Q

Security issues and NAS

What security issues arise with a NAS solution?

There are several and they depend on the environment you're in. The first (and simplest) is if you use an Ethernet that has other users on it, you could be subject to sniffing or snooping on the network. A NAS device would have the same risks as anything else on the network, including denial of service attacks.

More specific to networked storage are the access controls to the data. Since a NAS is operating as a remote file system and the major advantage is file sharing, controlling the access to the data becomes the major issue. Determination of who has access to data is a combination of administration tasks and software. Typically, an administrator would set up access control lists to identify which users, etc. would have access to the data and then the software on the requesting server is responsible for handling the responses. Windows NT/2000 uses a mechanism called "hard locks" where another access to data that is already being accessed isn't allowed. UNIX systems use "advisory locks" where it's up to the application to not continue the access.

The biggest risk, unfortunately, is in the administration. There's are a lot of requirements here and it's easy to have human error. Obviously, one of the big problems is that the security is not consistently applied in different environments.


This was first published in May 2001

Dig Deeper on NAS management

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchSolidStateStorage

  • Tintri VMstore T5000

    Like all of its VM-aware storage systems, Tintri’s first all-flash array -- the Tintri VMstore T5000 -- allows admins to bypass ...

  • SolidFire SF9605

    The high-capacity SolidFire SF9605 uses SolidFire’s Element OS 8 (Oxygen) to deliver new enterprise features such as synchronous ...

  • HPE 3PAR StoreServ 20850

    HPE 3PAR StoreServ 20850 holds 1,024 solid-state drives (SSDs). Hewlett Packard Enterprise claims it can deliver more than three ...

SearchVirtualStorage

SearchCloudStorage

SearchDisasterRecovery

SearchDataBackup

  • Asigra Cloud Backup Version 13

    Asigra Cloud Backup Version 13 provides an AWS Elastic Block Store Snapshot Manager and the ability to support Docker container ...

  • Veeam Availability Suite v8

    Veeam Availability Suite v8 offers several key backup software components in one package, including Veeam Cloud Connect, Snapshot...

  • Druva inSync 5.5

    Druva inSync 5.5 endpoint backup software stands out with its proactive compliance, cloud app integration, full text search and ...

Close