...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Journal of network and computer applications >Secure and transparent audit logs with BlockAudit
【24h】

Secure and transparent audit logs with BlockAudit

机译：使用BlockAudit安全透明的审核日志

获取原文
获取原文并翻译 | 示例
   

获取外文期刊封面封底 >>

       
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Audit logs serve as a critical component in enterprise business systems and are used for auditing, storing, and tracking changes made to the data. However, audit logs are vulnerable to a series of attacks enabling adversaries to tamper data and corresponding audit logs without getting detected. Among them, two well-known attacks are "the physical access attack," which exploits root privileges, and "the remote vulnerability attack," which compromises known vulnerabilities in database systems. In this paper, we present BlockAudit a scalable and tamper-proof system that leverages the design properties of audit logs and security guarantees of blockchain to enable secure and trustworthy audit logs. Towards that, we construct the design schema of BlockAudit and outline its functional and operational procedures. We implement our design on a custom-built Practical Byzantine Fault Tolerance (PBFT) blockchain system and evaluate the performance in terms of latency, network size, payload size, and transaction rate. Our results show that conventional audit logs can seamlessly transition into BlockAudit to achieve higher security and defend against the known attacks on audit logs.
机译：审核日志是企业业务系统中的关键组件，用于审核，存储和跟踪对数据所做的更改。但是，审核日志很容易受到一系列攻击的攻击，使攻击者可以在不被检测到的情况下篡改数据和相应的审核日志。其中，两种著名的攻击是利用根特权的“物理访问攻击”和利用数据库系统中已知漏洞的“远程漏洞攻击”。在本文中，我们介绍了BlockAudit一个可扩展且防篡改的系统，该系统利用审计日志的设计属性和区块链的安全保证来启用安全可靠的审计日志。为此，我们构建了BlockAudit的设计方案，并概述了其功能和操作程序。我们在定制的实用拜占庭容错（PBFT）区块链系统上实施我们的设计，并根据延迟，网络大小，有效负载大小和事务处理速率评估性能。我们的结果表明，常规审核日志可以无缝过渡到BlockAudit，以实现更高的安全性并防御已知的审核日志攻击。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号