 |
7th Annual IEEE Information Assurance Workshop 21-23 June 2006 "The West Point Workshop" United States Military Academy, West Point, New York |
| Chair: LTC Ronald Dodge, Ronald.Dodge@usma.edu | |
|
|
|
Developing a threat model for enterprise storage area networksCasimer DeCusatisThe 7th IEEE Information Assurance Workshop (IAWorkshop 2006)West Point, New York, USA, June 21-23, 2006
AbstractThe need for improved security has been widely recognized in the information technology industry, particularly for enterprise storage area networks (SANs). However, until recently there has been relatively little development of threat models which specifically address the unique requirements of these networks. In this paper, we discuss a methodology for quantifying risk, justifying security upgrade costs, and proactively assessing threats to an enterprise-class SAN based on Fibre Channel protocols. The threat model suggests that a centralized approach to security management based on the host processor may be more effective than a distributed approach based on the edge of the network. Examples of enterprise server security features which have been recently developed to address these threats will be discussed, along with performance data on host-based cryptographic accelerators. Finally, we propose a roadmap for future security enhancements.
|
|
