摘要
信息系统中存在着大量的安全设备日志,这些安全设备日志对系统监控、查询、安全审计和故障诊断等都十分重要,因此对其进行安全存储与处理具有重要意义。文中提出了一种基于链上链下相结合的日志安全存储与检索模型,该模型结合区块链与分布式存储技术,实现了去中心化、去信任、数据难以篡改的安全设备日志存储,并对外向安全管理员提供密文检索接口,同时可以利用区块链技术实现数据的完整性校验。安全性分析论证了该模型能够保证安全设备日志的安全可靠存储,同时性能分析证明了该模型具有良好的检索效率。
There are a large number of security device logs in the information system.These security device logs are very important for system monitoring,query,security auditing and fault diagnosis.Therefore,it is important to securely store and process the security device logs in the information system.This paper proposed a log security storage and retrieval model based on the combination of on-chain and off-chain.This model combines blockchain and distributed storage technology,achieves security log storage which is decentralized,detrusted,and hard to tamper with data,and provides a ciphertext retrieval interface to security administrators externally.At the same time,it can use blockchain technology to realize data integrity check.The security analysis demonstrates that the model can ensure the secure and reliable storage of security device logs,and the performance analysis proves that the model has good retrieval efficiency.
作者
吕建富
赖英旭
刘静
LV Jian-fu;LAI Ying-xu;LIU Jing(Faculty of Information Technology,Beijing University of Technology,Beijing 100124,China;Science and Technology on Information Assurance Laboratory,Beijing 100072,China)
出处
《计算机科学》
CSCD
北大核心
2020年第3期298-303,共6页
Computer Science
基金
青海省自然科学基金资助项目(2017-ZJ-912)
信息保障技术重点实验室基金(614211204031117)~~
关键词
安全设备日志
区块链
安全存储
密文检索
完整性校验
Security device log
Blockchain
Secure storage
Ciphertext retrieval
Integrity check
作者简介
吕建富,born in 1993,postgraduate.His main research interests include cyber security,and blockchain.jianfu1993@163.com;通信作者:赖英旭,born in 1973,Ph.D,professor,Ph.D supervisor.Her main research interests include computer network and cyber security.laiyingxu@bjut.edu.cn。
