Information assurance for enterprise fiber optic networks

Author

DeCusatis, Casimer

Author_Institution

eServer Network Hardware Dev. Lab., IBM Corp., Poughkeepsie, NY, USA

fYear

2003

fDate

18-20 June 2003

Firstpage

282

Lastpage

287

Abstract

A recent practical experience and emerging concepts in the protection of enterprise optical networks, such as those used by Fortune 500 companies worldwide is reviewed. Critical elements of data integrity are reviewed, including the cryptographic coprocessor features on mainframe enterprise-class servers, security issues on Fibre Channel networks with cascaded switching, and the hardening of untrusted storage area networks. Emerging protocols such as Encapsulating Security Payload over Fibre Channel and InfiniBand-to-Fibre Channel bridges are also considered. Finally, we discuss wavelength division multiplexing as a protocol independent channel extension and enabler for high data integrity architectures such as Geographically Dispersed Parallel Sysplex® over metropolitan area networks.

Keywords

cryptography; data integrity; metropolitan area networks; optical fibre networks; protocols; storage area networks; virtual private networks; wavelength division multiplexing; Encapsulating Security Payload protocol; Geographically Dispersed Parallel Sysplex; Infiniband-to-Fibre Channel bridges; SAN; cascaded switching; cryptographic coprocessor feature; data integrity architecture; enterprise fibre optic network; information assurance; mainframe enterprise class server; metropolitan area network; storage area networks; wavelength division multiplexing; Companies; Coprocessors; Cryptographic protocols; Cryptography; Data security; Information security; Network servers; Optical fiber networks; Protection; Storage area networks;

fLanguage

English

Publisher

ieee

Conference_Titel

Information Assurance Workshop, 2003. IEEE Systems, Man and Cybernetics Society

Print_ISBN

0-7803-7808-3

Type

conf

DOI

10.1109/SMCSIA.2003.1232434

Filename

1232434