Medusa: Blockchain Powered Log Storage System

Wang, Hao; De-sheng, Yang; Duan, Nian; Guo, Yang; Zhang, Lu

doi:10.1109/icsess.2018.8663935

Cited by 9 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this proposed scheme they have used private Ethereum and IPFS clusters. Authors of [12] have designed a log storage system using HyperLedger permissioned Blockchain network. This system uses two operations: data appending and querying.…”

Section: Related Workmentioning

confidence: 99%

LCHAIN: A Secure Log Storage Mechanism using IPFS and Blockchain Technology

Patel

Patel²

2023

IJRITCC

View full text Add to dashboard Cite

Data security is a very important and crucial part of Cloud storage. Day by day, thousands of operations function over the Cloud, verify logs generated from all transactions is very difficult. The attacker may temper or remove targeted logs or attack traces on the system with stealthy techniques. It is required to maintain the security of the log to trace back all the transactions to identify such tempering and loss of logs. Temper-proof log storage is a challenging issue on the Cloud. To overcome the issue, we propose strong and secure log storage using Blockchain technology and IPFS. Detecting log tempering and tracing is challenging due to large log volumes. We recommend the usage of Blockchain technology due to its inherent feature of immutability to address the issue of log tempering. We present LChain which provides immutable storage of logs with tracing. Blockchain technology helps yp create immutable logs but also offers non-repudiation and scalability. Smart contracts are used for efficient searching and enhancing computational power.

show abstract

Section: Related Workmentioning

confidence: 99%

LCHAIN: A Secure Log Storage Mechanism using IPFS and Blockchain Technology

Patel

Patel²

2023

IJRITCC

View full text Add to dashboard Cite

show abstract

“…-Distributed solutions have a fundamental issue: they do not work for loosely connected or disconnected systems. There are multiple distributed solutions: traditional logging servers, cloud-based logging services (see for example [12,13]), self-securing storage like S4 [14], server-based systems that use history trees and randomized binary search trees (hash treaps) [15,16] and systems based on distributed ledger technology (DLT), or Blockchain [17][18][19][20][21]. As stated before, we focus on local tamper-evident logs.…”

Section: Related Workmentioning

confidence: 99%

SealFSv2: combining storage-based and ratcheting for tamper-evident logging

Guardiola-Múzquiz

Soriano-Salvador

2022

Int. J. Inf. Secur.

View full text Add to dashboard Cite

Tamper-evident logging is paramount for forensic audits and accountability subsystems. It is based on a forward integrity model: upon intrusion, the attacker is not able to counterfeit the logging data generated before controlling the system. There are local and distributed solutions to this problem. Distributed solutions are suitable for common scenarios, albeit not appropriate for autonomous and loosely connected systems. Moreover, they can be complex and introduce new security issues. Traditional local tamper-evident logging systems use cryptographic ratchets. In previous works, we presented SealFS (from now on, SealFSv1), a system that follows a radically different approach for local tamper-evident logging based on keystream storage. In this paper, we present a new version, SealFSv2, which combines ratcheting and storage-based log anti-tamper protection. This new approach is flexible and enables the user to decide between complete theoretical security (like in SealFSv1) and partial linear degradation (like in a classical ratchet scheme), exchanging storage for computation with user-defined parameters to balance security and resource usage. We also describe an implementation of this scheme. This implementation, which showcases our approach, is an optimized evolution of the original Linux kernel module. It implements a stackable file system that enables transparent tamper-evident logging to all user space applications and provides instant deployability. Last, we present a complete performance evaluation of our current implementation and a fair performance comparison of the two opposite approaches for local tamper-evident logging (i.e., storage-based vs. ratcheting). This comparison suggests that, on current systems and general-purpose hardware, the storage-based approach and hybrid schemes perform better than the traditional ratchet approach.

show abstract

“…Recently, several distributed schemes and products based on blockchain have been proposed [22,23,24,25]. These schemes are intrinsically distributed, so they are not viable for disconnected scenarios.…”

Section: Related Workmentioning

confidence: 99%