Capability based secure access control to networked storage devices

Proceedings - 24th IEEE Conference on Mass Storage Systems and Technologies, MSST 2007

Volumn , Issue , 2007, Pages 114-125

  Factor, Michael ^a   Naor, Dalit ^a   Rom, Eran ^a   Satran, Julian ^a   Tal, Sivan ^a  

^a IBM HAIFA RESEARCH LAB   (Israel)

Author keywords

Access control; Capability based security protocol; Networked storage; Security; Storage; Virtualization

Indexed keywords

CONTROL SYSTEMS; DATA STORAGE EQUIPMENT; LAND USE; MECHANISMS; NETWORK COMPONENTS; SECURITY SYSTEMS; TELECOMMUNICATION NETWORKS;

CONTROL SECURITY; EXISTING SYSTEMS; FINE GRAINED; IN BAND; MASS STORAGE SYSTEMS; NETWORKED STORAGE; OBJECT-BASED STORAGE DEVICE (OSD); PERFORMANCE IMPACTS; PHYSICAL NETWORKS; SECURITY MECHANISMS; SECURITY MODELING; STORAGE AREA NETWORKS (SANS); TRANSPORT NETWORKS; VIRTUALIZATION;

ACCESS CONTROL;

EID: 47249111384     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MSST.2007.4367968     Document Type: Conference Paper

References (29)

1. Fibre channel link services. http://www.t11.org/ftp/t11/pub/fc/ls/06- 393v6.pdf.
2. Fibre channel security protocols. http://www.t11.org/ftp/t11/pub/fc/sp/ 06-157v3.pdf.
3. Scsi primary commands. http://www.t10.org/ftp/t10/drafts/spc4/spc4r09. pdf.
4. Storage networking industry association. http://www.snia.org.
5. Technical committee t10. http://www.t10.org.
6. Virtual pc overview. http://www.microsoft.com/windows/virtualpc/ evaluation/techoverview.mspx.
7. Scsi object-based storage device commands. In T10 Technical Committee of INCITS, October 4, 2004.
8. M. K. Aguilera, M. Ji, M. Lillibridge, J. MacCormick, E. Oertli, D. G. Andersen, M. Burrows, T. Mann, and C. Thekkath. Block-Level Security for Network-Attached Disks. In Proc. 2nd USENIX Conference on File and Storage Technologies, Mar. 2003.
9. W. J. Armstrong, R. L. Arndt, D. C. Boutcher, R. G. Kovacs, D. Larson, K. A. Lucke, N. Nayar, and R. C. Swanberg. Advanced virtualization capabilities of power5 systems. IBM J. Res. Dev., 49(4/5):523-532, 2005.
10. A. Azagury, R. Canetti, M. Factor, S. Halevi, E. Henis, D. Naor, N. Rinetzky, O. Rodeh, and J. Satran. A two layered approach for securing an object store network. In SISW '02: Proceedings of the First International IEEE Security in Storage Workshop, page 10, Washington, DC, USA, 2002. IEEE Computer Society.
11. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauery, I. Pratt, and A. Warfield. Xen and the art of virtualization. In In Proceedings of the 19th ACM Symposium on Operating Systems Principles, October 2003.
12. C. Clark, K. Fraser, S. Hand, J. G. Hanseny, E. July, C. Limpach, I. Pratt, and A. Warfield. Live migration of virtual machines. In In Proceedings of the 2nd ACM/USENIX Symposium on Networked Systems Design and Implementation (NSDI), Boston, MA, May 2005.
13. R. Coker. Bonnie++ benchmark tool. 2004. http://www.coker.com.au/ bonnie++/.
14. M. DeBergalis, P. F. Corbett, S. Kleiman, A. Lent, D. Noveck, T. Talpey, and M. Wittle. The direct access file system. In FAST, 2003.
15. T. S. Denis. Libtomcrypt - modular cryptographic library. http://libtomcrypt.org.
16. M. Factor, D. Nagle, D. Naor, E. Riedel, and J. Satran. The osd security protocol. In SISW '05: Proceedings of the Third IEEE International Security in Storage Workshop (SISW05), pages 29-39, Washington, DC, USA, 2005. IEEE Computer Society.
17. H. Gobioff. Security for a High Performance Commodity Storage Subsystem. PhD thesis, Carnegie Mellon University, 1999.
18. S. Halevi, P. A. Karger, and D. Naor. Enforcing confinement in distributed storage and a cryptographic model for access control. Cryptology ePrint Archive, Report 2005/169, 2005. http://eprint.iacr.org/.
19. J. Katcher. Postmark: A new file system benchmark. In NetApp Technical Report TR-3022, 1997.
20. S. T. King, G. W. Dunlap, and P. M. Chen. Operating system support for virtual machines. In USENIX Annual Technical Conference, General Track, pages 71-84, 2003.
21. J. T. Kohl, B. C. Neuman, and T. Y. Ts'o. The evolution of the Kerberos authentication service. In Proceedings of the Spring 1991 EurOpen Conference, 1991.
22. A. W. Leung and E. L. Miller. Scalable security for large, high performance storage systems. In StorageSS '06: Proceedings of the second ACM workshop on Storage security and survivability, pages 29-40, New York, NY, USA, 2006. ACM Press.
23. D. Mazieres. Don't trust your file server. In HOTOS '01: Proceedings of the Eighth Workshop on Hot Topics in Operating Systems, page 113, Washington, DC, USA, 2001. IEEE Computer Society.
24. E. L. Miller, D. D. E. Long, W. E. Freeman, and B. Reed. Strong security for network-attached storage. In FAST '02: Proceedings of the Conference on File and Storage Technologies, pages 1-13, Berkeley, CA, USA, 2002. USENIX Association.
25. B. Pawlowski, S. Shepler, C. Beame, B. Callaghan, M. Eisler, D. Noveck, D. Robinson, and R. Thurlow. The NFS version 4 protocol. Proceedings of the 2nd international system administration and networking conference (SANE2000), page 94, 2000.
26. B. C. Reed, E. G. Chron, R. C. Burns, and D. D. E. Long. Authenticating network-attached storage. IEEE Micro, 20(1 ):49-57, 2000.
27. R. Rose. Survey of system virtualization techniques.
28. J. G. Steiner, B. C. Neuman, and J. I. Schiller. Kerberos: An authentication service for open network systems. In Proceedings of the USENIX Winter 1988 Technical Conference, pages 191-202, Berkeley, CA, 1988. USENIX Association.
29. A. Whitaker, M. Shaw, and S. Gribble. Denali: Lightweight virtual machines for distributed and networked applications, 2002.