Secure Audit Logging with Tamper-Resistant Hardware

Secure Audit Logging with Tamper-Resistant HardwareCheun N Chong Zhonghong Peng Pieter H HartelDept. of Computer ScienceUniversity of TwenteThe Netherlandsfchong,zhong,pieterg@cs.utwente.nlAbstract the rights on the content, such as cryptography,digital ngerprinting, watermarking etc. In thisSecure perimeter schemes (e.g. DRM) and tracing paper, we assume that users can be identi ed, andtraitor schemes (e.g. watermarking, audit logging) we concern ourselves with the issue of gatheringstrive to mitigate the problems of content escap- information on the user’s behaviour.ing the control of the rights holder. Secure audit Secure audit logging records the actions of a userlogging records the user’s actions on content and on an item of content and does so in a manner thatenables detection of some forms of tampering with allows some forms of tampering with the log tothe logs. We implement Schneier and Kelsey’s se- be detected. We implement Schneier and Kelseycure audit logging protocol [1], strengthening the secure audit logging protocol [1], using tamper-protocol by using tamper-resistant hardware (an resistant hardware (TRH). For brevity in the se-iButton) in two ways: Firstly our implementation quel, we refer to Schneier and Kelsey [1] as \SK".of the protocol works o ine as well as online. Sec-An audit log is an important tool to detect andondly, we use unforgeable time stamps to increaseto comprehend damages of a computer or networkthe possibilities of ...