Secure audit logs to support computer forensics
Open accessAbstract
In many real-world applications, sensitive information must be kept it log files on an untrusted machine. In the event that an attacker captures this machine, we would like to guarantee that he will gain little or no information from the log files and to limit his ability to corrupt the log files. We describe a computationally cheap method for making all log entries generated prior to the logging machine's compromise impossible for the attacker to read, and also impossible to modify or destroy undetectably.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Key-evolution schemes provide forward integrity but require careful key management and offer only sequential verification.
“Key-evolution schemes (Schneier and Kelsey, 1999) chain successive log entries through evolving cryptographic keys, providing forward integrity but requiring careful key management and offering only sequential verification.”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Schneier and Kelsey, 1999
Section 3 and Section 3.1 describe evolving authentication keys, deleting earlier keys, and chaining log entries to protect records after compromise. Section 3.5 has the verifier check each entry in the hash chain, supporting sequential checking, but Section 3 also says all previous entries can be remotely authenticated using a single hash value. The paper therefore does not support the unqualified claim that verification is *only* sequential; it also does not explicitly characterize key management as requiring special care. (LLM, conf=0.84)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
A method for obtaining digital signatures and public-key cryptosystems
Rivest, R. L., Shamir, A., & Adleman, L. (1978) · Communications of the ACM · doi:10.1145/359340.359342 · Cited by 13,462 · see citing works
A method for obtaining digital signatures and public-key cryptosystems
Rivest, R. L., Shamir, A., & Adleman, L. (1983) · Communications of the ACM · doi:10.1145/357980.358017 · Cited by 13,012 · see citing works
Handbook of applied cryptography
(1997) · Choice Reviews Online · doi:10.5860/choice.34-4512 · Cited by 10,357 · see citing works
A public key cryptosystem and a signature scheme based on discrete logarithms
Elgamal, T. (1985) · IEEE Transactions on Information Theory · doi:10.1109/tit.1985.1057074 · Cited by 8,059 · see citing works
Cryptography: Theory and Practice
Stinson, D. R. (1995) · Cited by 2,662 · see citing works
A Public Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms
ElGamal, T. (2007) · Springer eBooks · doi:10.1007/3-540-39568-7_2 · Cited by 1,611 · see citing works
Keying Hash Functions for Message Authentication
Mihir Bellare, Y., Canetti, R., & Krawczyk, H. (1996) · Lecture notes in computer science · doi:10.1007/3-540-68697-5_1 · Cited by 1,601 · see citing works
Authentication and authenticated key exchanges
Diffie, W., van Oorschot, P. C., & Wiener, M. J. (1992) · Designs Codes and Cryptography · doi:10.1007/bf00124891 · Cited by 1,147 · see citing works
Tamper resistance: a cautionary note
Anderson, R., & Kühn, M. (1996) · Cited by 902 · see citing works
Description of a new variable-length key, 64-bit block cipher (Blowfish)
Schneier, B. (1994) · Lecture notes in computer science · doi:10.1007/3-540-58108-1_24 · Cited by 793 · see citing works
Self-citationAdvances in Cryptology — CRYPTO ’96
(1996) · Lecture notes in computer science · doi:10.1007/3-540-68697-5 · Cited by 793 · see citing works
RIPEMD-160: A strengthened version of RIPEMD
Dobbertin, H., Bosselaers, A., & Bart Preneel, A. (1996) · Lecture notes in computer science · doi:10.1007/3-540-60865-6_44 · Cited by 486 · see citing works
How to Time-Stamp a Digital Document
Haber, S., & Stornetta, W. S. (2007) · Springer eBooks · doi:10.1007/3-540-38424-3_32 · Cited by 407 · see citing works
Cryptographic Support for Secure Logs on Untrusted Machines
Schneier, B., & Kelsey, J. M. (1998) · Cited by 242 · see citing works
