iOBS3: An iSCSI-Based Object Storage Security System

Authors:
Huang Jianzhong;Xie Changsheng;Li Xu
Affiliations:
Wuhan National Laboratory for Optoelectronics, Huazhong University of Science and Technology, Wuhan, Hubei, P.R. China 430074;Wuhan National Laboratory for Optoelectronics, Huazhong University of Science and Technology, Wuhan, Hubei, P.R. China 430074;Wuhan National Laboratory for Optoelectronics, Huazhong University of Science and Technology, Wuhan, Hubei, P.R. China 430074
Venue:
Computational Intelligence and Security
Year:
2007

Citing 4
Cited 0

File server scaling with network-attached secure disks

SIGMETRICS '97 Proceedings of the 1997 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Performance Study of Software-Based iSCSI Security

SISW '02 Proceedings of the First International IEEE Security in Storage Workshop
Secure Blue: An Architecture for a Scalable, Reliable, High Volume SSL Internet Server

ACSAC '01 Proceedings of the 17th Annual Computer Security Applications Conference
Security vs Performance: Tradeoffs using a Trust Framework

MSST '05 Proceedings of the 22nd IEEE / 13th NASA Goddard Conference on Mass Storage Systems and Technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

With the growing importance of data, networked storage of high performance and strong security has become a hotspot of research. Aiming at the goals, an iSCSI-based object storage security system (iOBS3) adopting OSD command sets has been proposed in this paper. Firstly, incurring to the block I/O channel of iSCSI and the security method within OSD, iOBS3 can achieve high-speed bandwidth of block I/O and access control capability of object I/O; secondly, iOBS3 enhances its transfer security by employing IPSec at IP layer or SSL above TCP layer; thirdly, iOBS3 greatly improves the I/O speed using zero-copy TCP at initiator-side. The experimental results indicate iOBS3 can achieve high throughput, in the meantime guaranteeing both the transmission and storage security.