@TechReport{gibson:nasd-tr, author = {Garth A. Gibson and David P. Nagle and Khalil Amiri and Fay W. Chang and Eugene Feinberg and Howard Gobioff Chen Lee and Berend Ozceri and Erik Riedel and David Rochberg}, title = {A Case for Network-Attached Secure Disks}, year = {1996}, month = {June}, number = {CMU--CS-96-142}, institution = {Carnegie-Mellon University}, URL = {http://www.pdl.cmu.edu/PDL-FTP/NASD/TR96-142.pdf}, keywords = {parallel I/O, network attached storage, distributed file systems, computer security, network attached secure disks, NASD, capability system, pario-bib}, abstract = {By providing direct data transfer between storage and client, network-attached storage devices have the potential to improve scalability (by removing the server as a bottleneck) and performance (through network striping and shorter data paths). Realizing the technology's full potential requires careful consideration across a wide range of file system, networking and security issues. To address these issues, this paper presents two new network-attached storage architectures. (1) Networked SCSI disks (NetSCSI) are network-attached storage devices with minimal changes from the familiar SCSI interface (2) Network-attached secure disks (NASD) are drives that support independent client access to drive provided object services. For both architectures, we present a sketch of repartitionings of distributed file system functionality, including a security framework whose strongest levels use tamper resistant processing in the disks to provide action authorization and data privacy even when the drive is in a physically insecure location. \par Using AFS and NFS, trace results suggest that NetSCSI can reduce file server load during a burst of AFS activity by a factor of about 2; for the NASD architecture, server load (during burst activity) can be reduced by a factor of about 4 for AFS and 10 for NFS.}, comment = {They outline their rationale for the idea of Network-attached Secure Disks (NASD). Basically the idea is to develop disk drives that attach right to the LAN, rather than to a file server, and allow clients to access the disks directly for many of the simpler file system actions (read and write file data, read file attributes), and only contact the server for more complex activities (opening and creating files, changing attributes). This removes the load from file servers, which are getting too slow to move large amounts of data needed by large installations. Issues include security, of course, which they solve with encryption (for privacy) and time-limited capabilities (keys) given out by the server to authenticated clients, which the clients show to the disk to gain access. They compare the performance of NASD, using a simple analytical model and parameters obtained from measuring real NFS and AFS implementations, to the performance of SAD (server-attached disks) and NetSCSI (a hybrid approach that involves the server in every operation but allows data to flow directly from disk to and from the network).} }