Self-citationThe Cuckoo's Egg: Tracking a Spy Through the Maze of Computer Espionage
Stoll, C., & Connolly, J. W. D. (1990) · Physics Today · doi:10.1063/1.2810663 · Cited by 232 · see citing works
Advances in Cryptology – CRYPTO 2012
Safavi-Naini, R., & Canetti, R. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-32009-5 · Cited by 232 · see citing works
The Cuckoo's Egg : Tracking a Spy Through the Maze of Computer Espionage
Stoll, C. (1991) · Cited by 208 · see citing works
Robustness Principles for Public Key Protocols
Anderson, R., & Needham, R. M. (1995) · Lecture notes in computer science · doi:10.1007/3-540-44750-4_19 · Cited by 180 · see citing works
Environmental Key Generation Towards Clueless Agents
Riordan, J. F., & Schneier, B. (1998) · Lecture notes in computer science · doi:10.1007/3-540-68671-1_2 · Cited by 151 · see citing works
Self-citationDistributing trust with the Rampart toolkit
Reiter, M. K. (1996) · Communications of the ACM · doi:10.1145/227210.227228 · Cited by 81 · see citing works
Remote auditing of software outputs using a trusted coprocessor
Schneier, B., & Kelsey, J. M. (1997) · Future Generation Computer Systems · doi:10.1016/s0167-739x(97)00004-6 · Cited by 20 · see citing works
Self-citationAutomatic event-stream notarization using digital signatures
Schneier, B., & Kelsey, J. M. (1997) · Lecture notes in computer science · doi:10.1007/3-540-62494-5_15 · Cited by 18 · see citing works
Self-citationKelsey, J. M., Schneier, B., & Hall, C. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1996.569666 · Cited by 15 · see citing works
Self-citationAuthenticating Outputs of Computer Software Using a Cryptographic Coprocessor.
Schneier, B., & Kelsey, J. M. (1996) · Smart Card Research and Advanced Application Conference · Cited by 4 · see citing works
Self-citation
Flagged first, then by citations
2 of the 26 references couldn’t be matched to a known paper.
Research works printed but not linked: 3
- KELSEY, J., SCHNEIER, B., AND WAGNER, D. 1998. Protocol interactions and the chosen protocol attack. In Proceedings of the 1997 Workshop on Protocols. Springer-Verlag, New York, NY, 91-104.
- MCCORMAC, J. 1996. European Scrambling Systems. Waterford University Press.
- SCHNEIER, B. 1995. Applied cryptography (2nd ed.): protocols, algorithms, and source code in C. 2ND John Wiley & Sons, Inc., New York, NY.
Cited by
Sorted by citations
Thakkar, A., & Lohiya, R. (2021) · Artificial Intelligence Review · doi:10.1007/s10462-021-10037-9 · Cited by 375 · see citing works
Building an Encrypted and Searchable Audit Log.
Waters, B. R., Balfanz, D., Durfee, G., & Smetters, D. K. (2004) · Cited by 372 · see citing works
Block-DEF: A secure digital evidence framework using blockchain
Tian, Z., Li, M., Meikang Qiu, A., Sun, Y., & Su, S. (2019) · Information Sciences · doi:10.1016/j.ins.2019.04.011 · Cited by 361 · see citing works
Vanish: increasing data privacy with self-destructing data
Geambasu, R., Kohno, T., Levy, A. A., & Levy, H. M. (2009) · Cited by 344 · see citing works
Privacy and Data Protection by Design - from policy to engineeringPreprint
Danezis, G., Domingo‐Ferrer, J., Hansen, M., Hoepman, J.-H., Métayer, D. L., Tirtea, R., & Schiffner, S. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1501.03726 · Cited by 287 · see citing works
Privacy as a Service: Privacy-Aware Data Storage and Processing in Cloud Computing Architectures
Itani, W., Kayssi, A. I., & Chehab, A. (2009) · IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/dasc.2009.139 · Cited by 276 · see citing works
Keeping Authorities “Honest or Bust” with Decentralized Witness Cosigning
Syta, E., Tamas, I., Visher, D., Wolinsky, D. I., Jovanovic, P., Gasser, L., Gailly, N., Khoffi, I., & Ford, B. (2016) · Infoscience (Ecole Polytechnique Fédérale de Lausanne) · doi:10.1109/sp.2016.38 · Cited by 253 · see citing works
The case of the fake Picasso: preventing history forgery with secure provenance
Hasan, R., Sion, R., & Winslett, M. (2009) · Cited by 205 · see citing works
A new approach to secure logging
