Security in Storage; Proceedings: IEEE International Security in Storage Workshop (4th: 2007: San Diego, CA)

Format:

Book

Author/Creator:

Institute of Electrical and Electronics Engineers, author, issuing body.

Language:

English

Subjects (All):

Computer storage devices.

Physical Description:

1 online resource

Place of Publication:

[Place of publication not identified] IEEE Computer Society Press 2007

Language Note:

English

Summary:

This paper presents CRUST, a stackablefile system layer designed to provide secure file sharing over remote untrusted storage systems. CRUST is intended to be layered over insecure network file systems without changing the existing systems. In our approach, data at rest is kept encrypted, and data integrity and access control are provided by cryptographic means. Our design completely avoids public-key cryptography operations and uses more efficient symmetric-key alternatives to achieve improved performance. As a generic and self-contained system, CRUST includes its own in-band key distribution mechanism and does not rely on any special capabilities of the server or the clients. We have implemented CRUST as a Linux file system and shown that it performs comparably with typical underlying file systems, while providing significantly stronger security.

Notes:

Bibliographic Level Mode of Issuance: Monograph

ISBN:

9781509082438

1509082433