The DOI matches its Crossref record.
Guide to computer security log management
Abstract
The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“The log schema reflects common IoT telemetry and event fields used in operational security monitoring (Hassan, 2019; National Institute of Standards and Technology, 2020; Kent and Souppaya, 2006; Gerhards, 2009).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Kent and Souppaya, 2006
Citations
Cites
Still being checked.
Cited by
Sorted by citations
Items 201–275 of 275
A SECURE AND TRUSTWORTHY RESOURCE SHARING IN SOCIAL NETWORK AND CLOUD COMPUTING
Dewkhaid, D., Kirubakaran, M. P. S., & Kavin, P. (2015) · International Journal of Modern Trends in Engineering and Research
Distributed Detecting and Real-Time Advertising System of Equipment Failure Based on MANET
Qin, X., & Yi, T. (2012) · Advances in intelligent and soft computing · doi:10.1007/978-3-642-27945-4_55
Keskitetty lokienhallinta LabraNet-ympäristössä
Hallberg, J. (2013)
CONFIDENTIALITY, INTEGRITY AND NON-REPUDIATION IN SMARTGRIDS
Ciências, F. D. (2011)
Formato de Representação de Eventos de Segurança de Informação
de Engenharia, E. (2014)
Chuvakin, A. A., Schmidt, K., & Phillips, C. (2012) · Elsevier eBooks · doi:10.1016/b978-1-59-749635-3.00004-x
Research and Development of Centrlized Log Management System Based on Syslog Protocol
Hui, H., & Bai, L. (2013) · Lecture notes in electrical engineering · doi:10.1007/978-1-4614-3872-4_249
Policy Driven Software Monitoring
Wong, Y. F. A. (2007) · UWSpace (University of Waterloo)
Delegating Log management to the Cloud ensuring Secure Logging
Jyothi, K. T., Lissy Anto, P., & Peter, N. (2015) · Journal of Emerging Technologies and Innovative Research
Maintaining Log Management to the Cloud And Providing confidentiality
Naik, M. H., & Reddy, K. (2014)
Detecting Security Violations Based on Multilayered Event Log Processing
Malec, P., & Piwowar, A. (2015) · Journal of Telecommunications and Information Technology · doi:10.26636/jtit.2015.4.981
A fine-grained framework for quantifying secure management of state in object-oriented programs
Stewart, A. D., Cardell‐Oliver, R., & Davies, R. (2016) · International Journal of Computers and Applications · doi:10.1080/1206212x.2016.1253911
A study of accountability in operating systems
Zeng, L. (2014)
Akbal, A., & Mohamud, M. A. (2016) · International Conference on Advances in Computing, Electronics and Electrical Technology (CEET) · doi:10.15224/978-1-63248-087-3-17
Distributed on Demand Logging using Secured Cloud Service
P, J. A., & Sindhu, S. (2015) · International Conference on Advanced Computing
Project Insight: A Granular Approach to Enterprise Cybersecurity
Quazi, S., Baca, A., & Darsche, S. (2018) · SMU Scholar (Southern Methodist University)
Investigation of LabVIEW and Syslog Interface using In-house Developed Generic Logging Software
Kaur, G., Sugandhi, R., Trivedi, S., Srivastav, P., & Awasthi, L. M. (2019) · Innovations in Power and Advanced Computing Technologies (i-PACT) · doi:10.1109/i-pact44901.2019.8959972
Thomas, S. M. (2017) · Lecture notes in networks and systems · doi:10.1007/978-3-319-56991-8_56
