SNIA-SDC23-Suhler-IEEE-Security-in-Storage-Working-Group.pdf

1、1|2023 SNIA.All Rights Reserved.Virtual ConferenceSeptember 28-29,2021The IEEESecurity in StorageWorking GroupPaul SuhlerChair,IEEE SISWGKIOXIA Corporation2|2023 SNIA.All Rights Reserved.AbstractThe IEEE Security In Storage Work Group(SISWG)produces standards that many storage developers,storage ven

2、dors,and storage system operators care about,including:A family of standards on sanitization:The IEEE 2883 family.A family of standards on encryption methods for storage components:The IEEE 1619 family.A standard on Discovery,Authentication,and Authentication in Host Attachments of Storage Devices:T

3、he IEEE 1667 specification.3|2023 SNIA.All Rights Reserved.OverviewOrganization:IEEE Computer Society Cybersecurity and Privacy Standards Committee(CPSC)Security in Storage Working Group(SISWG)Charter is to address any aspect of security as it relates to storage.SISWG develops international standard

4、s,rather than domestic standards.SISWG is an individual membership working group.Members do not formally represent companies or other entities.Typically 15 18 individuals participate in the biweekly meetings.4|2023 SNIA.All Rights Reserved.Historical Work IEEE Std 1667-2018(Discovery,Authentication,

5、and Authorization in Host Attachments of Storage Devices)IEEE Std 1619-2007(Cryptographic Protection of Data on Block-Oriented Storage Devices)AES-XTS IEEE Std 1619.1-2007(Authenticated Encryption with Length Expansion for Storage Devices)Various AES modes:CCM,GCM,CBC-HMAC,XTS-HMAC IEEE Std 1619.2-2

6、021(Wide-Block Encryption for Shared Storage Media)EME-2-AES and XCB-AES5|2023 SNIA.All Rights Reserved.Recent Work Sanitization IEEE Std 28832022(IEEE Standard for Sanitizing Storage)Motivated by the lack of mandatory requirements in some standards.Claims of compliance are meaningless if there are