Security Research Of Third-party Network Storage Service

With the rapid development of IT industry, more and more enterprises move their business to the Computer and Network platforms, make for amount of business data rapid expand. How storage the data effectively,ensure data security and high availability has become an urgent issue. Many large and medium-sized enterprises are putting in a lot of financial and technical staff,build their own professional storage network based on NAS, SAN storage technologies. But for small enterprises,they lack of adequate financial and technology to build their own storage networks, then, third-party network storage services birth, which aimed at small enterprises to provide service on-demand supply and billing by amount services.Business data is crucial for enterprises.so the biggest problem of third-party network storage are security and trust issues. This paper research security of third-party network storage services.the paper mainly include the following:In the security of data transmission research:1,based on the X.509 protocol,design user register model and user authentication and session key distribution model.2,design a session key update model as a innovative expansion of three-way strong authentication standard of the X.509 standardIn the secure storage of data research, we designed security system based on FC-SAN:1, through physical isolation and Zoning Technology, the attack source would be reduced to a minimum level.2,for the "front network",We have designed C/S framework security system including HIDS,firewall and honeypot server.so that the network be able to adapt to dynamics changing of the threat.3, for storage networks, we design the storage device access control model based on improved Kerberos protocol,prevent no permission to visit the storage device.