loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
First International IEEE Security in Storage Workshop
Secure Group Services for Storage Area Networks
Greenbelt, Maryland
December 11-December 11
ISBN: 0-7695-1888-5
Yongdae Kim, University of Minnesota
Maithili Narasimha, University of California Irvine
Fabio Maino, Andiamo Systems
Gene Tsudik, University of California Irvine
Storage Area Networks, with their ability to offer high data availability, reliability and scalability, are a promising solution for the large scale storage needs of many enterprises. As with any distributed storage system, a major design challenge for a Storage Area Network (SAN) is to provide data integrity and confidentiality. In this paper, we propose a solution which addresses these core security requirements. In particular, we focus on mechanisms that enable efficient key distribution to allow scalable data sharing. Our scheme uses strong cryptographic techniques to achieve data security and integrity. Further, we delegate the bulk of the cryptographic processing to the SAN entities (e.g., switches, routers or other network elements), thereby removing bottlenecks at the disks and causing minimal inconvenience to the hosts. By recognizing the peer nature of the group of SAN entities, we propose efficient group key mechanisms that do not involve any centralized key distribution servers. This allows our scheme to be scalable and be free from any single point of failure or attack.
Index Terms:
Storage area networks, secure storage, key management, group key agreement
Citation:
Yongdae Kim, Maithili Narasimha, Fabio Maino, Gene Tsudik, "Secure Group Services for Storage Area Networks," sisw, pp.80, First International IEEE Security in Storage Workshop, 2002
Usage of this product signifies your acceptance of the Terms of Use.