Non-volatile memory and disks: Avenues for policy architectures

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2007, Pages 77-84

  Butler, Kevin R B ^a   McLaughlin, Stephen E ^a   McDaniel, Patrick D ^a  

^a The Pennsylvania State University   (United States)

Author keywords

Labels; NVRAM; Security; Storage

Indexed keywords

ACCESS CONTROL; MEMORY ARCHITECTURE; NETWORK SECURITY; RANDOM ACCESS STORAGE;

COMPUTING MODEL; DISTRIBUTED SYSTEMS; MODEL CHANGE; NON-VOLATILE MEMORY; NVRAM; PERFORMANCE REQUIREMENTS; POLICY ARCHITECTURE; SECURITY; STORAGE SYSTEMS; VIRTUALIZED SYSTEMS;

VIRTUAL STORAGE;

EID: 74049149531     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1314466.1314479     Document Type: Conference Paper

References (48)

1. A. Adya, W. J. Bolosky, M. Castro, G. Cermak, R. Chaiken, J. R. Douceur, J. Howell, J. R. Lorch, M. Theimer, and R. P. Wattenhofer. FARSITE: Federated, Available, and Reliable Storage for an Incompletely Trusted Environment. In Proceedings of the 5th USENIX Symposium on Operating Systems Design and Implementation (OSDI 2002), Boston, MA, Dec. 2002.
2. D. Bell and L. LaPadula. Secure Computer Systems: Mathematical Foundations and Model. Technical Report M74-244, MITRE Corporation, Bedford, MA, 1973.
3. K. Biba. Integrity Considerations for Secure Computer Systems. Technical Report MTR-3153, MITRE Corporation, Bedford, MA, Apr. 1977.
4. M. Blaze. A Cryptographic File System for UNIX. In Proceedings of the 1st ACM Conference on Computer and Communications Security (CCS'93), Fairfax, VA, USA, Nov. 1993.
5. D. F. C. Brewer and M. J. Nash. The Chinese Wall Security Policy. In Proceedings of the IEEE Symposium on Security and Privacy (S&P), Oakland, CA, USA, Apr. 1989.
6. K. Butler, S. McLaughlin, and P. McDaniel. High-Performance Disk Integrity through Block Chaining. Technical Report NAS-TR-0072-2007, Network and Security Research Center, Department of Computer Science and Engineering, Pennsylvania State University, University Park, PA, USA, June 2007.
7. G. Cattaneo, L. Cauogno, A. D. Sorbo, and P. Persiano. The design and implementation of a transparent cryptographic file system for UNIX. In Proceedings of the 2001 USENIX Annual Technical Conference, Boston, MA, USA, June 2001.
8. S. Chaitanya, K. Butler, P. McDaniel, and A. Sivasubramaniam. Design, Implementation and Evaluation of Security in iSCSI-based Network Storage Systems. In Proceedings of 2nd International Workshop on Storage Security and Survivability (StorageSS 2006), Alexandria, Virginia, October 2006.
9. P. Chen, J. Garay, A. Herzberg, and H. Krawczyk. Design and Implementation of Modular Key Management Protocol and IP Secure Tunnel. In Proceedings of 5th USENIX UNIX Security Symposium, pages 41-54. USENIX Association, 1996. Salt Lake City, Utah.
10. D. D. Clark and D. R. Wilson. A Comparison of Commercial and Military Computer Security Policies. In Proceedings of the IEEE Symposium on Security and Privacy (S&P), Oakland, CA, USA, Apr. 1987.
11. J. Corbet, A. Rubini, and G. Kroah-Hartman. Linux Device Drivers. O'Reilly, third edition, 2005.
12. J. B. Dennis and E. C. V. Horn. Programming semantics for multiprogrammed computations. Commun. ACM, 9(3):143-155, 1966.
13. M. Dworkin. Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality, May 2004. NIST Special Publication 800-38C.