Ma, D., & Tsudik, G. (2009) · ACM Transactions on Storage · doi:10.1145/1502777.1502779 · Cited by 192 · see citing works
ROTE: Rollback Protection for Trusted Execution
Matetić, S., Ahmed, M., Kostiainen, K., Dhar, A., Sommer, D., Gervais, A., Juels, A., & Čapkun, S. (2017) · UCL Discovery (University College London) · Cited by 160 · see citing works
Personalization in privacy-aware highly dynamic systems
Sackmann, S., Strüker, J., & Accorsi, R. (2006) · Communications of the ACM · doi:10.1145/1151030.1151052 · Cited by 158 · see citing works
Strong accountability for network storage
Yumerefendi, A. R., & Chase, J. S. (2007) · ACM Transactions on Storage · doi:10.1145/1288783.1288786 · Cited by 153 · see citing works
Efficient data structures for tamper-evident logging
Crosby, S. A., & Wallach, D. S. (2009) · Cited by 139 · see citing works
Preventing history forgery with secure provenance
Hasan, R., Sion, R., & Winslett, M. (2009) · ACM Transactions on Storage · doi:10.1145/1629080.1629082 · Cited by 136 · see citing works
Zawoad, S., Dutta, A. K., & Hasan, R. (2013) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/2484313.2484342 · Cited by 134 · see citing works
Tamper Detection in Audit Logs
Snodgrass, R. T., Yao, S. S., & Collberg, C. S. (2004) · Elsevier eBooks · doi:10.1016/b978-012088469-8.50046-2 · Cited by 125 · see citing works
Logcrypt: Forward Security and Public Verification for Secure Audit Logs.
Holt, J. E., & Seamons, K. E. (2005) · Cited by 121 · see citing works
Storage-based Intrusion Detection: Watching storage activity for suspicious behavior
Pennington, A. G., Strunk, J. D., Griffin, J. L., Soules, C. A. N., Goodson, G. R., & Ganger, G. R. (2002) · doi:10.21236/ada461142 · Cited by 121 · see citing works
Indexing Information for Data Forensics
Goodrich, M. T., Atallah, M. J., & Tamassia, R. (2005) · Lecture notes in computer science · doi:10.1007/11496137_15 · Cited by 98 · see citing works
VoteBox: a tamper-evident, verifiable electronic voting system
Sandler, D. R., Derr, K., & Wallach, D. S. (2008) · Cited by 96 · see citing works
Malicious Behavior Detection using Windows Audit Logs
Berlin, K., Slater, D., & Saxe, J. (2015) · ACM Workshop on Artificial Intelligence and Security (AISec) · doi:10.1145/2808769.2808773 · Cited by 96 · see citing works
Karande, V., Bauman, E., Lin, Z., & Khan, L. R. (2017) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3052973.3053034 · Cited by 96 · see citing works
Blockchain as a Service (BaaS): Providers and Trust
Singh, J. P., & Michels, J. D. (2018) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw.2018.00015 · Cited by 91 · see citing works
Towards Building Forensics Enabled Cloud Through Secure Logging-as-a-Service
Zawoad, S., Dutta, A. K., & Hasan, R. (2015) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2015.2482484 · Cited by 90 · see citing works
BAF: An Efficient Publicly Verifiable Secure Audit Logging Scheme for Distributed Systems
Yavuz, A. A., & Ning, P. (2009) · Annual Computer Security Applications Conference · doi:10.1109/acsac.2009.28 · Cited by 88 · see citing works
Towards Blockchain-Driven, Secure and Transparent Audit Logs
Ahmad, A., Saad, M., Bassiouni, M. A., & Mohaisen, A. (2018) · EAI International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services (MobiQuitous) · doi:10.1145/3286978.3286985 · Cited by 78 · see citing works
A secure and auditable logging infrastructure based on a permissioned blockchain
Putz, B., Menges, F., & Pernul, G. (2019) · Computers & Security · doi:10.1016/j.cose.2019.101602 · Cited by 77 · see citing works
Custos: Practical Tamper-Evident Auditing of Operating Systems Using Trusted Execution
Paccagnella, R., Datta, P., Hassan, W. U., Bates, A., Fletcher, C. W., Miller, A. K., & Tian, D. J. (2020) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2020.24065 · Cited by 76 · see citing works
Forensic analysis of database tampering
Pavlou, K. E., & Snodgrass, R. T. (2008) · ACM Transactions on Database Systems · doi:10.1145/1412331.1412342 · Cited by 76 · see citing works
