transferring trusted logs across vulnerable paths for digital forensics
In recent years, many accounting scandals have been reported in companies not only in the United States, but also in Japan. The need for Internal Control is thus growing steadily. In particular, auditing logs are important for Internal Control, although without an audit function, any Internal Control is incomplete. The cost of an information system is dependent on the amount of data, which in the case of log data can be very large. We have overcome this problem by developing the Virtual Large-Scale Disk (VLSD) toolkit, which allows us to construct large-scale disks. Using this toolkit, we have implemented log storage with low cost and a long lifetime. However, this log system cannot guarantee the transfer of trusted logs across a vulnerable transfer path, making it unsuitable for Digital Forensics. In this paper, we propose a trusted log transfer method suitable for Digital Forensics. Using this method, it is possible to ascertain whether or not logs have been modified at router nodes.
digital forensics internal control log management