Verifiable audit trails for a versioning file system

StorageSS'05 - Proceedings of the 2005 ACM Workshop on Storage Security and Survivability

Volumn , Issue , 2005, Pages 44-50

  Burns, Randal ^a   Peterson, Zachary ^a   Ateniese, Giuseppe ^a   Bono, Stephen ^a  

^a Johns Hopkins University   (United States)

Author keywords

Electronic records; Secure audit; Versioning file systems

Indexed keywords

COMPUTATION THEORY; DATA REDUCTION; HIERARCHICAL SYSTEMS; INFORMATION ANALYSIS; LAWS AND LEGISLATION;

ELECTRONIC RECORDS; SARBANES-OXLEY; SECURE AUDIT; VERSIONING FILE SYSTEMS;

SECURITY OF DATA;

EID: 33244492170     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1103780.1103787     Document Type: Conference Paper

References (28)

1. C. Adams, P. Cain, D. Pinkas, and R. Zuccherato. Internet X.509 public key infrastructure time-stamp protocol. RFC 3161 - Internet Engineering Task Force, 2001.
2. M. Bellare, O. Goldreich, and S. Goldwasser. Incremental cryptography and application to virus protection. In Proceedings of the Symposium on Theory of Computing, 1995.
3. M. Bellare, R. Guérin, and P. Rogaway. XOR MACs: New methods for message authentication using finite pseudorandom functions. In D. Coppersmith, editor, Advances in Cryptology - Crypto 95 Proceedings, Lecture Notes in Computer Science, volume 963, pages 15-28. Springer-Verlag, 1995.
4. J. Black and P. Rogaway. A block-cipher mode of operation for parallelizable message authentication. In Advances in Cryptology - Eurocrypt 2002 Proceedings, Lecture Notes in Computer Science, volume 2332. Springer-Verlag, 2002.
5. United States Congress. The Health Insurance Portability and Accountability Act of 1996, 1996.
6. United States Congress. Sarbanes-Oxley Act of 2002, 2002.
7. G. Di Crescenzo, R. Graveman, R. Ge, and G. Arce. Approximate message authentication and biometric entity authentication. In Proceedings of Financial Cryptography and Data Security, 2005.
8. F. Dabek, M. F. Kaashoek, D. Karger, R. Morris, and I. Stoica. Wide-area cooperative storage with CFS. In Proceedings of the Symposium on Operating Systems Principles, 2001.
9. D. Farmer and W. Venema. Forensic Disocvery. Addison-Wesley, 2004.
10. K. Fu, M. Frans Kasshoek, and D. Mazières. Fast and secure distributed read-only file system. ACM Transactions on Computer Systems, 20(1), 2002.
11. J. Hagerty. Sarbanes-Oxley compliance spending will exceed $5B in 2004. AMR Research Outlook, Dec 2004.
12. E. Haubert, J. Tucek, L. Brumbaugh, and W. Yurcik. Tamper-resistant storage techniques for multimedia systems. In International Symposium Electronic Imaging Storage and Retrieval Methods and Applications for Multimedia (EI121), 2005.
13. M. Kallahalla, E. Riedel, R. Swaminathan, Q. Wang, and K. Fu. Plutus: Scalable secure file sharing on untrusted storage. In Proceedings of the Conference on File and Storage Technologies, 2003.
14. J. Kubiatowicz, D. Bindel, Y. Chen, S. Czerwinski, P. Eaton, D. Geels, R. Gummandi, S. Rhea, H. Weatherspoon, W. Weimer, C. Wells, and B. Zhao. OceanStore: An architecture for global-scale persistent storage. In Proceedings of the Conference on Architecture Support for Programming Languages and Operating Systems, 2000.
15. L. Lamport. Password authentication with insecure comunication. Communications of the ACM, 24(11):770-772, 1981.
16. P. Maniatis and M. Baker. Enabling the archival storage of signed documents. In Proceedings of the Conference on File and Storage Technologies, 2002.
17. S. Micali. Efficient certificate revocation. In Proceedings of RSA and US Patent 5,666,416, 1997.
18. J. Monroe. Emerging solutions for content storage. Presentation at PlanetStorage, 2004.
19. M. Naor and M. Yung. Universal one-way hash functions and their cryptographic applications. In Symposium on Theory of Computing, 1989.
20. 3FS: An in-kernel integrity checker and intrusion detection file system. In Proceedings of the Large Installation System Administration Conference, 2004.
21. Z. Peterson and R. Burns. Ext3cow: A time-shifting file system for regulatory compliance. ACM Transactions on Storage, 1(2):190-212, 2005.
22. Z. N. J. Peterson, R. Burns, and A. Stubblefield. Limiting liability in a federally compliant file system. In Proceedings of the PORTIA Workshop on Sensitive Data in Medical, Financial, and Content Distribution Systems, 2004.
23. R. L. Rivest and A. Shamir. PayWord and MicroMint - two simple micropayment schemes. Proceedings of the International Workshop on Security Protocols, Lecture Notes in Computer Science, Springer, (1189):69-87, 1997.
24. B. Schneier and J. Kelsey. Secure audit logs to support computer forensics. ACM Transactions on Information Systems Security, 2(2): 159-176, 1999.
25. Richard T. Snodgrass, editor. The TSQL2 Temporal Query Language. Kluwer, 1995.
26. C. A. N. Soules, G. R. Goodson, J. D. Strunk, and G. R. Ganger. Metadata efficiency in versioning file systems. In Proceedings of the Conference on File and Storage Technologies, March 2003.
27. M. Waldman, A. D. Rubin, and L. F. Cranor. Publius: A robust, tamper-evident, censorship-resistant, Web publishing system. In Proceedings of the USENIX Security Symposium, 2000.
28. H. Weatherspoon, C. Wells, and J. Kubiatowicz. Naming and integrity: Self-verifying data in peer-to-peer systems. In Proceedings of the Workshop on Future Directions in Distributed Computing, 2002.