a secure log architecture to support remote auditing：支持远程审计的安全日志架构.pdfVIP

Mathematical and Computer Modelling 57 (2013) 1578–1591 Contents lists available at SciVerse ScienceDirect Mathematical and Computer Modelling journal homepage: /locate/mcm A secure log architecture to support remote auditing Rafael Accorsi Business Process Security Group, University of Freiburg, Germany a r t i c l e i n f o a b s t r a c t Article history: This paper presents BBox, a digital black box to provide for authentic archiving (and, Received 27 May 2011 consequently, forensic evidence) for remote auditing in distributed systems. Based upon Received in revised form 21 June 2012 public key cryptography and trusted computing platforms, the BBox employs standard Accepted 27 June 2012 primitives to ensure the authenticity of records during the transmission from devices to the collector, as well as during their storage on the collector and keyword retrieval by Keywords: authorized auditors. Secure log architecture © 2012 Elsevier Ltd. All rights reserved. Public key cryptography Remote auditing Secure digital archiving 1. Introduction The rapidly growing number of national and international compliance requirements emphasizes the importance of archiving of business processes transactions, where records are analyzed as part of an audit to corroborate or refute potential violations of compliance rules [ 1]. To this end, authentic records are essential to guarantee reliable acc