A framework for secure and verifiable logging in public communication networks

Authors:
Vassilios Stathopoulos;Panayiotis Kotzanikolaou;Emmanouil Magkos
Affiliations:
Authority for the Assurance of Communications Security and Privacy (ADAE), Maroussi, Greece;Authority for the Assurance of Communications Security and Privacy (ADAE), Maroussi, Greece;Department of Informatics, Ionian University, Palaia Anaktora, Corfu, Greece
Venue:
CRITIS'06 Proceedings of the First international conference on Critical Information Infrastructures Security
Year:
2006

Citing 4
Cited 1

How to Time-Stamp a Digital Document

CRYPTO '90 Proceedings of the 10th Annual International Cryptology Conference on Advances in Cryptology
ReVirt: enabling intrusion analysis through virtual-machine logging and replay

OSDI '02 Proceedings of the 5th symposium on Operating systems design and implementationCopyright restrictions prevent ACM from being able to make the PDFs for this conference available for downloading
Logcrypt: forward security and public verification for secure audit logs

ACSW Frontiers '06 Proceedings of the 2006 Australasian workshops on Grid computing and e-research - Volume 54
Cryptographic support for secure logs on untrusted machines

SSYM'98 Proceedings of the 7th conference on USENIX Security Symposium - Volume 7

BBox: a distributed secure log architecture

EuroPKI'10 Proceedings of the 7th European conference on Public key infrastructures, services and applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we are focusing on secure logging for public network providers. We review existing security threat models against system logging and we extend these to a new threat model especially suited in the environment of telecommunication network providers. We also propose a framework for secure logging in public communication networks as well as realistic implementations designs, which are more resilient to the identified security threats. A key role to the proposed framework is given to an independent Regulatory Authority, which is responsible to verify the integrity of the log files.