Configuring Storage Area Networks for Mandatory Security

Storage-area networks are a popular and efficient way of building large storage systems both in an enterprise environment and for multi-domain storage service providers. In both environments the network and the storage has to be configured to ensure that the data is maintained securely and can be delivered efficiently. In this paper we describe a model of mandatory security for multi-domain storage services that is flexible enough to reflect the data requirements, tractable for the administrator, and implementable as part of an automatic configuration system. We the model abstractly, its implementation as part of a prototype SAN configuration system written in OPL, and illustrate its operation on a set of sample configurations.

• Type: Conference
• Year: 2004
• Where: DBSEC
• Authors: Benjamin Aziz, Simon N. Foley, John Herbert, Garret Swart
• Keywords: DBSEC 2004, DBSEC 2007, Large Storage Systems, Multi-domain Storage Services, Storage Service Providers