检索
E-mail
RSS
作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2008, Vol. 34 ›› Issue (2): 97-99.doi: 10.3969/j.issn.1000-3428.2008.02.032

• 安全技术 • 上一篇    下一篇

基于SSL的安全iSCSI技术研究与实现

何　俊1,4，戴　浩2，马琳茹3，杨　明1，谢永强2   

  1. (1. 解放军理工大学指挥自动化学院，南京 210007；2. 中国电子设备系统工程公司研究所，北京 100039；3. 国防科技大学电子科学与工程学院，长沙 410073；4. 解放军通信指挥学院，武汉 430010)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2008-01-20 发布日期:2008-01-20

Research and Implementation of Secure iSCSI Based on SSL

HE Jun1,4, DAI Hao 2, MA Lin-ru3, YANG Ming1, XIE Yong-qiang 2   

  1. (1. Institute of Command Automation, PLA Univ. of Sci. & Tech., Nanjing 210007;2. Institute of China Electronic System Engineering Corporation, Beijing 100039; 3. Institute of Electronic Science and Engineering, National University of Defense Technology, Changsha 410073; 4. Institute of Communication and Command, PLA, Wuhan 430010)
  • Received:1900-01-01 Revised:1900-01-01 Online:2008-01-20 Published:2008-01-20

PDF

1439

被引次数

9

摘要： iSCSI协议是一种新兴的网络存储协议标准。该文分析了iSCSI协议的工作原理和安全机制，指出其存在的安全隐患，提出一种基于SSL的安全iSCSI方案，通过在iSCSI协议中加入SSL的安全功能，实现了一个安全iSCSI系统。实验表明，与基于IPSec的安全方案相比，使用该方案的iSCSI协议的I/O速率提高了25%，而CPU占用率下降了50%。

关键词: iSCSI协议, 网络存储, 网络安全, SSL协议

Abstract: iSCSI is an standard network storage protocol. The working theory and security mechanism of iSCSI are studied and the threat of the protocol is pointed out. In order to improve performance, this paper puts forward a secure iSCSI based on SSL. An secure iSCSI system is implemented by adding SSL functions to iSCSI protocol. Experiments show that throughput of the secure iSCSI based on SSL increases by 25% and CPU utilization decreases 50%, compared with the secure iSCSI based on IPSec.

Key words: iSCSI protocol, network storage, network security, SSL protocol

中图分类号: