Configuring storage-area networks for mandatory security

Benjamin Aziz; Simon N. Foley; John Herbert; Garret Swart

Configuring storage-area networks for mandatory security

Benjamin Aziz, Simon N. Foley, John Herbert, Garret Swart

School of Computing

University College Cork

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Storage-area networks are a popular and efficient way of building large storage systems both in an enterprise environment and for multi-domain storage service providers. In both environments the network and the storage has to be configured to ensure that the data is maintained securely and can be delivered efficiently. In this paper we describe a model of mandatory security for multi-domain storage services that is flexible enough to reflect the data requirements, tractable for the administrator, and implementable as part of an automatic configuration system. We describe the model abstractly, its implementation as part of a prototype SAN configuration system written in OPL, and illustrate its operation on a set of sample configurations.

Original language	English
Title of host publication	Research Directions in Data and Applications Security XVIII - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security
Publisher	Springer New York LLC
Pages	357-370
Number of pages	14
ISBN (Print)	1402081278, 9781402081279
Publication status	Published - 1 Jan 2004
Event	IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security - Sitges, Catalonia, Spain Duration: 25 Jul 2004 → 28 Jul 2004

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	144
ISSN (Print)	1868-4238

Conference

Conference	IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security
Country/Territory	Spain
City	Sitges, Catalonia
Period	25/07/04 → 28/07/04

Access to Document

https://link.springer.com/chapter/10.1007%2F1-4020-8128-6_24

Cite this

Aziz, B., Foley, S. N., Herbert, J., & Swart, G. (2004). Configuring storage-area networks for mandatory security. In Research Directions in Data and Applications Security XVIII - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security (pp. 357-370). (IFIP Advances in Information and Communication Technology; Vol. 144). Springer New York LLC. https://link.springer.com/chapter/10.1007%2F1-4020-8128-6_24

@inproceedings{705376499a46434e8f61caf20b68ff76,

title = "Configuring storage-area networks for mandatory security",

abstract = "Storage-area networks are a popular and efficient way of building large storage systems both in an enterprise environment and for multi-domain storage service providers. In both environments the network and the storage has to be configured to ensure that the data is maintained securely and can be delivered efficiently. In this paper we describe a model of mandatory security for multi-domain storage services that is flexible enough to reflect the data requirements, tractable for the administrator, and implementable as part of an automatic configuration system. We describe the model abstractly, its implementation as part of a prototype SAN configuration system written in OPL, and illustrate its operation on a set of sample configurations.",

author = "Benjamin Aziz and Foley, {Simon N.} and John Herbert and Garret Swart",

year = "2004",

month = jan,

day = "1",

language = "English",

isbn = "1402081278",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer New York LLC",

pages = "357--370",

booktitle = "Research Directions in Data and Applications Security XVIII - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security",

note = "IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security ; Conference date: 25-07-2004 Through 28-07-2004",

}

Aziz, B, Foley, SN, Herbert, J & Swart, G 2004, Configuring storage-area networks for mandatory security. in Research Directions in Data and Applications Security XVIII - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security. IFIP Advances in Information and Communication Technology, vol. 144, Springer New York LLC, pp. 357-370, IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security, Sitges, Catalonia, Spain, 25/07/04. <https://link.springer.com/chapter/10.1007%2F1-4020-8128-6_24>

Configuring storage-area networks for mandatory security. / Aziz, Benjamin; Foley, Simon N.; Herbert, John et al.
Research Directions in Data and Applications Security XVIII - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security. Springer New York LLC, 2004. p. 357-370 (IFIP Advances in Information and Communication Technology; Vol. 144).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Configuring storage-area networks for mandatory security

AU - Aziz, Benjamin

AU - Foley, Simon N.

AU - Herbert, John

AU - Swart, Garret

PY - 2004/1/1

Y1 - 2004/1/1

N2 - Storage-area networks are a popular and efficient way of building large storage systems both in an enterprise environment and for multi-domain storage service providers. In both environments the network and the storage has to be configured to ensure that the data is maintained securely and can be delivered efficiently. In this paper we describe a model of mandatory security for multi-domain storage services that is flexible enough to reflect the data requirements, tractable for the administrator, and implementable as part of an automatic configuration system. We describe the model abstractly, its implementation as part of a prototype SAN configuration system written in OPL, and illustrate its operation on a set of sample configurations.

AB - Storage-area networks are a popular and efficient way of building large storage systems both in an enterprise environment and for multi-domain storage service providers. In both environments the network and the storage has to be configured to ensure that the data is maintained securely and can be delivered efficiently. In this paper we describe a model of mandatory security for multi-domain storage services that is flexible enough to reflect the data requirements, tractable for the administrator, and implementable as part of an automatic configuration system. We describe the model abstractly, its implementation as part of a prototype SAN configuration system written in OPL, and illustrate its operation on a set of sample configurations.

UR - http://www.scopus.com/inward/record.url?scp=26444581576&partnerID=8YFLogxK

M3 - Conference contribution

AN - SCOPUS:26444581576

SN - 1402081278

SN - 9781402081279

T3 - IFIP Advances in Information and Communication Technology

SP - 357

EP - 370

BT - Research Directions in Data and Applications Security XVIII - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security

PB - Springer New York LLC

T2 - IFIP TC11/WG11.3 18th Annual Conference on Data and Applications Security

Y2 - 25 July 2004 through 28 July 2004

ER -

Configuring storage-area networks for mandatory security

Abstract

Publication series

Conference

Access to Document

Fingerprint

Cite this