Network File System Security Overview: Securing SMB3

Explore the intricacies of network file system security in this 41-minute conference talk by Steven French from Microsoft. Delve into the world of SMB3 and its security features, comparing it with NFS. Learn about key aspects such as authentication methods, identity mapping, access control, and encryption. Understand the importance of using GCM 128 and the advantages of the Linux client. Discover multichannel capabilities, data integrity measures, and client-enforced security. Gain insights into the future of network file systems and identify areas for improvement in this comprehensive overview presented at the Storage Developer Conference.

Introduction
Overview
Why Network File Systems
Disadvantages
SMB vs NFS
SMB Overview
Key Security Features
Use Cases
Authentication
Kerberos
Linux
SMB 311
Dont use SMB1
Identity
Identity Alternatives
Identity Mapping
Access Control
Permissions
Encryption
Why use GCM 128
Network Stack
Storage Developer Conference
Linux Client
Multichannel
Data Integrity
Client Enforce Security
ToDos
What do we need