Secure Networked Storage Systems

EIA 02- 23785 Reddy，A.L. NarasimhaCantrell，Pierce E.;本论文的目的是建立一个研究高性能网络存储系统及其网络资源管理问题的实验平台，为通过iSCSI类型的存储设备直接连接到IP网络的安全网络存储系统提供系统级的软件支持。测试应用包括多媒体（即，视频服务器应用）和VLSI CAD（分布式故障仿真）。一个实验性的网络实现部分状态架构将被开发。网络元件将利用部分状态，通过调节通过各个状态的高带宽流，同时聚合其余的流（类似于在当前存储器系统中如何采用高速缓存），来提供对联网和终端主机业务的更好处理。使用现实的超大规模集成电路CAD和多媒体应用程序，工作将评估一个集成的系统，包括存储和网络元素。该项目将采用视频交付作为一个应用程序，以评估将设备连接到网络、存储服务（即，第三方传输和数据过滤），以网络为中心的问题（例如，QoS、拥塞管理和传输协议），以及保护存储系统免受拒绝服务（DOS）攻击的新体系结构和机制。此外，这些设备还将用于开发目标应用程序，并为针对新实验系统的DOS攻击配备人员。具体而言，拟议的研究包括： 提供第三方传输和网络安全：通过部分状态网络架构减轻DOS攻击和安全增强的QoS调节该基础设施预计将为学生提供系统构建，I/O和网络软件，并行和分布式编程，真实的系统性能评估和跨学科研究方面的宝贵培训。

EIA 02-23785Reddy, A.L. NarasimhaCantrell, Pierce E.; Shi, WeipingTexas A & M University (TX Engineering Experimental Station) Title: CISE RR: Secure Networked Storage SystemsThis proposal, building an experimental testbed for research on high performance networked storage systems and the resulting issues in network resources management, builds system level software support for secure networked storage systems possible through iSCSI type of storage devices that directly attach to IP networks. Test applications comprise multimedia (i.e., videoserver application) and VLSI CAD (distributed fault simulation). An experimental networked implementing partial state architectures will be developed. The network element will utilize partial state to provide a better handle on networked and end-host traffic by regulating high bandwidth flows through individual state while aggregating the rest of the flows (similar to how caches are employed in current memory systems). Using realistic VLSI CAD and multimedia applications, the work will evaluate an integrated system consisting of storage and network elements. The project will employ video delivery as an application to evaluate the impact of attaching devices to the network, the storage services (i.e., third party transfers and data filtering), network centric issues (e.g., QoS, congestion management, and transport protocols), and new architectures and mechanisms in protecting storage systems against Denial of Service (DOS) attacks. Moreover, the equipment will be used for developing the target applications and for staffing DOS attacks against the new experimental systems. Specifically the proposed research encompasses: Providing third party transfers and Network security: QoS regulation for mitigating DOS attacks and security enhancement through partial state network architecturesThe infrastructure is expected to offer students valuable training in systems-building, I/O and networked software, parallel and distributed programming, performance evaluation of real systems and interdisciplinary research.