposium on Operating Systems Design and Implementation, pages 165-180, October 2000.
24. W. T. Ng and H. Sun and B. Hillyer and E. Shiver and E. Gabber and B. Ozden. Obtaining high performance for storage outsourcing. In Proceedings of the 2001 A CM SIGMETRICS Conference on Measurement and Modeling of Computer Systems, 2001.
25. J. J. Wylie, M. W. Bigrigg, J. D. Strunk, G. R. Ganger, H. Kilite, and P. K. Khosla. Survivable Information Storage Systems. IEEE Computer, 33(8):61-68, August 2000.
26. X. He and Q. Yang. A Caching Strategy to improve iSCSI performance. In Proceedings of the Twenty Seventh Annual IEEE International Conference on Local Computer Networks, 2002.
27. Y. Shastry and S. Klotz and R. Russell. Evaluating the effect of iSCSI protocol parameters on performance. In Proceedings of the Parallel and Distributed Computing and Networks, 2005.