Secure Networked Storage Systems

reddy， A.L. NarasimhaCantrell, Pierce e；题目：CISE RR：安全网络存储系统本提案为研究高性能网络存储系统和由此产生的网络资源管理问题建立了一个实验测试平台，通过iSCSI类型的存储设备直接连接到IP网络，为安全网络存储系统构建了系统级软件支持。测试应用程序包括多媒体（即视频服务器应用程序）和VLSI CAD（分布式故障模拟）。将开发一个实现部分状态架构的实验性网络。网络元素将利用部分状态来更好地处理网络和终端主机流量，方法是通过单个状态调节高带宽流，同时聚合其余流（类似于当前内存系统中使用缓存的方式）。使用真实的VLSI CAD和多媒体应用程序，该工作将评估由存储和网络元素组成的集成系统。该项目将采用视频传输作为一个应用程序，以评估将设备连接到网络、存储服务（即第三方传输和数据过滤）、网络中心问题（例如QoS、拥塞管理和传输协议）以及保护存储系统免受拒绝服务（DOS）攻击的新架构和机制的影响。此外，该设备将用于开发目标应用程序和针对新实验系统的人员DOS攻击。具体来说，建议的研究包括：提供第三方传输和网络安全；通过部分状态网络架构减轻DOS攻击和增强安全性的QoS规则。该基础设施预计将为学生提供系统构建、I/O和网络软件、并行和分布式编程、真实系统的性能评估和跨学科研究方面的宝贵培训。

EIA 02-23785Reddy, A.L. NarasimhaCantrell, Pierce E.; Shi, WeipingTexas A & M University (TX Engineering Experimental Station) Title: CISE RR: Secure Networked Storage SystemsThis proposal, building an experimental testbed for research on high performance networked storage systems and the resulting issues in network resources management, builds system level software support for secure networked storage systems possible through iSCSI type of storage devices that directly attach to IP networks. Test applications comprise multimedia (i.e., videoserver application) and VLSI CAD (distributed fault simulation). An experimental networked implementing partial state architectures will be developed. The network element will utilize partial state to provide a better handle on networked and end-host traffic by regulating high bandwidth flows through individual state while aggregating the rest of the flows (similar to how caches are employed in current memory systems). Using realistic VLSI CAD and multimedia applications, the work will evaluate an integrated system consisting of storage and network elements. The project will employ video delivery as an application to evaluate the impact of attaching devices to the network, the storage services (i.e., third party transfers and data filtering), network centric issues (e.g., QoS, congestion management, and transport protocols), and new architectures and mechanisms in protecting storage systems against Denial of Service (DOS) attacks. Moreover, the equipment will be used for developing the target applications and for staffing DOS attacks against the new experimental systems. Specifically the proposed research encompasses: Providing third party transfers and Network security: QoS regulation for mitigating DOS attacks and security enhancement through partial state network architecturesThe infrastructure is expected to offer students valuable training in systems-building, I/O and networked software, parallel and distributed programming, performance evaluation of real systems and interdisciplinary research.