14. M. Dworkin. Recommendation for Block Cipher Modes of Operation: The Galois/Counter Mode (GCM) for Confidentiality and Authentication, May 2006. NIST Special Publication 800-38D (DRAFT).
15. J. G. Dyer, M. Lindermann, R. Perez, R. Sailer, L. van Doorn, S. W. Smith, and S. Weingart. Building the IBM 4758 Secure Coprocessor. IEEE Computer, 39(10):57-66, Oct. 2001. (Pubitemid 32936296)
16. Engadget. Samsung's Hybrid Hard Drive (HHD) Released to OEMs. http://www.engadget.com/2007/03/07/samsungs-hybrid-hard-drive-hhd-released-to- oems/, Mar. 2007.
17. K. Fu. Group Sharing and Random Access in Cryptographic Storage File Systems. Master's thesis, MIT, June 1999.
18. K. Fu, M. F. Kaashoek, and D. Mazières. Fast and secure distributed read-only file system. ACM Trans. Comput. Syst., 20(1):1-24, Feb. 2002. (Pubitemid 135707562)
19. G. A. Gibson, D. F. Nagle, K. Amiri, F. W. Chang, E. Feinberg, H. Gobioff, C. Lee, B. Ozceri, E. Riedel, and D. Rochberg. A case for network-attached secure disks. Technical Report CMU-CS-96-142, Carnegie Mellon University, Pittsburgh, PA, USA, Sept. 1996.
20. E.-J. Goh, H. Shacham, N. Modadugu, and D. Boneh. SiRiUS: Securing Remote Untrusted Storage. In Proceedings of the 10th ISOC Symposium on Network and Distributed Systems (NDSS'03), San Diego, CA, USA, Feb. 2003.
21. H. Harney, U. Meth, A. Colegrove, and G. Gross. Group Secure Association Key Management Protocol. Internet Engineering Task Force, June 2006. RFC 4535.
22. B. Hicks, K. Ahmadizadeh, and P. McDaniel. Understanding Practical Application Development in Security-Typed Languages. In Proceedings of the 22nd Annual Computer Security Applications Conferences (ACSAC), Miami, FL, USA, Dec. 2006.
23. B. Hicks, S. J. R. Rodriguez, T. Jaeger, and P. McDaniel. From Trusted to Secure: Building and Executing Applications that Enforce System Security. In Proceedings of the USENIX Annual Technical Conference, San Jose, CA, USA, June 2007.
24. Hitachi. Hitachi Ultrastar 15K300 3.5-inch Enterprise Hard Disk Drives. http://www.hitachigst.com/tech/techlib.nsf/techdocs/ F0954C336AF5E24F862572C200563CB3/$file/Ultrastar-15K300-final-DS.pdf, Apr. 2007.
25. IEEE. IEEE P1619.1/20 Draft Standard for Authenticated Encryption with Length Expansion for Storage Devices. http://attachments.wetpaintserv.us/2Qjro\ %24n0iiv7kYZoz4BTmw\%3D\%3D326044, June 2007.
26. M. Kallahalla, E. Riedel, R. Swaminathan, Q. Wang, and K. Fu. Plutus: Scalable Secure File Sharing on Untrusted Storage. In Proceedings of the 2nd USENIX Conference on File and Storage Technologies (FAST'03), San Francisco, CA, Apr. 2003.
27. M. Kozuch and M. Satyanarayanan. Internet suspend/resume. In Proceedings of the Fourth IEEE Workshop on Mobile Computing Systems and Applications, pages 40-46. IEEE Computer Society, 2002.
28. J. Li, M. Krohn, D. Mazières, and D. Shasha. Secure Untrusted Data Repository (SUNDR). In Proceedings of the 6th USENIX Symposium on Operating Systems Design and Implementation (OSDI 2004), San Francisco, CA, Dec. 2004.
29. D. Mazières, M. Kaminsky, M. F. Kaashoek, and E. Witchel. Separating key management from file system security. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP'99), pages 124-139, Kiawah Island, SC, USA, Dec. 1999. (Pubitemid 129548352)