Secure Logging as a Service—Delegating Log Management to the Cloud
Ray, I., Belyaev, K., Strizhov, M., Mulamba, D., & Rajaram, M. (2013) · IEEE Systems Journal · doi:10.1109/jsyst.2012.2221958 · Cited by 76 · see citing works
Privacy and Data Protection by Design - from policy to engineering
Danezis, G., Domingo-Ferrer, J., Hansen, M., Hoepman, J.-H., Metayer, D., Tirtea, R., & Schiffner, S. (2014) · UCL Discovery (University College London) · doi:10.2824/38623 · Cited by 73 · see citing works
Towards Bidirectional Ratcheted Key Exchange
Poettering, B., & Rösler, P. (2018) · Lecture notes in computer science · doi:10.1007/978-3-319-96884-1_1 · Cited by 68 · see citing works
Applying digital rights management systems to privacy rights management
Kenny, S., & Korba, L. W. (2002) · Computers & Security · doi:10.1016/s0167-4048(02)01117-3 · Cited by 68 · see citing works
Telepathwords: preventing weak passwords by reading users' minds
Komanduri, S., Shay, R., Cranor, L. F., Herley, C., & Schechter, S. (2014) · USENIX Security Symposium · Cited by 67 · see citing works
Implementing Trust in Cloud Infrastructures
Neisse, R., Holling, D., & Pretschner, A. (2011) · IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGrid) · doi:10.1109/ccgrid.2011.35 · Cited by 65 · see citing works
Analysis of Computer Intrusions Using Sequences of Function Calls
Peisert, S., Bishop, M., Karin, S., & Marzullo, K. (2007) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2007.1003 · Cited by 65 · see citing works
Yumerefendi, A. R., & Chase, J. S. (2004) · ACM SIGOPS European Workshop · doi:10.1145/1133572.1133585 · Cited by 63 · see citing works
Secure Audit Logging with Tamper-Resistant Hardware
Chong, C. N., Peng, Z., & Hartel, P. (2003) · Springer eBooks · doi:10.1007/978-0-387-35691-4_7 · Cited by 60 · see citing works
Experiments in rights control : expression and enforcement
Chong, C. N. (2005) · University of Twente Research Information · Cited by 59 · see citing works
A survey on forensic investigation of operating system logs
Studiawan, H., Sohel, F. A., & Payne, C. (2019) · Digital Investigation · doi:10.1016/j.diin.2019.02.005 · Cited by 58 · see citing works
Optimal Witnessing of Healthcare IoT Data Using Blockchain Logging Contract
Chinaei, M. H., Gharakheili, H. H., & Sivaraman, V. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3051433 · Cited by 55 · see citing works
Efficient, Compromise Resilient and Append-Only Cryptographic Schemes for Secure Audit Logging
Yavuz, A. A., Ning, P., & Reiter, M. K. (2012) · Lecture Notes in Computer Science · doi:10.1007/978-3-642-32946-3_12 · Cited by 53 · see citing works
Ristenpart, T., Maganis, G., Krishnamurthy, A., & Kohno, T. (2009) · Cited by 52 · see citing works
Secure and Transparent Audit Logs with BlockAudit
Ahmad, A., Saad, M., & Mohaisen, A. (2019) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2019.102406 · Cited by 51 · see citing works
Blockchain as an Audit-Able Communication Channel
Suzuki, S., & Murai, J. (2017) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac.2017.72 · Cited by 51 · see citing works
Logging to the Danger Zone: Race Condition Attacks and Defenses on System Audit Frameworks
Paccagnella, R., Liao, K., Tian, D. J., & Bates, A. (2020) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3372297.3417862 · Cited by 51 · see citing works
Secure Healthcare Record Sharing Mechanism with Blockchain
Butt, G. Q., Syed, T. A., Riaz, R., Rizvi, S. S., & Paul, A. (2022) · Applied Sciences · doi:10.3390/app12052307 · Cited by 49 · see citing works
Practical forward secure sequential aggregate signatures
Ma, D. (2008) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/1368310.1368361 · Cited by 49 · see citing works
DistLog: A distributed logging scheme for IoT forensics
Noura, H., Salman, O., Chehab, A., & Couturier, R. (2019) · Ad Hoc Networks · doi:10.1016/j.adhoc.2019.102061 · Cited by 49 · see citing works
A system for the proactive, continuous, and efficient collection of digital forensic evidence
