Sciweavers

MSS
2007
IEEE

Implementing and Evaluating Security Controls for an Object-Based Storage System

14 years 24 days ago
Implementing and Evaluating Security Controls for an Object-Based Storage System
This paper presents the implementation and performance evaluation of a real, secure object-based storage system compliant to the TIO OSD standard. In contrast to previous work, our system implements the entire three security methods of the OSD security protocol defined in the standard, namely CAPKEY, CMDRSP and ALLDATA, and an Oakley-based authentication protocol by which the Metadata Server (MDS) and client can be sure of each other's identities. Moreover, our system supports concurrent operations from multiple clients to multiple OSDs. The MDS, a combination of security manager and storage/policy manager, performs access control, global namespace management, and concurrency control. We also evaluate the performance and scalability of our implementation and compare it with iSCSI, NFS and Lustre storage configuratiOns. The overhead of access control is small: compared with the same system without any security mechanism, bandwidth for reads and writes with the CAPKEYand CMDRSP met...
Zhongying Niu, Ke Zhou, Dan Feng, Hong Jiang, Fran
Added 04 Jun 2010
Updated 04 Jun 2010
Type Conference
Year 2007
Where MSS
Authors Zhongying Niu, Ke Zhou, Dan Feng, Hong Jiang, Frank Wang, Hua Chai, Wei Xiao, Chun-hua Li
Comments (0)