Book description
IBM® Storage Virtualize based storage systems are secure storage platforms that implement various security-related features, in terms of system-level access controls and data-level security features.
This document outlines the available security features and options of IBM Storage Virtualize based storage systems. It is not intended as a "how to" or best practice document. Instead, it is a checklist of features that can be reviewed by a user security team to aid in the definition of a policy to be followed when implementing IBM FlashSystem®, IBM SAN Volume Controller, and IBM Storage Virtualize for Public Cloud.
IBM Storage Virtualize features the following levels of security to protect against threats and to keep the attack surface as small as possible:
- The first line of defense is to offer strict verification features that stop unauthorized users from using login interfaces and gaining access to the system and its configuration.
- The second line of defense is to offer least privilege features that restrict the environment and limit any effect if a malicious actor does access the system configuration.
- The third line of defense is to run in a minimal, locked down, mode to prevent damage spreading to the kernel and rest of the operating system.
- The fourth line of defense is to protect the data at rest that is stored on the system from theft, loss, or corruption (malicious or accidental).
The topics that are discussed in this paper can be broadly split into two categories:
- System security: This type of security encompasses the first three lines of defense that prevent unauthorized access to the system, protect the logical configuration of the storage system, and restrict what actions users can perform. It also ensures visibility and reporting of system level events that can be used by a Security Information and Event Management (SIEM) solution, such as IBM QRadar®.
- Data security: This type of security encompasses the fourth line of defense. It protects the data that is stored on the system against theft, loss, or attack. These data security features include Encryption of Data At Rest (EDAR) or IBM Safeguarded Copy (SGC).
This document is correct as of IBM Storage Virtualize 8.5.3.
Product information
- Title: IBM Storage Virtualize, IBM Storage FlashSystem, and IBM SAN Volume Controller Security Feature Checklist - For IBM Storage Virtualize 8.5.3
- Author(s):
- Release date: October 2023
- Publisher(s): IBM Redbooks
- ISBN: 9780738461243
You might also like
book
IBM Power Systems Virtual Server Guide for IBM i
This IBM® Redbooks® publication delivers a how-to usage content perspective that describes deployment, networking, and data …
book
IBM System Storage SAN Volume Controller, IBM Storwize V7000, and IBM FlashSystem 7200 Best Practices and Performance Guidelines
This IBM® Redbooks® publication captures several of the preferred practices and describes the performance gains that …
book
IBM Z Flexible Capacity for Cyber Resiliency
With IBM Z Flexible Capacity for Cyber Resiliency, IBM introduces a new temporary capacity, that offers …
book
Cyber Resiliency with IBM QRadar and IBM Spectrum Virtualize for Public Cloud on Azure with IBM Copy Services Manager for Safeguarded Copy
The focus of this Blueprint publication is to highlight the early threat detection capabilities of IBM® …