Self-securing Storage: Protecting Data in Compromised Systems

DMCA

Self-securing Storage: Protecting Data in Compromised Systems (2000)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by John D. Strunk , Garth R. Goodson , Michael L. Scheinholtz , Craig A. N. Soules , Gregory R. Ganger

Venue:	SYMPOSIUM ON OPERATING SYSTEMS DESIGN AND IMPLEMENTATION
Citations:	148 - 19 self

BibTeX

@INPROCEEDINGS{Strunk00self-securingstorage:,
    author = {John D. Strunk and Garth R. Goodson and Michael L. Scheinholtz and Craig A. N. Soules and Gregory R. Ganger},
    title = {Self-securing Storage: Protecting Data in Compromised Systems},
    booktitle = {SYMPOSIUM ON OPERATING SYSTEMS DESIGN AND IMPLEMENTATION},
    year = {2000},
    pages = {165--180},
    publisher = {USENIX Association}
}

OpenURL

Abstract

Self-securing storage prevents intruders from undetectably tampering with or permanently deleting stored data. To accomplish this, self-securing storage devices internally audit all requests and keep old versions of data for a window of time, regardless of the commands received from potentially compromised host operating systems. Within the window, system administrators have this valuable information for intrusion diagnosis and recovery. Our implementation, called S4, combines log-structuring with journal-based metadata to minimize the performance costs of comprehensive versioning. Experiments show that self-securing storage devices can deliver performance that is comparable with conventional storage systems. In addition, analyses indicate that several weeks worth of all versions can reasonably be kept on state-of-the-art disks, especially when differencing and compression technologies are employed.

Keyphrases

self-securing storage compromised system self-securing storage device old version journal-based metadata performance cost compression technology valuable information intrusion diagnosis system administrator state-of-the-art disk self-securing storage prevents intruder comprehensive versioning conventional storage system several week

DMCA