A new approach to secure logging

ACM Transactions on Storage

Volumn 5, Issue 1, 2009, Pages

  Ma, Di ^a   Tsudik, Gene ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Forward secure sequential aggregate (FssAgg) authentication; Forward secure stream integrity; MACs; Secure logging; Signatures; Truncation attack

Indexed keywords

FORWARD SECURE SEQUENTIAL AGGREGATE (FSSAGG) AUTHENTICATION; FORWARD-SECURE STREAM INTEGRITY; MACS; SECURE LOGGING; SIGNATURES; TRUNCATION ATTACK;

AGGREGATES; AUTHENTICATION; HARVESTING; LOGGING (FORESTRY);

WELL LOGGING;

EID: 65849178422     PISSN: 15533077     EISSN: 15533093     Source Type: Journal    
DOI: 10.1145/1502777.1502779     Document Type: Article

References (21)

1. BELLARE, M. AND PALACIO, A. 2002. Protecting against key exposure: strongly key-insulated encryption with optimal threshold. In Cryptology ePrint Archive, Report 2002/64.
2. BELLARE, M. AND YEE, B. 1997. Forward integrity for secure audit logs. Tech. rep. University of California at San Diego ftp://www.cs.ucsd.edu/pub/bsq/ pub/fi.ps.
3. BELLARE, M. AND YEE, B. 2003. Forward-security in private-key cryptography. In Proceedings of the RSA Conference Cryptography Track. (Pubitemid 36404407)
4. BURNS, R., GENTRY, C., LYNN, B., AND SHACHAM, H. 2005. Verifiable audit trails for a version-ing file system. In Proceedings of the Workshop on Storage and Security (StorageSS'05). 416-432.
5. CHONG, C., PENG, Z., AND HARTEL, P. 2002. Secure audit logging with tamper resistant hardware. In Technical Rep. TR-CTIT-02-29, Centre for Telematics and Information Technology, Univ. Twente, The Netherlands.
6. DODIS, Y., KATZ, J., XU, S., AND YUNG, M. 2002. Key-insulated public key cryptosystems. In Proceedings of the Annual International Conference on Theory and Practice of Cryptographic Technique (Eurocrypt'02). 65-82.
7. DODIS, Y., KATZ, J., XU, S., AND YUNG, M. 2003. Strong key-insulated public key cryptosystems. In Proceedings of the Conference on Public Key Cryptography. 130-144. (Pubitemid 137638347)
8. GUTMANN, P. 1996. Secure deletion of data from magnetic and solid-state memory. In Proceedings of the 6th USENIX Security Symposium. 22-25.
9. HALPERIN, D., KOHNO, T., HEYDT-BENJAMIN, T., FU, K., AND MAISEL, W. 2008. Security and privacy for implantable medical devices. IEEE Pervas. Comput. 7, 1.
10. HOLT, J. 2006. Logcrypt: forward security and public verification for secure audit logs. In Proceedings of the 2006 Australasian Workshops on Grid Computing and E-Research. 203-211.
11. KELSEY, J. AND SCHNEIER, B. 1999. Minimizing bandwidth for remote access to cryptographically protected audit logs. In Proceedings of the Recent Advances in Intrusion Detection (RAID'99).
12. MA, D. 2008. Practical forward secure sequential aggregate signatures. In Proceedings of the ACM Symposium on Information, Computer and Communications Security (ASIACCS'08).
13. MA, D. AND TSUDIK, G. 2007. Forward-secure sequentical aggregate authentication. In Proceedings of the IEEE Symposium on Security and Privacy.
14. MA, D. AND TSUDIK, G. 2008. A new approach to secure logging. In Proceedings of the 22nd Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSEC'08).
15. MYKLETUN, E., NARASIMHA, M., AND TSUDIK, G. 2004a. Authentication and integrity in outsourced databases. In Proceedings of the ACM Annual Symposium on Network and Distributed System Security (NDSS'04). (Pubitemid 44232391)
16. MYKLETUN, E., NARASIMHA, M., AND TSUDIK, G. 2004b. Signature bouquets: immutability for aggrea-gated/codensed signatures. In Proceedings of the European Symposium on Research in Computer Security (ESORICS'04). 160-176. (Pubitemid 39738739)
17. SCHNEIER, B. AND KELSEY, J. 1998. Cryptographic support for secure logs on untrusted machines. Proceedings of the 7th USENIX Security Symposium.
18. SCHNEIER, B. AND KELSEY, J. 1999. Secure audit logs to support computer forensics. ACM Trans. Inform. Syst. Secur., 159-176.
19. SWANSON, M. AND GUTTMAN, B. 1996. Generally accepted principles and practices for securing information technology systems. In National Institute of Standards and Technology Data Gateway 800-14.
20. U.S. DEPARTMENT OF DEFENSE, C. S. C. 1985. Trusted computer system evaluation criteria.
21. WATERS, B., BALFANZ, D., DURFEE, G., AND SMETERS, D. K. 2004. Building an encrypted and searchable audit log. In Proceedings of the ACM Annual Symposium on Network and Distributed System Security (NDSS'04).