Shields, C., Frieder, O., & Maloof, M. (2011) · Digital Investigation · doi:10.1016/j.diin.2011.05.002 · Cited by 48 · see citing works
Safe-Keeping Digital Evidence with Secure Logging Protocols: State of the Art and Challenges
Accorsi, R. (2009) · International Conference on IT Security Incident Management and IT Forensics (IMF) · doi:10.1109/imf.2009.18 · Cited by 46 · see citing works
On the Forensic Validity of Approximated Audit Logs
Michael, N., Mink, J., Liu, J., Gaur, S., Hassan, W. U., & Bates, A. (2020) · Annual Computer Security Applications Conference · doi:10.1145/3427228.3427272 · Cited by 46 · see citing works
Plaga, S., Wiedermann, N., Antón, S. D. D., Tatschner, S., Schotten, H. D., & Newe, T. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.11.008 · Cited by 45 · see citing works
BBox: A Distributed Secure Log Architecture
Accorsi, R. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-22633-5_8 · Cited by 44 · see citing works
EngraveChain: A Blockchain-Based Tamper-Proof Distributed Log System
Shekhtman, L., & Waisbard, E. (2021) · Future Internet · doi:10.3390/fi13060143 · Cited by 43 · see citing works
Survey of Intrusion Detection Research
Lundin, E., & Jonsson, E. (2002) · Chalmers Publication Library (Chalmers University of Technology) · Cited by 43 · see citing works
Computer forensics in forensis
Peisert, S., Bishop, M., & Marzullo, K. (2008) · ACM SIGOPS Operating Systems Review · doi:10.1145/1368506.1368521 · Cited by 43 · see citing works
BlockTrail: A Service for Secure and Transparent Blockchain-Driven Audit Trails
Ahmad, A., Saad, M., Ghamdi, M. A. A., Nyang, D., & Mohaisen, A. (2021) · IEEE Systems Journal · doi:10.1109/jsyst.2021.3097744 · Cited by 42 · see citing works
Purpose Control: Did You Process the Data for the Intended Purpose?
Petković, M., Prandi, D., & Zannone, N. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-23556-6_10 · Cited by 41 · see citing works
Data provenance assurance in the cloud using blockchain
Shetty, S. S., Red, V. A., Kamhoua, C., Kwiat, K., & Njilla, L. (2017) · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE · doi:10.1117/12.2266994 · Cited by 41 · see citing works
BlockTrail: A Scalable Multichain Solution for Blockchain-Based Audit Trails
Ahmad, A., Saad, M., Njilla, L., Kamhoua, C., Bassiouni, M. A., & Mohaisen, A. (2019) · International Conference on Communications · doi:10.1109/icc.2019.8761448 · Cited by 41 · see citing works
Butin, D., Chicote, M., & Métayer, D. L. (2013) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2013.26 · Cited by 40 · see citing works
Privacy Preserving Multiparty Multilevel DRM Architecture
Sachan, A., Emmanuel, S., Das, A., & Kankanhalli, M. (2009) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc.2009.4784937 · Cited by 39 · see citing works
Secured Temporal Log Management Techniques for Cloud
Muthurajkumar, S., Ganapathy, S., Muthuswamy, V., & Kannan, A. (2015) · Procedia Computer Science · doi:10.1016/j.procs.2015.02.098 · Cited by 38 · see citing works
Validating Data Integrity with Blockchain
Kalis, R., & Belloum, A. S. Z. (2018) · IEEE International Conference on Cloud Computing Technology and Science · doi:10.1109/cloudcom2018.2018.00060 · Cited by 38 · see citing works
On the Relationship of Privacy and Secure Remote Logging in Dynamic Systems
Accorsi, R. (2006) · Kluwer Academic Publishers eBooks · doi:10.1007/0-387-33406-8_28 · Cited by 38 · see citing works
Forensic analysis of database tampering
Pavlou, K. E., & Snodgrass, R. T. (2006) · ACM SIGMOD International Conference on Management of Data (SIGMOD) · doi:10.1145/1142473.1142487 · Cited by 37 · see citing works
Data Protection and Data Sharing in Telematics
Duri, S. S., Elliott, J., Gruteser, M., Liu, X., Moskowitz, P. A., Perez, R., Singh, M., & Tang, J.-M. (2004) · Mobile Networks and Applications · doi:10.1023/b:mone.0000042507.74516.00 · Cited by 36 · see citing works
Log Data as Digital Evidence: What Secure Logging Protocols Have to Offer?
