Inkpack: A Secure, Data-Exposure Resistant Storage System

Appeared in Proceedings of the 11th ACM International Systems and Storage Conference (SYSTOR 2018).

Abstract

Removing hard drives from a data center may expose sensitive data, such as encryption keys or passwords. To prevent exposure, data centers have security policies in place to physically secure drives in the system, and securely delete data from drives that are removed. Despite advances in security technology and best practices, implementation of these security measures is often done incorrectly. We anticipate that physical security will fail, and fixing the issue after the failure is costly and ineffective.

We propose Inkpack, a protocol that prevents an attacker from reading data from a drive removed from the data center even if the attacker has the user key linked to the data. An implementation of this protocol encrypts data, and secret splits the key over a number of drives. Recovering the key requires communicating with other drives, thereby denying access to the data if a few drives have been removed. Inkpack also requires the system to verify the validity of individual drives before normal operation. A prototype created within the Ceph storage system executed individual key split, key rebuild, and drive validation operations in 100–150 μs. We also show that our protocol is sensitive to small data write overheads, demonstrating potential performance gains if implemented on smart solid state storage devices, and propose a solution to increase performance.

Publication date:
June 2018

Authors:
Oceane Bel
Kenneth Chang
Daniel Bittman
Hiroshi Isozaki
Darrell D. E. Long
Ethan L. Miller

Projects:
Storage Class Memories
Secure File and Storage Systems

Available media

Full paper text: PDF

Bibtex entry

@inproceedings{bel-systor18,
  author       = {Oceane Bel and Kenneth Chang and Daniel Bittman and Hiroshi Isozaki and Darrell D. E. Long and Ethan L. Miller},
  title        = {Inkpack: A Secure, Data-Exposure Resistant Storage System},
  booktitle    = {Proceedings of the 11th ACM International Systems and Storage Conference (SYSTOR 2018)},
  month        = jun,
  year         = {2018},
}