On the confidential auditing of distributed computing systems

Shen, Yao; Lam, Tommy; Liu, J.-C.; Zhao, Wei

doi:10.1109/icdcs.2004.1281627

Cited by 5 publications

(2 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, with the introduction of regulations like HIPAA a secure logging mechanism [10] is needed. Secure logging primitives [11,32] rely on a trusted author whose signature is considered the root of trust for integrity or requires analyzing the entirety of the audit log to detect tampering due to the privacy-preserving nature of the records. Alternatively, prior works [12,33] use secure hardware to achieve immutable and privacypreserving records.…”

Section: Related Workmentioning

confidence: 99%

Harpocrates: Privacy-Preserving and Immutable Audit Log for Sensitive Data Operations

Thazhath¹,

Michalak²,

Hoang³

2022

Preprint

View full text Add to dashboard Cite

The audit log is a crucial component to monitor fine-grained operations over sensitive data (e.g., personal, health) for security inspection and assurance. Since such data operations can be highly sensitive, it is vital to ensure that the audit log achieves not only validity and immutability, but also confidentiality against active threats to standard data regulations (e.g., HIPAA) compliance. Despite its critical needs, state-of-the-art privacypreserving audit log schemes (e.g., Ghostor (NSDI '20), Calypso (VLDB '19)) do not fully obtain a high level of privacy, integrity, and immutability simultaneously, in which certain information (e.g., user identities) is still leaked in the log.In this paper, we propose Harpocrates, a new privacy-preserving and immutable audit log scheme.Harpocrates permits data store, share, and access operations to be recorded in the audit log without leaking sensitive information (e.g., data identifier, user identity), while permitting the validity of data operations to be publicly verifiable. Harpocrates makes use of blockchain techniques to achieve immutability and avoid a single point of failure, while cryptographic zero-knowledge proofs are harnessed for confidentiality and public verifiability. We analyze the security of our proposed technique and prove that it achieves non-malleability and indistinguishability. We fully implemented Harpocrates and evaluated its performance on a real blockchain system (i.e., Hyperledger Fabric) deployed on a commodity platform (i.e., Amazon EC2). Experimental results demonstrated that Harpocrates is highly scalable and achieves practical performance.

show abstract

Section: Related Workmentioning

confidence: 99%

Harpocrates: Privacy-Preserving and Immutable Audit Log for Sensitive Data Operations

Thazhath¹,

Michalak²,

Hoang³

2022

Preprint

View full text Add to dashboard Cite

show abstract

“…However, with the introduction of regulations like HIPAA a secure logging mechanism [42] is needed. Secure logging primitives [31,37] rely on a trusted author whose signature is considered the root of trust for integrity or requires analyzing the entirety of the audit log to detect tampering due to the privacy-preserving nature of the records. Alternatively, prior works [19,26] use secure hardware to achieve immutable and privacy-preserving records.…”

Section: Prior Workmentioning

confidence: 99%