A novel method for secure logging system call
Meng Jiangtao, Lu Xianliang, Guishan Dong · 2006
Traditional methods of logging system activity are fundamentally insecure, which means that an attacker may compromise or tamper the logs. A novel method, Xen-based secure logging system call, is used to provide tamper-free logs of system call for some intrusion detection analysis techniques, which only require sequences of system call within a user process. Preliminary evaluation showed that the prototype is simple and efficient.