The DOI matches its Crossref record.
Guide to computer security log management
Abstract
The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“The log schema reflects common IoT telemetry and event fields used in operational security monitoring (Hassan, 2019; National Institute of Standards and Technology, 2020; Kent and Souppaya, 2006; Gerhards, 2009).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Kent and Souppaya, 2006
Citations
Cites
Still being checked.
Cited by
Sorted by citations
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377
Upadhyay, D., & Sampalli, S. (2020) · Computers & Security · doi:10.1016/j.cose.2019.101666 · Cited by 242
Braun, U., Shinnar, A., & Seltzer, M. (2008) · Digital Access to Scholarship at Harvard (DASH) (Harvard University) · Cited by 135
Network forensics: Review, taxonomy, and open challenges
Khan, S., Gani, A., Wahab, A. W. A., Shiraz, M., & Ahmad, I. (2016) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2016.03.005 · Cited by 125
Stouffer, K. A., Falco, J., & Scarfone, K. A. (2011) · doi:10.6028/nist.sp.800-82 · Cited by 118
Metadata
- Authors
- Kent, K., & Souppaya, M. P.
- Affiliations
- United States Department of the Treasury (US)
- ORCID
- Souppaya, M P
- Published
- 2006
- OpenAlex
- W2620229640
- Cited by
- 275
- References
- 0
- Citations by year
- 2026: 28 · 2025: 17 · 2024: 9 · 2023: 13 · 2022: 12 · 2021: 22 · 2020: 26 · 2019: 12 · 2018: 14 · 2017: 8 · 2016: 14 · 2015: 13 · 2014: 21 · 2013: 21 · 2012: 12
- Type
- report
- Language
- en
- Open access
- closed
- Funders
- U.S. Social Security Administration
- National Institutes of Health
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Keywords
- cybersecurity, log management, security logs, audit logs, log analysis, information security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
