Secure Audit Logs to Support Computer Forensics

Published: Feb 23, 2000
Updated: Feb 23, 2000
Section: Network Security Library :: Forensics
Author:
Company: Counterpane Internet Security, Inc.
Printable Version
Adjust font size:
Rating: 2.4/5 - 19 Votes

In many real-world applications, sensitive information must be kept in log files on an untrusted machine. In the event that an attacker captures this machine, we would like to guarantee that he will gain little or no information from the log files and to limit his ability to corrupt the log files. We describe a computationally cheap method for making all log entries generated prior to the logging machine's compromise impossible for the attacker to read, and also impossible to undetectably modify or destroy.

Click Here to download this article