RE: Putting a signature on logs

From: Richard Ingram (ringramat_private)
Date: Fri Jul 20 2001 - 09:23:32 PDT

  • Next message: Seth Arnold: "Re: Putting a signature on logs"

    Why not just use MD5sum and note the hash down somewhere like a notepad.
    
    Rich
    
    
    -----Original Message-----
    From: dgdat_private [mailto:dgdat_private]On Behalf Of David
    Douthitt
    Sent: 19 July 2001 19:57
    To: Forensics List
    Subject: Putting a signature on logs
    
    
    I've gone to using syslog-ng to keeping logs separated out, and to
    preserve logs for a long time for record purposes.
    
    Now it occurs to me that someone could say, "Gee, how do we know that
    these logs haven't been altered?"
    
    What about a digital signature for each log?  How would you go about
    this?  I was thinking of using gpg (GNU Privacy Guard) but haven't
    gotten far enough to know how - and my reference book is the PGP book
    from O'Reilly and Associates.
    
    -----------------------------------------------------------------
    
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:
    
    http://aris.securityfocus.com
    
    
    -----------------------------------------------------------------
    
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:
    
    http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Sun Jul 22 2001 - 11:58:29 PDT