Analysis of network storage security technology

With the explosive growth of digital information and the increasing dependence of individuals and organizations on these information, the storage system is becoming the center of the whole information system, and the data becomes the most important asset. However, the storage system is evolving from a local direct connection to a networked and distributed direction, making the storage system more vulnerable to attack. Events that steal, tamper with, or disrupt important data continue to occur. Therefore, the security problem is an important problem to be solved in the research of the prior-day storage network.

First, storage security services

Storage System-provided storage security services mainly include authentication and authorization, availability, confidentiality and integrity, key sharing and key management, auditing and human intrusion detection, and usability, manageability, and performance.

Second, the current storage system security Research

Networked storage is the best storage solution in the network age. NAS (network Attachedstorage) and Sans (Storage area Network) are commonly used in 2 networked storage technologies, unlike direct-attached storage Das (directly attached Storage) networked storage Connect directly to the network, providing a centralized, shared storage service for the entire network.

Network-attached storage, referred to as NAS, is a storage device that can provide file-level services. The feature is that it can be directly linked to the network to provide users with file-level services. Furthermore It has its own simplified real-time operating system and effectively brings together hardware and software to provide file services NAS storage systems are characterized by the provision of file-level I/O services to multiple clients through a network file protocol based on IP networks, Clients can file-level operations in directories or devices provided by NAS storage devices when a user or application attempts to access a file, an interpreted I/O request is redirected to a network transport path this gladiators interpreted I/O requests are transferred over the IP network to the NAS server side, Received by the NAS server-side Network file protocol, and then unpack, processing the mapping relationship between the client and the block device, and finally, the normal I/O operation requests are handed over to the file system on the server for processing.

A SAN is a networked-oriented storage structure with data storage as its center. SAN technology, which uses scalable network topologies to connect storage devices and servers, is a storage technology that provides data storage services to servers and centralizes the storage and management of data in a relatively independent private network. In San technology, because of the multiple alternative data exchange between servers and storage devices, the limitations of scalability and data sharing that existed in previous storage structures were eliminated, and the storage device's disks or tapes were represented as "network disks" on the server node by protocol mapping in the SAN. In the view of the server operating system, the network disk is the same as the local disk, the server node operates the network disk like the local hard drive to send commands to it, the command through the packaging of the relevant protocols, sent by the server to the San network, and the storage device to receive and execute the server node can Perform various block operations and file operations.