The Security Management Scheme and Analysis Transaction Policy of the System Logs
Zhao Xiao · Computer Engineering and Science · 2003
As the primary record keepers of systems and network user's activities, Logs are greatly important for finding intrusion activities, recovering systems, reporting usage statuses of system resources and offering electronic evidences to crack down on computer crimes. So it is vital to protect system logs without being modified or deleted by inside users or outside intruders. However, we always ignore system logs security when we establish the policy of network information security. Now there is no rational method of system logs security management. The paper discusses the problem of the centralized management of system logs, proposes a method of analysing log files and providing encrypted protection for their integrality. Finally, the corresponding policies of log management are presented.