Principles of Secure Logging for Safekeeping Digital Evidence

Freiling F, Bajramovic E (2018)

Publication Language: English

Publication Type: Conference contribution, Original article

Publication year: 2018

Conference Proceedings Title: 2018 11th International Conference on IT Security Incident Management & IT Forensics (IMF)

Event location: Hamburg DE

DOI: 10.1109/IMF.2018.00012

Abstract

The investigation of log files is an essential part of any form of IT incident management and IT forensics. In situations where logs can be manipulated, logging approaches that offer security guarantees are advisable. Within a formal system model, we describe several well-known existing approaches to secure logging and compare them with each other. Furthermore, we formalize the security requirements of secure logging approaches and systematically investigate which combinations of guarantees are achieved by the published approached under increasingly stronger attacker models.

Authors with CRIS profile

Felix Freiling Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Edita Bajramovic Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen)

How to cite

APA:

Freiling, F., & Bajramovic, E. (2018). Principles of Secure Logging for Safekeeping Digital Evidence. In IEEE Computer Society (Eds.), 2018 11th International Conference on IT Security Incident Management & IT Forensics (IMF). Hamburg, DE.

MLA:

Freiling, Felix, and Edita Bajramovic. "Principles of Secure Logging for Safekeeping Digital Evidence." Proceedings of the 11th International Conference on IT Security Incident Management & IT Forensics (IMF 2018), Hamburg Ed. IEEE Computer Society, 2018.

BibTeX: Download