Accorsi, R. (2009) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac.2009.166 · Cited by 35 · see citing works
Yavuz, A. A., Ning, P., & Reiter, M. K. (2012) · ACM Transactions on Information and System Security · doi:10.1145/2240276.2240280 · Cited by 35 · see citing works
CLASS: Cloud Log Assuring Soundness and Secrecy Scheme for Cloud Forensics
Ahsan, M. A. M., Wahab, A. W. A., Idris, M. Y. I., Khan, S., Bachura, E., & Choo, K. R. (2018) · IEEE Transactions on Sustainable Computing · doi:10.1109/tsusc.2018.2833502 · Cited by 35 · see citing works
Distributed Configuration, Authorization and Management in the Cloud-Based Internet of Things
Henze, M., Wolters, B., Matzutt, R., Zimmermann, T., & Wehrle, K. (2017) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom/bigdatase/icess.2017.236 · Cited by 34 · see citing works
Towards Meeting the Privacy Challenge: Adapting DRM
Korba, L. W., & Kenny, S. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-44993-5_8 · Cited by 34 · see citing works
Public audit for operation behavior logs with error locating in cloud storage
Tian, H., Chen, Z., Chang, C., Huang, Y., Wang, T., Huang, Z., Cai, Y., & Chen, Y. (2018) · Soft Computing · doi:10.1007/s00500-018-3038-8 · Cited by 33 · see citing works
Do You Know Where Your Data’s Been? – Tamper-Evident Database Provenance
Zhang, J., Chapman, A. P., & LeFevre, K. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-04219-5_2 · Cited by 33 · see citing works
Design and Implementation of Verifiable Audit Trails for a Versioning File System
Peterson, Z. N. J., Burns, R. C., Ateniese, G., & Bono, S. (2007) · Cited by 32 · see citing works
SecLaaS: Secure Logging-as-a-Service for Cloud ForensicsPreprint
Zawoad, S., Dutta, A. K., & Hasan, R. (2013) · arXiv (Cornell University) · doi:10.48550/arxiv.1302.6267 · Cited by 32 · see citing works
SealFS: Storage-based tamper-evident logging
Soriano, E., & Guardiola-Múzquiz, G. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102325 · Cited by 31 · see citing works
Searchable encryption: A survey on privacy‐preserving search schemes on encrypted outsourced data
Handa, R., Krishna, C. R., & Aggarwal, N. (2019) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.5201 · Cited by 31 · see citing works
Balloon: A Forward-Secure Append-Only Persistent Authenticated Data Structure
Pulls, T., & Peeters, R. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-24177-7_31 · Cited by 30 · see citing works
A New Approach to Secure Logging
Ma, D., & Tsudik, G. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-70567-3_4 · Cited by 30 · see citing works
Carving database storage to detect and trace security breaches
Wagner, J., Rasin, A., Glavic, B., Heart, K., Furst, J. D., Bressan, L., & Grier, J. (2017) · Digital Investigation · doi:10.1016/j.diin.2017.06.006 · Cited by 29 · see citing works
Traceback for End-to-End Encrypted Messaging
Tyagi, N., Miers, I., & Ristenpart, T. (2019) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3319535.3354243 · Cited by 29 · see citing works
Tep, K. S., Martini, B., Hunt, R., & Choo, K. R. (2015) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom.2015.485 · Cited by 29 · see citing works
Improving evidence acquisition from live network sources
Nikkel, B. J. (2006) · Digital Investigation · doi:10.1016/j.diin.2006.05.002 · Cited by 29 · see citing works
Frühwirt, P., Kieseberg, P., Krombholz, K., & Weippl, E. R. (2014) · Digital Investigation · doi:10.1016/j.diin.2014.09.003 · Cited by 28 · see citing works
Towards More Trustable Log Files for Digital Forensics by Means of “Trusted Computing”
