Storage system
A storage system is protected from tampering of software executed by the storage system. The storage system includes a first storage controller and a second storage controller. The first storage controller includes a first input and output controller configured to input and output host data, and a first management controller. The second storage controller includes a second input and output controller configured to input and output host data, and a second management controller. The first management controller is configured to store a backup of software of at least one of the second storage controller or the first input and output controller. A copy of tampered software of the at least one is stored. The tampered software of the at least one is recovered by the backup.
1. A storage system comprising:
a first storage controller; and
a second storage controller, wherein
the first storage controller includes a first input and output controller configured to input and output host data, and a first management controller,
the second storage controller includes a second input and output controller configured to input and output host data, and a second management controller,
the first management controller is configured to store a backup of software of at least one of the second storage controller or the first input and output controller,
a copy of tampered software of the at least one is stored, and
the tampered software of the at least one is recovered by the backup.
2. The storage system according to claim 1 , wherein
the tampered software is stored in a storage drive different from a storage drive storing the software before the tampering.
3. The storage system according to claim 1 , wherein
the backup is a backup of the software of the second storage controller.
4. The storage system according to claim 3 , wherein
the second storage controller is included in a storage node different from the first storage controller.
5. The storage system according to claim 3 , wherein
the backup is a backup of the software of the second management controller, and
the first management controller is configured to recover the tampered software by the backup when normal activation of the second management controller cannot be confirmed.
6. The storage system according to claim 5 , wherein
the second management controller is configured to inspect the recovered software.
7. The storage system according to claim 1 , wherein
the backup is a backup of the software of the first input and output controller, and
the first input and output controller is configured to, when tampering of the software is detected,
store the tampered software in a storage drive of the first input and output controller, and
recover the tampered software by the backup.
8. A method for inspecting tampering of software in a storage system, wherein
the storage system includes
a first storage controller, and
a second storage controller,
the first storage controller includes a first input and output controller configured to input and output host data, and a first management controller,
the second storage controller includes a second input and output controller configured to input and output host data, and a second management controller,
the first management controller is configured to store a backup of software of at least one of the second storage controller or the first input and output controller, and
the method comprises: by the storage system,
inspecting the software of the at least one;
storing a copy of the software of the at least one in which tampering is detected by the inspection; and
recovering the tampered software of the at least one by the backup.