Tamperproof Audit Logs

审核日志会枚举已应用于数据库的更改，通常还会列出访问。审计日志被认为是业务系统的良好做法，并且是联邦法规对安全系统、药品批准数据、医疗信息披露、财务记录和电子投票的要求。考虑到审计日志的核心作用，它们正确且不可更改是至关重要的。基于加密的强单向散列函数，开发了用于在数据库管理系统(DBMS)中实施的机制，以防止入侵者，包括审计师或员工，甚至DBMS本身中的未知错误，悄悄地破坏审计日志。因此，DBMS在数据库中存储附加信息，以使单独的审计日志验证器能够与该附加信息一起检查数据库，并断定审计日志是否已被泄露，从而支持篡改检测。使用安全的审计日志复制协议和验证器，产生防篡改的审计日志。良好的性能是必不可少的：只有在开销小的情况下，才会实际使用防篡改审计日志。这项研究将使现有数据库管理系统能够添加一种重要且非常可取的功能：防篡改审计日志。通过建立防篡改的审计日志，可以更有效地应用许多领域的美国联邦法规，为依赖这些关键医疗、金融和投票系统的商业领袖、政府官员和公民提供信心。PI将与供应商密切合作，以确保这些方法与现有技术相一致。这项工作是在开源的BerkeleyDB和MySQL系统上开发的，作为这两个系统的扩展，更新将通过项目的网站(http://www.cs.arizona.edu/tau/Audit/).)获得

An audit log enumerates the changes, and often the accesses, that have been applied to a database. Audit logs are considered good practice for business systems, and are required by federal regulations for secure systems, drug approval data, medical information disclosure, financial records, and electronic voting. Given the central role of audit logs, it is critical that they are correct and unalterable.Mechanisms are developed, for implementation within a database management system (DBMS), based on cryptographically strong one-way hash functions, that prevent an intruder, including an auditor or an employee or even an unknown bug within the DBMS itself, from silently corrupting the audit log. The DBMS thus stores additional information in the database to enable a separate audit log validator to examine the database along with this extra information and state conclusively whether the audit log has been compromised, thus supporting tamper detection. Using a secure audit log replication protocol and the validator, tamperproof audit logs result. Good performance is essential: tamperproof audit logs will only realistically be used if their overhead is small.This research will enable an important and highly desirable capability to be added to existing database management systems: tamperproof audit logs. By instituting tamperproof audit logs, US federal regulations in many domains can be more effectively applied, lending confidence to the business leaders, government officials, and citizens who depend on these critical medical, financial, and voting systems. The PI will work closely with vendors to ensure that the approaches are consistent with existing technologies.This work is being developed on the open-source BerkeleyDB and MySQL systems, as an extension of these two systems and updates will be available via the project's Web site (http://www.cs.arizona.edu/tau/Audit/).