DELIA: Distributed Efficient Log Integrity Audit Based on Hierarchal Multi-Party State Channel

DELIA: Distributed Efficient Log Integrity Audit Based on Hierarchal Multi-Party State Channel
复制标题

DELIA:基于分层多方状态通道的分布式高效日志完整性审计

DOI:
10.1109/tdsc.2021.3092365
复制
发表时间:
2021-06
影响因子:
7.3
通讯作者:
Yang Xiang
Yang Xiang
中科院分区:
计算机科学2区
文献类型:
--
作者:
Jing Chen;Xin Chen;Kun He;Ruiying Du;Weihang Chen;Yang Xiang

文献摘要

参考文献

相似文献

审计日志包含了计算机系统中各种活动的踪迹,这使得它对于安全管理、审查和取证至关重要。然而,有经验的攻击者可能会在攻击后删除或修改审计日志,这使得审计日志在攻击调查中不可用。在本文中,我们重点讨论了同一域中的日志完整性审计,其中多个服务器为单个或多个组织作为联盟更新审计日志。提出了一种分布式高效日志完整性审计框架DELIA,该框架采用分布式账本技术保护审计信息,并利用状态通道的思想提高分布式账本的吞吐量。为了从域中快速更新的日志中生成稳定的状态,提出了一种日志状态生成方案,该方案不仅可以生成适合审计日志的状态,而且可以实现域内的相互监督.为了克服现有的状态通道方案的高延迟,我们提出了一个分层的多方状态通道方案,这使得在我们的框架中的延迟独立于域中的服务器的数量。我们在以太坊上实现DELIA并评估其性能。实验结果表明,该框架在实际应用中是有效和安全的.
Audit log contains the trace of different activities in computing systems, which makes it critical for security management, censorship, and forensics. However, experienced attackers may delete or modify the audit log after their attacks, which makes the audit log unavailable in attack investigation. In this article, we focus on the log integrity audit in the same domain, in which a number of servers update audit logs for a single or several organizations as an alliance. We propose a distributed efficient log integrity audit framework, called DELIA, which employs the distributed ledger technique to protect audit information, and utilizes the idea of state channel to improve the throughput of distributed ledger. To generate stable state from the rapidly-updated logs in the domain, we propose a log state generation scheme, which not only generates state suitable for audit logs, but also enables mutual supervision within the domain. To overcome the high latency in existing state channel schemes, we propose a hierarchal multi-party state channel scheme, which makes the latency in our framework independent of the number of servers in the domain. We implement DELIA on Ethereum and evaluate its performance. The results show that our framework is efficient and secure in practice.
DOI: 10.1109/tdsc.2020.3029845
发表时间: 2020-10
影响因子: 7.3
作者:
Zheli Liu;Jin Li;Siyi Lv;Yanyu Huang;Liang Guo;Yali Yuan;Changyu Dong
通讯作者: Zheli Liu;Jin Li;Siyi Lv;Yanyu Huang;Liang Guo;Yali Yuan;Changyu Dong
DOI: --
发表时间: 2022
期刊: IACR Cryptol. ePrint Arch.
影响因子: --
作者:
Xiaojie Guo;Zheli Liu;Jin Li;Jiqiang Gao;Boyu Hou-;Changyu Dong;T. Baker
通讯作者: Xiaojie Guo;Zheli Liu;Jin Li;Jiqiang Gao;Boyu Hou-;Changyu Dong;T. Baker
DOI: 10.1007/978-3-319-46598-2_9
发表时间: 2016-09
期刊: --
影响因子: --
作者:
Jordi Cucurull-Juan;J. Puiggalí
通讯作者: Jordi Cucurull-Juan;J. Puiggalí
DOI: 10.1007/978-3-319-68288-4_38
发表时间: 2017-10
期刊: --
影响因子: --
作者:
Andrew Sutton;Reza Samavi
通讯作者: Andrew Sutton;Reza Samavi
DOI: 10.2139/ssrn.3977007
发表时间: 2008
期刊: SSRN Electronic Journal
影响因子: --
作者:
Spongebob Squarepants
通讯作者: Spongebob Squarepants