Building an Encrypted and Searchable Audit Log.
Brent R. Waters, Dirk Balfanz, Glenn Durfee, Diana K. Smetters · 2004
Audit logs are an important part of any secure system, and they need to be carefully designed in order to give a faithful representation of past system activity. This is especially true in the presence of adversaries who might want to tamper with the audit logs. While it is important that auditors can inspect audit logs to assess past system activity, the content of an audit log may contain sensitive information, and should therefore be protected from unauthorized parties.