Ensuring Data Integrity with Trusted Storage
"Explore the concept of trusted storage for ensuring data integrity, confidentiality, and accountability independently of software layers. Learn about various policies and examples for safeguarding data against threats like bugs, exploits, and operator errors. Implementation progress and benefits of trusted storage are highlighted, inviting you to delve deeper into this cutting-edge technology."
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Trusted Storage Anjo Vahldiek, Eslam Elnikety, Ansley Post, Peter Druschel, Deepak Garg, Johannes Gehrke, Rodrigo Rodrigues MPI-SWS vahldiek@mpi-sws.org Feb. 16th 2012 FAST 12 WiP
Complex storage system Lines of code Application Database Operating System File System Disk Driver 50K-10M 10-50M 30-100K 10K 10K NFS Net Protocol Net Driver NFS 3rd-party Operating System File System Disk Driver storage service Bugs, exploits, operator error threaten data integrity, durability, confidentiality vahldiek@mpi-sws.org Feb. 16th 2012 FAST 12 WiP
Trusted Storage Trusted primitives provided by storage device Certificate: Full path name Policy Content hash Physical layout Access history Policy: Identity HW/SW Configuration Quota Time Location Application Database Operating System File System Disk Driver Trusted storage device Ensure data integrity, confidentiality, accountability independent of higher software layers vahldiek@mpi-sws.org Feb. 16th 2012 FAST 12 WiP
Example: Ensuring integrity of backup data Threat: Software bug, virus or operator error corrupts online backup data Time-based Policy: No writes before a pre-determined expiration date of the backup vahldiek@mpi-sws.org Feb. 16th 2012 FAST 12 WiP
Example: Ensuring integrity of executable files Threat: Virus replaces executable file with a Trojan Identity-based Policy: Disallow writes unless signed by vendor and version number is at least current - 1 vahldiek@mpi-sws.org Feb. 16th 2012 FAST 12 WiP
Summary Trusted storage provides storage level accountability and enforcement of application policies Guarantees independent of higher software layers Implementation in progress 0.05% NAND flash memory < 3% performance overhead Please come see our poster!!! vahldiek@mpi-sws.org Feb. 16th 2012 FAST 12 WiP
