摘要
论文分析了传统日志审计中的不足,介绍了一种采用前向安全数字签名思想的日志审计方法,该方法能够有效阻止对历史日志的各种非法篡改,而且灵活易于实现,各种签名算法(如RSA、DSA、ECC)都能方便地应用于其中,同时进行了模拟测试和安全性分析。
This paper analyses the defects of traditional methods in auditing logs. Then a new scheme based on for- ward-secure digital signature is proposed. The scheme can effectively resist any illegal tamper on historical logs, the same time, and is flexible and easy in implementation Various digital signature algorithms, such as RSA, DSA, ECC, can be applied in the scheme. Experiment and security analysis are also done.
出处
《信息安全与通信保密》
2007年第6期228-230,共3页
Information Security and Communications Privacy
关键词
防篡改
前向安全
日志
tamper resistance
forward security
audit logs