Rane, S., Wagh, S. J., & Dixit, A. M. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-49336-3_37
Investigating cybercrime in a cloud-computing environment
Edwards, G. (2016) · Queensland University of Technology · doi:10.5204/thesis.eprints.97885
A Framework for Audit Analysis of Heterogeneous Logs from PaaS
Du, Y., Wang, Y., Zhu, L., Ji, W., Song, X., Yang, Y., & Pan, L. (2020) · International Conference on Networking and Network Applications (NaNA) · doi:10.1109/nana51271.2020.00057
A Variant of the Analytical Specification of Security Information and Event Management Systems
Kotenko, I. V., & Parashchuk, I. B. (2021) · Studies in systems, decision and control · doi:10.1007/978-3-030-67892-0_26
Classification Algorithms Applications for Information Security on the Internet: A Review
Bryś, M. (2021) · Studies in classification, data analysis, and knowledge organization · doi:10.1007/978-3-030-75190-6_4
Resource-aware log monitoring data transmission for Smart and IoT devices
Szydło, T., Zieliński, K., & Jarząb, M. (2020) · EAI International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services (MobiQuitous) · doi:10.1145/3448891.3448921
Cloud Based Secured Log Retrieval Using Fully Homomorphic Encryption
Begum, B. R., & Chithra, P. (2020) · Asian Journal of Engineering and Applied Technology · doi:10.51983/ajeat-2020.9.1.1084
Palomuurin ja virustorjunnan lokitiedostojen analysointi Windows-ympäristössä
Partia, J. (2010) · LUTPub (LUT University)
Aspects of network security for VoIP solutions using IMS core network and Wi-Fi access
Gayde, R. S., Mathai, S. S., & Wang, K. (2007) · Bell Labs Technical Journal · doi:10.1002/bltj.20258
Statistical Model for Cybercrime Detection in Joined Heterogeneous Cloud Computing Environments
(2020) · International Journal of Advanced Trends in Computer Science and Engineering · doi:10.30534/ijatcse/2020/134952020
File Log Server and Application in Server System Privacy
Ha, P. T., & Anh, T. T. V. (2020) · International Journal of Innovative Technology and Exploring Engineering · doi:10.35940/ijitee.a8111.1110120
Efficient Matching Algorithms between Logs and Indicators for Automatic Incident Response System
Okada, S., Hashimoto, N., & Mitsunaga, T. (2023) · Journal of Information Processing · doi:10.2197/ipsjjip.31.279
Improving Cloud Security Using Distributed Ledger Technology
Patel, R. K., Umesh, D. S., & Patel, N. R. (2023) · Advances in information security, privacy, and ethics book series · doi:10.4018/979-8-3693-0593-5.ch006
Application and Evaluation of Layered Security Measures in Military Electronic Payment Systems
Guan, Y., & Tick, A. (2024) · IEEE International Symposium on Computational Intelligence and Informatics (CINTI) · doi:10.1109/cinti63048.2024.10830875
Mohammed, A. S., Shaker, E. H., & Çelebi, F. V. (2025) · AIP conference proceedings · doi:10.1063/5.0274115
Evaluating Forensic Log Readiness in Simulated 6G Networks
Rizvi, S., Al‐rimy, B. A. S., Anjum, N., & Kanta, A. (2025) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr64739.2025.11130064
Augmenting Security Logs with Artificial Intelligence: Are Deep Models the Missing Piece?