30. R. Merkle. Protocols for Public key Cryptosystems. In Proceedings of the 1980 Symposium on Security and Privacy, pages 122-133. IEEE, April 1980. Oakland, CA.
31. E. L. Miller, W. E. Freeman, D. D. E. Long, and B. C. Reed. Strong Security for Network-Attached Storage. In Proceedings of the 1st USENIX Conference on File and Storage Technologies (FAST'02), Monterey, CA, USA, Jan. 2002.
32. A. Oprea and M. K. Reiter. Integrity Checking in Cryptographic File Systems with Constant Trusted Storage. In Proceedings of the 16th USENIX Security Symposium, Boston, MA, USA, Aug. 2007.
33. A. Oprea, M. K. Reiter, and K. Yang. Space-Efficient Block Storage Integrity. In Proceedings of the 12th ISOC Symposium on Network and Distributed Systems Security (NDSS'05), San Diego, CA, USA, Feb. 2005.
34. Panasas. Panasas: System Hardware. http://www.panasas.com/hardware.html, 2007.
35. C. Park, J.-U. Kang, S.-Y. Park, and J.-S. Kim. Energy-Aware Demand Paging on NAND Flash-based Embedded Sources. In Proceedings of the International Symposium on Low Power Electronics and Design (ISLPED), Newport Beach, CA, USA, Aug. 2004.
36. S. Quinlan and S. Dorward. Venti: A New Approach to Archival Storage. In Proceedings of the 1st USENIX Conference on File and Storage Technologies (FAST'02), Monterey, CA, USA, Jan. 2002.
37. B. C. Reed, M. A. Smith, and D. Diklic. Security Considerations When Designing a Distributed File System Using Object Storage Devices. In Proceedings of the 1st IEEE Security in Storage Workshop (SISW'02), Greenbelt, MD, USA, Dec. 2002.
38. E. Riedel, C. Faloutsos, G. A. Gibson, and D. Nagle. Active Disk for Large-Scale Data Processing. IEEE Computer, pages 68-74, June 2001. (Pubitemid 32527648)
39. E. Riedel, M. Kallahalla, and R. Swaminathan. A Framework for Evaluating Storage System Security. In Proceedings of the 1st USENIX Conference on File and Storage Technologies (FAST'02), Monterey, CA, USA, Jan. 2002.
40. Seagate. The Advantages of Object-Based Storage - Secure, Scalable, Dynamic Storage Devices. Seagate Research TP-536, Apr. 2005.
41. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: a fast capability system. In SOSP, 1999.
42. G. Sivathanu, S. Sundararaman, and E. Zadok. Type-Safe Disks. In OSDI, 2006.
43. Small Form Factor Committee. Specification Draft for S.M.A.R.T. Applications Guide for the ATA and SCSI Interfaces. SFF-8055i, June 1996.
44. T10. Information tecnology - SCSI Object-Based Storage Device Commands (OSD). Project T10/1355D, Revision 10, July 2004.
45. M. Vilayannur, P. Nath, and A. Sivasubramaniam. Providing Tunable Consistency for a Parallel File Store. In Proceedings of the 4th USENIX Conference on File and Storage Technologies (FAST'05), San Francisco, CA, USA, Dec. 2003.
46. D. M. Wallner, E. J. Harder, and R. C. Agee. Key Management for Multicast: Issues and Architectures. Internet Engineering Task Force, June 1999. RFC 2627.
47. E. Zadok, I. Badulescu, and A. Shender. Cryptfs: A Stackable Vnode Level Encryption File System. Technical Report CUCS-021-98, Columbia University, New York, NY, USA, 1988.
48. Y. Zhu and Y. Hu. SNARE: A Strong Security System for Network-Attached Storage. In Proceedings of the 22nd International Symposium on Reliable Distributed Systems (SRDS'03), Florence, Italy, Oct. 2003.