Secure audit logs to support computer forensics

ABSTRACT

In many real-world applications, sensitive information must be kept it log files on an untrusted machine. In the event that an attacker captures this machine, we would like to guarantee that he will gain little or no information from the log files and to limit his ability to corrupt the log files. We describe a computationally cheap method for making all log entries generated prior to the logging machine's compromise impossible for the attacker to read, and also impossible to modify or destroy undetectably.

REFERENCES

• 1: Ross J. Anderson , Roger M. Needham, Robustness Principles for Public Key Protocols, Proceedings of the 15th Annual International Cryptology Conference on Advances in Cryptology, p.236-247, August 27-31, 1995
• 2: ANDERSON, R. AND KUHN, M. 1996. Tamper resistance: A cautionary note. In Proceedings of the 2nd USENIX Workshop on Electronic Commerce (Nov.). USENIX Assoc., Berkeley, CA, 1-11.
• 3: Mihir Bellare , Ran Canetti , Hugo Krawczyk, Keying Hash Functions for Message Authentication, Proceedings of the 16th Annual International Cryptology Conference on Advances in Cryptology, p.1-15, August 18-22, 1996
• 4: Whitfield Diffie , Paul C. Van Oorschot , Michael J. Wiener, Authentication and authenticated key exchanges, Designs, Codes and Cryptography, v.2 n.2, p.107-125, June 1992 [doi>10.1007/BF00124891]
• 5: Hans Dobbertin , Antoon Bosselaers , Bart Preneel, RIPEMD-160: A Strengthened Version of RIPEMD, Proceedings of the Third International Workshop on Fast Software Encryption, p.71-82, February 21-23, 1996
• 6: ELGAMAL, T. 1985. A public-key cryptosystem and a signature scheme based on discrete logarithms. IEEE Trans. Inf. Theor. IT-31, 4, 469-472.
• 7: Stuart Haber , W. Scott Stornetta, How to Time-Stamp a Digital Document, Proceedings of the 10th Annual International Cryptology Conference on Advances in Cryptology, p.437-455, August 11-15, 1990
• 8: KELSEY, J. AND SCHNEIER, B. 1996. Authenticating outputs of computer software using a cryptographic coprocessor. In Proceedings of the 1996 CARDIS (Sept.). 11-24.
• 9: J. Kelsey , B. Schneier , C. Hall, An Authenticated Camera, Proceedings of the 12th Annual Computer Security Applications Conference, p.24, December 09-13, 1996
• 10: John Kelsey , Bruce Schneier , David Wagner, Protocol Interactions and the Chosen Protocol Attack, Proceedings of the 5th International Workshop on Security Protocols, p.91-104, April 07-09, 1997
• 11: LAI, X., MASSEY, J., AND MURPHY, S. 1991. Markov ciphers and differential crytanalysis. In Advances in Cryptology (CRYPTO '91). Springer-Verlag, New York, NY, 17-38.
• 12: MCCORMAC, J. 1996. European Scrambling Systems. Waterford University Press.
• 13: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 14: NBS, 1977. NBS FIPS PUB 46, Data Encryption Standard. U.S. Department of Commerce.
• 15: NIST, 1993. NIST FIPS PUB 180, Secure Hash Standard. U.S. Department of Commerce.
• 16: NIST, 1994. NIST FIPS PUB 186, Digital Signature Standard. U.S. Department of Commerce.
• 17: Michael Reiter, Distributing trust with the Rampart toolkit, Communications of the ACM, v.39 n.4, p.71-74, April 1996 [doi>10.1145/227210.227228]
• 18: James Riordan , Bruce Schneier, Environmental Key Generation Towards Clueless Agents, Mobile Agents and Security, p.15-24, January 1998
• 19: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• 20: Bruce Schneier, Description of a New Variable-Length Key, 64-bit Block Cipher (Blowfish), Fast Software Encryption, Cambridge Security Workshop, p.191-204, December 09-11, 1993
• 21: Bruce Schneier, Applied cryptography (2nd ed.): protocols, algorithms, and source code in C, John Wiley & Sons, Inc., New York, NY, 1995
• 22: Bruce Schneier , John Kelsey, Automatic Event-Stream Notarization Using Digital Signatures, Proceedings of the International Workshop on Security Protocols, p.155-169, April 10-12, 1996
• 23: Bruce Schneier , John Kelsey, Remote auditing of software outputs using a trusted coprocessor, Future Generation Computer Systems, v.13 n.1, p.9-18, July 1997 [doi>10.1016/S0167-739X(97)00004-6]
• 24: SCHNEIER, B. AND KELSEY, J. 1998. Cryptographic support for secure logs on untrusted machines. In Proceedings of the 7th on USENIX Security Symposium (Jan.). USENIX Assoc., Berkeley, CA, 53-62.
• 25: SCHNEIER, B. AND KELSEY, J. 1999. Tamperproof audit logs as a forensics tool for intrusion detection systems. Comput. Networks ISDN Syst. 31.
• 26: Douglas R. Stinson, Cryptography: Theory and Practice, CRC Press, Inc., Boca Raton, FL, 1995
• 27: Clifford Stoll, The cuckoo's egg: tracking a spy through the maze of computer espionage, Doubleday, New York, NY, 1989
• 28: WILDING, E. 1997. Computer forensics: Trends and concerns. Inf. Sec. Bull. 2, 6 (Dec.), 15-18.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

General Terms:
Security

Keywords:
audit logs, auditing, authenthication, computer forensics, hash chains, intrusion detection