Strong security for network-attached storage

Proceedings of the FAST 2002 Conference on File and Storage Technologies

Volumn , Issue , 2002, Pages

  Miller, Ethan L ^a   Freeman, William E ^b   Long, Darrell D E ^a   Reed, Benjamin C ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b NORTHROP GRUMMAN CORPORATION   (United States)

^c IBM RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY; DATA TRANSFER RATES; DENIAL-OF-SERVICE ATTACK; FILE ORGANIZATION; VIRTUAL STORAGE;

FILE SYSTEMS; NETWORK ATTACHED STORAGE; PERFORMANCE LOSS; PERFORMANCE PENALTIES; SECURE NETWORKS; STRONG SECURITIES; TRANSFER RATES; UNAUTHORIZED USERS;

NETWORK SECURITY;

EID: 85084162873     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (28)

1. T. Anderson, M. Dahlin, J. Neefe, D. Patterson, D. Roselli, and R. Y. Wang. Serverless network file systems. ACM Trans. Comput. Syst., 14(1):41–79, Feb. 1996.
2. M. Bellare, R. Canetti, and H. Krawczyk. Keying hash functions for message authentication. Lecture Notes in Computer Science, 1109:1–15, 1996.
3. M. Blaze. A cryptographic file system for Unix. In Proceedings of the First ACM Conference on Computer and Communication Security, pages 9–15, Nov. 1993.
4. M. Blaze. Transparent mistrust: OS support for cryptography-in-the-large. In Proceedings of the Fourth Workshop on Workstation Operating Systems, pages 98–102, 1993.
5. M. Blaze. Key management in an encrypting file system. In Proceedings of the Summer 1994 USENIX Technical Conference, pages 27–34, June 1994.
6. G. Cattaneo, L. Catuogno, A. D. Sorbo, and P. Persiano. The design and implementation of a transparent cryptographic file system for UNIX. In Proceedings of the Freenix Track: 2001 USENIX Annual Technical Conference, pages 199–212, Boston, MA, June 2001.
7. J. Daemen and V. Rijmen. The block cipher Rijndael. In Proceedings of the Third Smart Card Research and Advanced Applications Conference, 1998.
8. H. Dobbertin. Cryptanalysis of MD4. Lecture Notes in Computer Science, 1039:53–69, 1996. Fast Software Encryption Workshop.
9. W. Freeman and E. Miller. An experimental analysis of cryptographic overhead in performance-critical systems. In Proceedings of the 7th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS’99), pages 348–357, College Park, MD, Oct. 1999. IEEE.
10. W. Freeman and E. Miller. Design for a decentralized security system for network-attached storage. In Proceedings of the 17th IEEE Symposium on Mass Storage Systems and Technologies, pages 361–373, College Park, MD, Mar. 2000.
11. K. Fu, M. F. Kaashoek, and D. Mazières. Fast and secure distributed read-only file system. In Proceedings of the 4th Symposium on Operating Systems Design and Implementation (OSDI), pages 181–196, San Diego, CA, Oct. 2000.
12. G. A. Gibson, D. F. Nagle, K. Amiri, J. Butler, F. W. Chang, H. Gobioff, C. Hardin, E. Riedel, D. Rochberg, and J. Zelenka. A cost-effective, high-bandwidth storage architecture. In Proceedings of the 8th Interational Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 92–103, San Jose, CA, Oct. 1998.
13. H. Gobioff. Security for a High Performance Commodity Storage Subsystem. PhD thesis, Carnegie Mellon University, July 1999. Also available as Technical Report CMU-CS-99-160.
14. J. H. Howard, M. L. Kazar, S. G. Menees, D. A. Nichols, M. Satyanarayanan, R. N. Sidebotham, and M. J. Wes. Scale and performance in a distributed file system. ACM Trans. Comput. Syst., 6(1):51–81, Feb. 1988.
15. J. Ioannidis and M. Blaze. The architecture and implementation of network-layer security under Unix. In Proceedings of the First ACM Conference on Computer and Communication Security, pages 29–39, Nov. 1993.
16. E. K. Lee and C. A. Thekkath. Petal: Distributed virtual disks. In Proceedings of the 7th Interational Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 84–92, Cambridge, MA, 1996.
17. U. Maheshwari, R. Vingralek, and B. Shapiro. How to build a trusted database system on untrusted storage. In Proceedings of the 4th Symposium on Operating Systems Design and Implementation (OSDI), pages 135–150, San Diego, CA, Oct. 2000.
18. D. Mazières, M. Kaminsky, M. F. Kaashoek, and E. Witchel. Separating key management from file system security. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP’99), pages 124–139, Dec. 1999.
19. D. Mazières and D. Shasha. Don’t trust your file server. In Proceedings of the 8th IEEE Workshop on Hot Topics in Operating Systems (HotOSVIII), pages 99–104, Schloss Elmau, Germany, May 2001.
20. B. C. Neumann, J. G. Steiner, and J. I. Schiller. Kerberos: An authentication service for open network systems. In Proceedings of the Winter 1988 USENIX Technical Conference, pages 191–201, Dallas, TX, 1988.
21. B. Reed, E. Chron, R. Burns, and D. D. E. Long. Authenticating network attached storage. IEEE Micro, 20(1):49–57, Jan. 2000.
22. J. Reid. Plugging the holes on host-based authentication. In Computers and Security, pages 661–671, 1996.
23. B. Schneier. Applied Cryptography. Wiley, New York, NY, 2nd edition, 1996.
24. M. Spasojevic and M. Satyanarayanan. An empirical study of a wide-area distributed file system. ACM Trans. Comput. Syst., 14(2):200–222, May 1996.
25. J. D. Strunk, G. R. Goodson, M. L. Scheinholtz, C. A. N. Soules, and G. R. Ganger. Self-securing storage: Protecting data in compromised systems. In Proceedings of the 4th Symposium on Operating Systems Design and Implementation (OSDI), pages 165–180, Oct. 2000.
26. M. J. Wiener. Performance comparison of public-key cryptosystems. RSA CryptoBytes, 4(1), Summer 1998.
27. E. Zadok, I. Badulescu, and A. Shender. Cryptfs: A stackable vnode level encryption file system. Technical Report CUCS-021-98, Columbia University, 1998.
28. P. Zimmerman. PGP Source Code and Internals. MIT Press, 1995.