Abstract: It is desired to reduce the danger of leakage of data stored in a logical storage device. A storage system has a detection unit and a security processing unit. The detection unit detects a system change, during which it is not possible to perform I/O for a first logical storage device, among a plurality of logical storage devices in the storage system. And the security processing unit takes this type of system change as the opportunity for performing security processing, i.e. formatting or shredding, upon the first logical storage device.

Abstract: In a storage apparatus comprising a communication interface that receives an I/O request sent from a host apparatus, a storage device controller that performs writing and reading of data with respect to a storage device, and a cache memory that stores data to be written in the storage device or data read from the storage device, a journal volume operated as a volume for which update writing is prohibited and write once is permitted is provided, on the basis of a storage area provided by the storage device, and a virtual volume is provided as a volume accessible from the host apparatus, the journal volume being the entity of the virtual volume, the virtual volume being a volume for which an attribute (Read/Add) that permits only reading and write once is settable.

Abstract: It is desired to reduce the danger of leakage of data stored in a logical storage device. A storage system has a detection unit and a security processing unit. The detection unit detects a system change, during which it is not possible to perform I/O for a first logical storage device, among a plurality of logical storage devices in the storage system. And the security processing unit takes this type of system change as the opportunity for performing security processing, i.e. formatting or shredding, upon the first logical storage device.

Abstract: In a storage apparatus comprising a communication interface that receives an I/O request sent from a host apparatus, a storage device controller that performs writing and reading of data with respect to a storage device, and a cache memory that stores data to be written in the storage device or data read from the storage device, a journal volume operated as a volume for which update writing is prohibited and write once is permitted is provided, on the basis of a storage area provided by the storage device, and a virtual volume is provided as a volume accessible from the host apparatus, the journal volume being the entity of the virtual volume, the virtual volume being a volume for which an attribute (Read/Add) that permits only reading and write once is settable.