Configuring Storage-Area Networks for Mandatory Security
Benjamin Aziz, Simon N. Foley, John J. Herbert, Garret Swart · Kluwer Academic Publishers eBooks · 2006
Storage-area networks are a popular and efficient way of building large storage systems both in an enterprise environment and for multi-domain storage service providers. In both environments the network and the storage has to be configured to ensure that the data is maintained securely and can be delivered efficiently. In this paper we describe a model of mandatory security for multi-domain storage services that is flexible enough to reflect the data requirements, tractable for the administrator, and implementable as part of an automatic configuration system. We describe the model abstractly, its implementation as part of a prototype SAN configuration system written in OPL, and illustrate its operation on a set of sample configurations. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.