Prevention of log data falsification based on WORM in IT convergence environment

초록

IT convergence environment requires log data to play a very important role. Log data, from CCTV to IT security system, can be used when information about what happened is required in the IT convergence environment. Therefore, log data should not be falsified for integrity. The log data in log database server may not keep the data integrity by database queries such as update, insert or delete. Database users always send queries to database server for their work and a malicious query can be sent among these tasks, which make the stored log data falsified. In this paper, we propose a new method for preventing log falsification based on the WORM (Write Once Read Many times) concept from hardware domain. The proposed method is designed and implemented as WORM of software type in virtual disk drive on Windows O/S. Technical and economic benefits of this research include data integrity, better performance, and cost reduction. The proposed method guarantees compliance for log falsification prevention and also better performance for data transferring. © 2013 International Information Institute.

키워드