Bock, B. R., Huemer, D., & Tjoa, A. M. (2010) · International Conference on Advanced Information Networking and Applications (AINA) · doi:10.1109/aina.2010.26 · Cited by 27 · see citing works
Enabling public auditability for operation behaviors in cloud storage
Tian, H., Chen, Z., Chang, C., Kuribayashi, M., Huang, Y., Cai, Y., Chen, Y., & Wang, T. (2016) · Soft Computing · doi:10.1007/s00500-016-2311-y · Cited by 26 · see citing works
Public Auditing of Log Integrity for Cloud Storage Systems via Blockchain
Wang, J., Peng, F., Tian, H., Chen, W., & Lu, J. (2019) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-030-21373-2_29 · Cited by 25 · see citing works
Extended RBAC-based design and implementation for a secure data warehouse
Thuraisingham, B. M., Kantarcıoğlu, M., & Iyer, S. (2007) · International Journal of Business Intelligence and Data Mining · doi:10.1504/ijbidm.2007.016379 · Cited by 25 · see citing works
Towards a practical cloud forensics logging framework
Pichan, A., Lazarescu, M., & Soh, S. (2018) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2018.07.008 · Cited by 25 · see citing works
Server-side detection of malware infection
Jakobsson, M., & Juels, A. (2009) · doi:10.1145/1719030.1719033 · Cited by 25 · see citing works
Empirically comparing the performance of blockchain's consensus algorithms
Ahmad, A., Alabduljabbar, A., Saad, M., Nyang, D., Kim, J., & Mohaisen, A. (2021) · IET Blockchain · doi:10.1049/blc2.12007 · Cited by 24 · see citing works
Log Analysis for Data Protection Accountability
Butin, D., & Métayer, D. L. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-06410-9_12 · Cited by 24 · see citing works
Ficklebase: Looking into the future to erase the past
Bajaj, S., & Sion, R. (2013) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde.2013.6544816 · Cited by 24 · see citing works
Intrusion Detection, Diagnosis, and Recovery with Self-Securing Storage
Strunk, J. D., Goodson, G. R., Pennington, A. G., Soules, C. A. N., & Ganger, G. R. (2002) · doi:10.21236/ada461216 · Cited by 24 · see citing works
Secure and Privacy-Friendly Logging for eGovernment Services
Wouters, K., Simoens, K., Lathouwers, D., & Bart Preneel, A. (2008) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2008.41 · Cited by 23 · see citing works
T-Box: A Forensics-Enabled Trusted Automotive Data Recording Method
Lee, S.-H., Choi, W., Jo, H. J., & Lee, D. H. (2019) · IEEE Access · doi:10.1109/access.2019.2910865 · Cited by 23 · see citing works
Security and Privacy in the Computer Forensics Context
Srinivasan, S. (2006) · IEEE International Conference on Communication Technology (ICCT) · doi:10.1109/icct.2006.341936 · Cited by 23 · see citing works
Using Independent Auditors as Intrusion Detection Systems
Molina, J., & Arbaugh, W. A. (2002) · Lecture notes in computer science · doi:10.1007/3-540-36159-6_25 · Cited by 23 · see citing works
- Authors
- Schneier, B., & Kelsey, J.
- Affiliations
- University of Minnesota (US)
- Venue
- ACM Transactions on Information and System Security
- Published
- 1999-05
- Volume
- 2
- Issue
- 2
- Pages
- 159-176
- ISSN
- 1094-9224 (ISSN-L)
- 1557-7406
- OpenAlex
- W1987593503
- Cited by
- 443
- References
- 26
- Citations by year
- 2026: 38 · 2025: 7 · 2024: 5 · 2023: 11 · 2022: 5 · 2021: 10 · 2020: 18 · 2019: 23 · 2018: 22 · 2017: 19 · 2016: 10 · 2015: 30 · 2014: 29 · 2013: 23 · 2012: 21
- FWCI
- 3.73
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- ACM Transactions on Information and System Security (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Keywords
- audit logs, log integrity, digital forensics, secure logging
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
