Secure Logging As a Service-Delegating Log Management to the Cloud

被引:34
作者
Ray, Indrajit [1 ]
Belyaev, Kirill [1 ]
Strizhov, Mikhail [1 ]
Mulamba, Dieudonne [1 ]
Rajaram, Mariappan [2 ]
机构
[1] Colorado State Univ, Dept Comp Sci, Ft Collins, CO 80523 USA
[2] Compuware Corp, Detroit, MI 48226 USA
来源
IEEE SYSTEMS JOURNAL | 2013年 / 7卷 / 02期
关键词
Cloud computing; logging; privacy; security;
D O I
10.1109/JSYST.2012.2221958
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Securely maintaining log records over extended periods of time is very important to the proper functioning of any organization. Integrity of the log files and that of the logging process need to be ensured at all times. In addition, as log files often contain sensitive information, confidentiality and privacy of log records are equally important. However, deploying a secure logging infrastructure involves substantial capital expenses that many organizations may find overwhelming. Delegating log management to the cloud appears to be a viable cost saving measure. In this paper, we identify the challenges for a secure cloud-based log management service and propose a framework for doing the same.
引用
收藏
页码:323 / 334
页数:12
相关论文
共 28 条
[1]  
[Anonymous], 3164 RFC INT ENG TAS
[2]  
[Anonymous], 2004, P 13 C USENIX SEC S, DOI [DOI 10.5555/1251375.1251396, DOI 10.1186/1476-0711-3-21]
[3]  
[Anonymous], 1997, Technical Report
[4]  
[Anonymous], 2012, JAP AN PRIV
[5]  
BalaBit IT Security, 2011, SYSL NG MULT SYSL SE
[6]  
Blakley G. R., 1979, 1979 International Workshop on Managing Requirements Knowledge (MARK), P313, DOI 10.1109/MARK.1979.8817296
[7]   ON THE SECURITY OF PUBLIC KEY PROTOCOLS [J].
DOLEV, D ;
YAO, AC .
IEEE TRANSACTIONS ON INFORMATION THEORY, 1983, 29 (02) :198-208
[8]  
Droms R., 1991, 2131 RFC INT ENG TAS
[9]  
Eckert C, 2001, INT FED INFO PROC, V65, P35
[10]  
Flegel U, 2002, LECT NOTES COMPUT SC, V2437, P162