Trustworthy Log Reconciliation for Distributed Virtual Organisations

摘要

Secure management of logs in an organisational grid environment is often considered a task of low priority. However, it must be rapidly upgraded when the logs have security properties in their own right. We present several use cases where log integrity and confidentiality are essential, and propose a log reconciliation architecture in which both are ensured. We use a combination of trusted computing and virtu-alization to enable blind log analysis, allowing users to see the results of legitimate queries, while still withholding access to privileged raw data.