Building Sentry Systems
Hal Flynn <[email protected]>
| Newsgroups | gmane.comp.security.sun |
|---|---|
| Message-ID | <[email protected]> |
Hi folks, So, while on holidays in Phoenix, I drove up to Las Vegas to see a friend that had relocated there sometime ago. If you've never driven the road between Phoenix and Las Vegas, it's full of twists, turns, and nothing. Given the opportunity to collect my thoughts in such an environment, I started contemplating something another friend and I had discussed around a year ago. One of the biggest limitations I've been able to identify in storage systems is the ability to ensure the integrity of files. A couple years ago when I took the Veritas Cluster Server course, I learned that one of the by-products of using cluster technology is the occurrence of split-brain, where two systems begin functioning on the same cabinet of drives, thus accessing the same disks while carrying out potentially different operations. You probably see where I'm going with this, but what I started thinking about is creating a self-contained system that functions independent of the cluster, and has access to all drives in the cabinet. The system stores integrity information locally, and acts as an audit host to monitor the integrity of files within the storage cabinet. Is anybody familiar with any research in this area? Has anybody experimented with anything like this? I don't have access to any large cabinets to tinker with these days, so I don't have the ability to play with this on my own. I'd be interested in hearing about other similar research and experimentation. Cheers, Hal Flynn Symantec Corp. http://www.securityfocus.com/unix