Secure Networked Storage Systems

EIA 02-23785Reddy, A.L. NarasimhaCantrell, Pierce E.；施卫平德克萨斯农工大学（德克萨斯州工程实验站） 题目：CISE RR：安全网络存储系统 该提案旨在构建一个实验测试平台，用于研究高性能网络存储系统及其由此产生的网络资源管理问题，通过直接连接到 IP 网络的 iSCSI 类型的存储设备，为安全网络存储系统构建系统级软件支持。测试应用程序包括多媒体（即视频服务器应用程序）和 VLSI CAD（分布式故障模拟）。将开发一个实验性网络实现部分状态架构。网络元件将利用部分状态来更好地处理网络和终端主机流量，方法是通过单个状态调节高带宽流量，同时聚合其余流量（类似于当前内存系统中如何使用缓存）。这项工作将使用真实的 VLSI CAD 和多媒体应用程序来评估由存储和网络元素组成的集成系统。该项目将采用视频传输作为应用程序来评估将设备连接到网络、存储服务（即第三方传输和数据过滤）、以网络为中心的问题（例如 QoS、拥塞管理和传输协议）以及保护存储系统免受拒绝服务（DOS）攻击的新架构和机制的影响。此外，该设备将用于开发目标应用程序以及针对新实验系统的 DOS 攻击。具体而言，拟议的研究包括： 提供第三方传输和网络安全：通过部分状态网络架构减轻 DOS 攻击和增强安全性的 QoS 调节 该基础设施预计将为学生提供系统构建、I/O 和网络软件、并行和分布式编程、真实系统性能评估和跨学科研究方面的宝贵培训。

EIA 02-23785Reddy, A.L. NarasimhaCantrell, Pierce E.; Shi, WeipingTexas A & M University (TX Engineering Experimental Station) Title: CISE RR: Secure Networked Storage SystemsThis proposal, building an experimental testbed for research on high performance networked storage systems and the resulting issues in network resources management, builds system level software support for secure networked storage systems possible through iSCSI type of storage devices that directly attach to IP networks. Test applications comprise multimedia (i.e., videoserver application) and VLSI CAD (distributed fault simulation). An experimental networked implementing partial state architectures will be developed. The network element will utilize partial state to provide a better handle on networked and end-host traffic by regulating high bandwidth flows through individual state while aggregating the rest of the flows (similar to how caches are employed in current memory systems). Using realistic VLSI CAD and multimedia applications, the work will evaluate an integrated system consisting of storage and network elements. The project will employ video delivery as an application to evaluate the impact of attaching devices to the network, the storage services (i.e., third party transfers and data filtering), network centric issues (e.g., QoS, congestion management, and transport protocols), and new architectures and mechanisms in protecting storage systems against Denial of Service (DOS) attacks. Moreover, the equipment will be used for developing the target applications and for staffing DOS attacks against the new experimental systems. Specifically the proposed research encompasses: Providing third party transfers and Network security: QoS regulation for mitigating DOS attacks and security enhancement through partial state network architecturesThe infrastructure is expected to offer students valuable training in systems-building, I/O and networked software, parallel and distributed programming, performance evaluation of real systems and interdisciplinary research.