BAF: An Efficient Publicly Verifiable Secure Audit Logging Scheme for Distributed Systems

Audit logs, providing information about the current and past states of systems, are one of the most important parts of modern computer systems. Providing security for audit logs on an untrusted machine in a large distributed system is a challenging task, especially in the presence of active adversaries. In such a system, it is critical to have forward security such that when an adversary compromises a machine, she cannot modify or forge the log entries accumulated before the compromise. Unfortunately, existing secure audit logging schemes have significant limitations that make them impractical for real-life applications: Existing Public Key Cryptography (PKC) based schemes are computationally expensive for logging in task intensive or resource-constrained systems, while existing symmetric schemes are not publicly verifiable and incur significant storage and communication overheads. In this paper, we propose a novel forward secure and aggregate logging scheme called Blind-Aggregate-Forw...

• Type: Conference
• Year: 2009
• Where: ACSAC
• Authors: Attila Altay Yavuz, Peng Ning
• Keywords: ACSAC 2009, Audit Logging Schemes, Audit Logs, Secure Audit, Security Privacy