VMBLS: virtual machine based logging scheme for prevention of tampering and loss
ARES'11 Proceedings of the IFIP WG 8.4/8.9 international cross domain conference on Availability, reliability and security for business, enterprise and health information systems
| Hi-index | 0.00 |
This paper proposed a novel method to protect logging information more securely. The method, named NIGELOG, produces multiple backups of the logging information, hides them in arbitrary directories, and periodically moves these backups to other directories. Also, NIGELOG can automatically restore the original logging information by using the backups even if the original file is altered or deleted by intruders. NIGELOG is implemented as a C++ class library with some standard software libraries and does not require additional hardwares such as write-once media. It is easier to apply NIGELOG to UNIX applications which produces log-files.