Safonov, Y., & Foltyn, O. (2025) · International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT) · doi:10.1109/icumt67815.2025.11268672
LogWheels: A Security Log Visualizer
Egeland, V. (2011) · BIBSYS Brage (BIBSYS (Norway))
Access Control and Threat Intelligence
Banoth, R., & Godishala, A. K. (2025) · Springer eBooks · doi:10.1007/978-3-032-06439-4_7
Designing a Log Lifecycle System for English Proficiency Tests (EPT)
Priyagung Elza, Y., Cahyani, N. D. W., & Suryani, V. (2025) · International Conference on Intelligent Cybernetics Technology & Applications (ICICyTA) · doi:10.1109/icicyta68677.2025.11362739
Gombar, M., Možnik, D., & Bach, M. P. (2026) · Systems · doi:10.3390/systems14020213
Gaikwad, A. (2025) · Asia Pacific Conference on Computing Technologies, Communications and Networking (CTCNet) · doi:10.1109/ctcnet68009.2025.11405796
CityGuard: A Forensic Investigation Framework for Smart Cities
Hossain, M. I., & Hasan, R. (2025) · IEEE World Forum on Public Safety Technology (WF-PST) · doi:10.1109/wf-pst65083.2025.00045
Designing SOX- and HIPAA-Compliant Cloud Data Engineering Workflows
Khan, R., Srivastava, M., & Periyasamy, S. G. S. (2025) · International Conference on Recent Trends in Electrical, Electronics and Computing Technologies (ICRTEECT) · doi:10.1109/icrteect67512.2025.11448865
Asynchronous Blockchain Recording for Chain-of-Thought Tracing in Small Language Models
Park, S., Kim, S., Choi, H., Yoo, N.-H., & Yang, J. (2026) · International Conference on Artificial Intelligence in Information and Communication (ICAIIC) · doi:10.1109/icaiic68212.2026.11454192
Xosanavongsa, C. (2020) · theses.fr (ABES) · doi:10.70675/7a11c2c9z5791z4cc7zb0d9z01aa43989215 · Cited by 4
A posteriori log analysis and security rules violation detection
Dernaïka, F. (2020) · theses.fr (ABES) · doi:10.70675/e0e4cc1ez9d1dz494cz9b0dz7b31791ba53f · Cited by 3
Secure Telemedicine and Remote Robotic Surgery: A Review of Protocols, Challenges, and Performance
Gothi, D., Nathvani, S. B., Nahar, T., Vijay, A., & Das, V. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-19300-1_23
Sarsenov, B. S., & Zhamangarin, D. S. (2026) · Bulletin of Shakarim University Technical Sciences · doi:10.53360/2788-7995-2026-1(21)-15
Lallie, H. S. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6050144
A Zero-Knowledge Proof-based Telemetry Data Integrity Mechanism for Policy Compliance Verification
Kim, J., Choi, E., & Park, N. (2026) · The Journal of Korean Institute of Information Technology · doi:10.14801/jkiit.2026.24.6.217
Automating Cloud Security and Forensics Through a Secure-by-Design GenAI Framework
Alharthi, D. N., & Kawaminami-Garcia, I. R. (2026) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-032-22545-0_23 · Cited by 1
R-Log: Incentivizing Log Analysis Capability in LLMs via Reasoning-based Reinforcement Learning
Liu, Y., Chen, Z. Q., Xu, S., He, M., Tao, S., Meng, W., Xie, Y., Han, T., Zhao, C., Du, J., et al. (2026) · IEEE/ACM International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP) · doi:10.1145/3786583.3786913 · Cited by 1
Toward a Zero Trust Architecture for 6G-Enabled E-Business Ecosystem
Kwon, H., Kim, B., & You, I. (2026) · IFIP advances in information and communication technology · doi:10.1007/978-3-032-26616-3_11
Patel, J. K., & Hossain, G. (2026) · International Conference on Artificial Intelligence, Robotics and Control (AIRC) · doi:10.1109/airc69745.2026.11631434
Modeling Host Interaction Patterns to Reveal Stealthy Internal Intrusions
Kandasamy, V., Ayaan, M., Lalluprasath, A., & Lakshmi Narayanan, H. (2026) · IEEE Global Symposium on Emerging and Communication Technologies (GSEACT) · doi:10.1109/gseact68539.2026.11620300
