Decentralized Authentication Mechanisms for Object-based Storage Devices

2nd IEEE International Security in Storage Workshop, SISW 2003

Volumn , Issue , 2003, Pages 1-10

  Kher, V ^a   Kim, Yongdae ^a  

^a UNIVERSITY OF MINNESOTA   (United States)

Author keywords

Access control; Authentication; Computer crime; Computer science; Cryptography; Data engineering; Information security; Scalability; Secure storage; Utility programs

Indexed keywords

ACCESS CONTROL; AUTHENTICATION; COMPUTER CRIME; COMPUTER SCIENCE; DENIAL-OF-SERVICE ATTACK; MANAGERS; NETWORK SECURITY; SCALABILITY; SECURITY OF DATA; UTILITY PROGRAMS; VIRTUAL STORAGE;

AUTHENTICATION MECHANISMS; AUTHENTICATION SCHEME; CRYPTOGRAPHIC PRIMITIVES; DATA ENGINEERING; OBJECT-BASED STORAGE; OBJECT-BASED STORAGE DEVICES; ROLE-BASED ACCESS CONTROL; SECURE STORAGE;

CRYPTOGRAPHY;

EID: 84948164689     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SISW.2003.10000     Document Type: Conference Paper

References (20)

1. Alain Azagury, Ran Canetti, Michael Factor, Shai Halevi, Ealan Henis, Dalit Naor, Noam Rinetzky, Ohad Rodeh, and Julian Satran. A two layered approach for securing an object store network. In Proceedings of the First IEEE International Security In Storage Workshop, December 2002.
2. M. Bellare, R. Canetti, and H. Krawczyk. Keying hash function for message authentication. Lecture Notes in Computer Science, 1996.
3. Matt Blaze. A cryptographic file system for unix. In Proceedings of the 1st ACM Conference on Communications and Computing Security, pages 9-16, Fairfax, VA, 1993. ACM Press.
4. W. Diffie and M. E. Hellman. New directions in cryptography. IEEE Trans. Inform. Theory, IT-22:644-654, November 1976.
5. I. Badulescu E. Zadok and A. Shender. Cryptfs: A stackable vnode level encryption file system. Technical Report CUCS-021-98, Columbia Univ., New York City, NY, 1998.
6. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Transactions on Information and System, August 2001.
7. David F. Ferraiolo and D. Richard Kuhn. Role-based access controls. In 15th NIST-NSA National Computer Security Conference, Baltimore, Maryland, October 1992.
8. D.F. Ferraiolo, D.M. Gilbert, and N. Lynch. An examination of federal and commercial access control policy needs. In NIST-NCSC National Computer Security Conference, 1993.
9. Garth Gibson, David Nagle, Khalil Amiri, Fay Chang, Eugene Feinberg, Howard Gobioff, Chen Lee, Berend Ozceri, Erik Riedel, David Rochberg, and Jim Zelenk. File server scaling with network-attached secure disk. In Proceedings of the ACM International Conference on Measurement and Modeling of Computer Systems (SIG-METRICS '97), June 1997.
10. H. Gobioff. Security for high performance commodity subsystem. PhD thesis, CMU, July 1999.
11. J.H Howard. An overview of the andrew file system. In Proceedings of the USENIX Winter Technical Conference, Dallas, TX, February 1998.
12. J. Hughes and C. Feist. Architecture of the secure file system. In Eighteenth IEEE Symposium on Mass Storage Systems, pages 277-290, San Diego, CA, April 2001.
13. J. Hughes, M. O'Keefe, C. Feist, S. Hawkinson, J. Perrault, and D. Corcoran. A universal access, smart-card-based, secure filesystem. In Atlanta Linux Showcase, October 1999.
14. Ermelindo Mauriello. TCFS: Transparent cryptographic filesystem. Linux Journal, 40, August 1997.
15. E. Miller, D. Long, W. Freeman, and B. Reed. Strong security for distributed file systems. In Proceedings of the Conference on File and Storage Technologies (FAST 2002), pages 1-13, January 2002.
16. B. Clifford Neumann and Theodore Ts'o. Kerberos: An authentication service for computer networks. IEEE Communications, 32(9):33-38, September 1994.
17. Brian Pawlowski, Spencer Shepler, Carl Beame, Brent Callaghan, Michael Eisler, David Noveck, David Robinson, and Robert Thurlow. The NFS version 4 protocol. March 2000.
18. B. Reed, E. Chron, R. Burns, and D. D. E. Long. Authenticating network attached storage. IEEE Micro, 20(1):49-57, January 2000.
19. Benjamin C. Reed, Mark A. Smith, and Dejan Diklic. Security considerations when designing a distributed file system using object storage devices. In Proceedings of the First IEEE International Security In Storage Workshop, December 2002.
20. M. Satyanarayanan. Integrating security in a large distributed system. In ACM Transactions on Computer Systems, volume 7, pages 247-280, 1989.