BCALS: Blockchain-based secure log management system for cloud computing,Transactions on Emerging Telecommunications Technologies

当前位置： X-MOL 学术 › Trans. Emerg. Telecommun. Technol. › 论文详情

Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)

BCALS: Blockchain-based secure log management system for cloud computing
Transactions on Emerging Telecommunications Technologies ( IF 2.5 ) Pub Date : 2021-04-17 , DOI: 10.1002/ett.4272
Ahmad Ali ₁ , Abid Khan ₂ , Mansoor Ahmed _{1,

3} , Gwanggil Jeon ₄

Affiliation

A computing environment requires a robust and comprehensive process to track and document user activities to uphold confidence in the system. Audit logs are used for this purpose to monitor the actions of administrators and users. However, these logs are vulnerable to multidimensional attacks, including modification of logs, erasability of logs, and privacy of the user. Since administrators have unprecedented access to these logs, they can modify, delete, and even destroy them. Securing these logs against malicious activities is the prime requirement of audit log management. Existing schemes have several limitations, including immutability, computational expensiveness, missing semantics, and are not verifiable. Various schemes have been proposed for this purpose, but a standard method is required to structure heterogeneous logs and their security semantically. To cope with these limitations, in this paper, we propose a Log Management System using blockchain. The proposed system will ensure audit logs' security, which will eventually strengthen users' trust in the computing environment and make it unbreachable even by the administrators. It has been evinced that our model performed better in terms of performance and features already mentioned when compared with existing schemes.

中文翻译：

BCALS：基于区块链的云计算安全日志管理系统

计算环境需要强大而全面的过程来跟踪和记录用户活动，以维护对系统的信心。审核日志用于此目的，以监控管理员和用户的操作。但是，这些日志容易受到多维攻击，包括日志的修改、日志的可擦除性和用户的隐私。由于管理员对这些日志拥有前所未有的访问权限，因此他们可以修改、删除甚至销毁它们。保护这些日志免受恶意活动的侵害是审计日志管理的首要要求。现有方案有几个限制，包括不变性、计算成本高、语义缺失和不可验证。为此目的提出了各种方案，但是需要一种标准的方法来在语义上构建异构日志及其安全性。为了应对这些限制，在本文中，我们提出了一个使用区块链的日志管理系统。提议的系统将确保审计日志的安全性，最终将增强用户对计算环境的信任，使其即使是管理员也无法破解。已经证明，与现有方案相比，我们的模型在性能和已经提到的特性方面表现更好。

更新日期：2021-04-17

点击分享查看原文

点击收藏

阅读更多本刊最新论文本刊介绍/投稿指南11