Enforceable Digital Sovereignty in Government Cloud Procurement
Fosu, D., Arthur, J., Tetteh, P. D., Banful, A. B., & Kponyo, J. J. (2026) · ITU Kaleidoscope Academic Conference (ITU K) · doi:10.23919/ituk70038.2026.11632520
Wu, Z.-Y., & Ku, C.-Y. (2026) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-026-01001-0
INTEGRATING CONTINUOUS AUDITING INTO SOC OPERATIONS: AN AUDIT-DRIVEN THREAT MONITORING FRAMEWORK
Aslan, K., Özel, A., & Ceran, O. (2026) · Denetişim · doi:10.58348/denetisim.1958605
Decision Memory Architectures for Trustworthy Intelligent Systems
Mohammed, A. (2026) · IEEE International Conference on Big Data and Artificial Intelligence (BDAI) · doi:10.1109/bdai70753.2026.11655135
Kylin-Based Communication O&M Management System with Work-Order-Driven Security Control
Zhuma, L. (2026) · International Conference on Electronics and Communication, Network and Computer Technology (ECNCT) · doi:10.1109/ecnct70535.2026.11661512
Auditable medical AI in surgery: an architectural response to the ethics imperative
MASTARI, F. A. (2026) · Artificial Intelligence Surgery · doi:10.20517/ais.2026.49
FPGA-Based State Evolution Architecture for Tamper Detection in Embedded Systems
Kurian, M. G., Eapen, N. A., & Chen, Y. (2026) · Electronics · doi:10.3390/electronics15174034
Lomelí, I. G. G., Torres, F. M., Guzman, C. I. A., & Velarde, E. F. L. (2026) · Estudios y Perspectivas Revista Científica y Académica · doi:10.61384/r.c.a..v6i3.2076
RAIL: Regulation Aware Integration of Large Language Models
Aly, E. A., Rahman, M. A., Turan, H. H., & Elsawah, S. (2026) · INCOSE International Symposium · doi:10.1002/iis2.70183
Optimizing Threat Detection in a Wazuh SIEM Environment through Custom Rule Development and Tuning
Boonchu, K., Kaitticharoon, P., Cholkuljana, N., & Visoottiviseth, V. (2026) · International Conference on Advanced Network Technologies and Applications (APAN) · doi:10.1109/apan70967.2026.11709745
Design of a Web Interface and Data Model for MikroTik Network Monitoring and Administration
Rachmawan, H. (2023) · MULTICA SCIENCE AND TECHNOLOGY (MST) · doi:10.47002/dsprpt74
Policy-Governed Intelligent Automation for Risk-Aware Cloud Security Operations
Danthoj, V., Bodanam, S. R., Bodanam, C., Rapolu, A., & Erumadi, S. B. (2026) · IEEE World Conference on Applied Intelligence and Computing (AIC) · doi:10.1109/aic70896.2026.11717148
Marcon, M. D. M. (2026) · Revista Científica SOL21 - Standard Open Literature · doi:10.67553/sol21.v2i1.38
Saeed, H. H., & Mustafa, Z. T. (2026) · Al-Noor Journal of Engineering Management and Computer Science · doi:10.71229/0z24jx95
Digital resilience of an organization in risk management
Chodyka, M., Grudniewski, T., & Ciekanowski, Z. (2026) · Journal of Modern Science · doi:10.13166/jms/241340
Digital Evidence Generation in TLS-Protected Network Flows: An Experimental Evaluation
Berbecaru, D., & Cretone, S. (2026) · doi:10.1145/3847160.3848076
Metadata
- Authors
- Kent, K., & Souppaya, M. P.
- Affiliations
- United States Department of the Treasury (US)
- ORCID
- Souppaya, M P
- Published
- 2006
- OpenAlex
- W2620229640
- Cited by
- 275
- References
- 0
- Citations by year
- 2026: 28 · 2025: 17 · 2024: 9 · 2023: 13 · 2022: 12 · 2021: 22 · 2020: 26 · 2019: 12 · 2018: 14 · 2017: 8 · 2016: 14 · 2015: 13 · 2014: 21 · 2013: 21 · 2012: 12
- Type
- report
- Language
- en
- Open access
- closed
- Funders
- U.S. Social Security Administration
- National Institutes of Health
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Keywords
- cybersecurity, log management, security logs, audit logs, log analysis, information security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review