Block-Level Security for Network-Attached Disks

摘要: We propose a practical and efficient method for adding security to network-attached disks (NADs). In contrast previous work, our design requires no changes the data layout on disk, minimal existing NADs, only small standard protocol accessing remote block-based devices. Thus, NAD file systems storage-management software could incorporate scheme very easily. Our enforces using well-known idea of self-describing capabilities, with two novel features that limit need memory secure NADs: manage revocations based capability groups, replay-detection Bloom filters.We have implemented prototype system, called Snapdragon, incorporates ideas. evaluated Snapdragon's performance scalability. The overhead access control is small: latency reads writes increases by less than 0.5 ms (5%), while bandwidth decreases up 16%. aggregate throughput scales linearly number NADs (up 7 in experiments).