| 统一存储网络安全研究 |
| |
| 引用本文： | 黄建忠,谢长生,韩德志.统一存储网络安全研究[J].上海大学学报(英文版),2005,9(3):249-254. |
| |
| 作者姓名： | 黄建忠 谢长生 韩德志 |
| |
| 作者单位： | NationalStorageSystemLaboratory,HuazhongUniversityofScienceandTechnology,Wuhan430074,P.R.China |
| |
| 基金项目： | theNationalNaturalScienceFoundationofChina(GrantNo.60173043),NationalBasicResearchProgramofChina(973—GrantNo.2004CB318203) |
| |
| 摘 要： | With development of networked storage and its applications, united storage network (USN) combined with network attached storage (NAS) and storage area network (SAN) has emerged. It has such advantages as high performance, low cost, good connectivity, etc. However the security issue has been complicated because USN responds to block I/O and file I/O requests simultaneously. In this paper, a security system module is developed to prevent many types of atl~cks against USN based on NAS head.The module not only uses effective authentication to prevent unauthorized access to the system data, but also checks the data integrity.Experimental results show that the security module can not only resist remote attacks and attacks from those who has physical access to the USN, but can also be seamlessly integrated into underlying file systems, with little influence on their performance.
|
| 关 键 词： | 网络存储 联合存储 存储技术 存储安全 |
| 收稿时间： | 17 June 2003 |
Security system in united storage network and its implementation |
| |
| Huang?Jian-zhong,Xie?Chang-sheng,Han?De-zhi.Security system in united storage network and its implementation[J].Journal of Shanghai University(English Edition),2005,9(3):249-254. |
| |
| Authors: | Huang Jian-zhong Xie Chang-sheng Han De-zhi |
| |
| Institution: | National Storage System Laboratory, Huazhong University of Science and Technology, Wuhan 430074, P.R. China |
| |
| Abstract: | With development of networked storage and its applications, united storage network (USN) combined with network attached storage (NAS) and storage area network (SAN) has emerged. It has such advantages as high performance, low cost, good connectivity, etc. However the security issue has been complicated because USN responds to block I/O and file I/O requests simultaneously. In this paper, a security system module is developed to prevent many types of attacks against USN based on NAS head. The module not only uses effective authentication to prevent unauthorized access to the system data, but also checks the data integrity. Experimental results show that the security module can not only resist remote attacks and attacks from those who has physical access to the USN, but can also be seamlessly integrated into underlying file systems, with little influence on their performance. |
| |
| Keywords: | network attached storage (NAS) storage area network (SAN) united storage network (USN) hashed message authentication code (HMAC) |
| 本文献已被 CNKI 维普 万方数据 SpringerLink 等数据库收录！ |
|
