Non-deterministic Audit Log Protection via Dynamic Signing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Database audit logs are vulnerable to tampering during a 'vulnerability window' before they are protected by access controls or digital signatures, allowing attackers to modify or delete recorded information.
Innovation Solution
A system that reactively protects audit logs by determining whether specific criteria are met, such as database operations or user sessions, and applies additional security measures like signing, encrypting, or transmitting the audit log to a remote server, or uses a probability distribution to dynamically adjust protection frequency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the audit log is signed as soon as audit information is recorded, then the vulnerability window is reduced, but the database system's performance is compromised
Solution Approach 1:
The patent implements dynamic audit log protection by adjusting the signing frequency based on the current vulnerability assessment. Instead of continuous signing, the system dynamically determines when signing is necessary based on detected operations, creating a flexible protection mechanism that adapts to system conditions and reduces unnecessary performance overhead while maintaining security during critical periods
Solution Approach 2:
The system changes the protection parameter (signing frequency) based on detected operations and vulnerability assessments. By monitoring system state and operation types, the patent adjusts when digital signatures are applied, transforming from a static continuous protection approach to a dynamic parameter-based approach that optimizes the balance between security and performance
2Reliability
If access control is applied to the audit log file, then the audit log is protected from unauthorized access, but there is a vulnerability window before access control is established
Solution Approach 1:
The patent applies digital signatures to audit logs in advance or concurrently with access control establishment, rather than waiting for access control to be fully in place. This preliminary protection ensures that even during the brief window when access control is being configured, the audit log is already protected from tampering through cryptographic signing
Solution Approach 2:
The patent introduces digital signatures as an intermediary protection layer between the audit log and potential attackers. This cryptographic mediator provides immediate protection independent of access control mechanisms, bridging the vulnerability window by offering a different security approach that doesn't rely on access control timing
Data Source
AI summary
Embodiments of the present disclosure provide a system that performs non-deterministic auditing. The system audits an operation, a record associated with which is maintained in an audit log. In one embodiment, the system subsequently determines whether the operation satisfies one or more criteria. In response to the operation satisfying the criteria, the system protects the audit log. In a further embodiment, the system protects the audit log based on a probability distribution, which indicates a frequency of audit log protection.