Log management system based on a block chain

Abstract

The invention discloses a log management system based on a block chain. In order to solve the problems that in an information system, the log data size is large, traditional file storage is not enoughto meet the requirement, and meanwhile, the high value of logs needs to achieve safe storage of the files, log documents are stored through a distributed system architecture, and the confidentialityof data is guaranteed through data encryption; However, in a distributed storage process, a user generally cannot control a data storage server being used, which means that there is a risk of data confidentiality, data integrity and data availability. The appearance of the block chain technology provides a feasible technical path for log big data management, the block chain has the characteristicsof decentralization, detrust, difficulty in information tampering and the like, and integrity proving of the data can be effectively realized.

Description

technical field [0001] The invention belongs to the field of log management in information systems, in particular to a block chain-based log data management system. Background technique [0002] In an information system, every operation will leave a trace, which is a log. Each log file is composed of log records, and each log record describes a single event. In a complete information system, the log system is a very important functional component. It can record all the behaviors generated by the system and express them according to a certain specification. With the popularization of computer networks, enterprises have invested more and more network devices, and security devices generate a large number of operation logs during operation, such as firewall logs, IDS logs, database logs, etc.; there will also be a large number of logs in the information system. log. These log records are very important for system monitoring, query, security audit and fault diagnosis. The abo...

AI Technical Summary

Problems solved by technology

Attackers can hide their actions by modifying, deleting and forging relevant records in the log in a targeted manner. At the same time, the operation log in the information system has a huge organization, complex structure, huge and scattered log data, and log data Diverse formats, difficult data storage and retrieval, resulting in a large amount of log data cannot be fully utilized, and it is difficult for data consumers to quickly obtain effective information from logs

[0003] Through the above analysis, the security device log data volume in the information system is large, and the traditional file storage or traditional database can no longer meet the system requirements; at the same time, the high value of the security log makes it often become the attack target of attackers

In view of the above problems, this article will use a distributed system architecture to realize the storage of log documents, but in the process of distributed storage, data consumers usually cannot control the data storage server being used, which means that there is data confidentiality and data integrity risks to sex and data availability

Images