Research On Security Scheme For The Integration Of SAN And NAS

With the development of the information and network technology, the storage system has emerged as an important component in the information system. Recently, the research interests of storage system focus on the illegal access, information disclosure and tampering. The security for the integration of the SAN and the NAS has been investigated in this paper, and some solution schemes which can provide a full range of data protection for the integration have also been proposed. Firstly, in the client access layer, the legal client is authorized to prevent the illegal user from accessing the storage data. Secondly, in the static data storage layer, the file system filter is installed in the NAS gateway to the implement the files encryption. The data exist in the storage array in encryption to avoid the data leaking owing to storage theft. Thirdly, in the data transmit process, the mature IPSec technology is applied in the transmit process to guarantee the data confidentiality and data integrity in the IP network. The program guarantees the system security with little influence on the performance of the system when the security method is adopted in the system. Our extensive performance study demonstrates that our solution scheme can guarantee the storage security in the integration of the SAN and the NAS.