Security Considerations When Designing a Distributed File System Using Object Storage Devices

  • Authors:
  • Benjamin C. Reed;Mark A. Smith;Dejan Diklic

  • Affiliations:
  • -;-;-

  • Venue:
  • SISW '02 Proceedings of the First International IEEE Security in Storage Workshop
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present the design goals that led us to developing distributed object-based secure file system, Brave.Brave uses mutually authenticated object storage devices,SCARED, to store file system data. Rather than require anew authentication infrastructure, we show how we use asimple authentication protocol that is bridged into existingsecurity infrastructures, even if there is more than one authentication protocol or domain present.We position our work in the context of some of the currentwork going on in distributed secure file systems and presentour implementation of our file system. We also present somesecurity weaknesses that are shared with other distributedfile systems that may not be apparent when designing thesesystems.