Design and formal verification of a cloud compliant secure logging mechanism

Mehmet Tahir Sandikkaya; Tolga Ovatman; Ali Emre Harmanci

doi:10.1049/iet-ifs.2014.0625

Design and formal verification of a cloud compliant secure logging mechanism

Mehmet Tahir Sandikkaya^*, Tolga Ovatman, Ali Emre Harmanci

^*Corresponding author for this work

Department of Computer Engineering

Istanbul Technical University

Research output: Contribution to journal › Article › peer-review

8 Citations (Scopus)

Abstract

Security concerns are still retarding cloud adoption. While the research community work on clearing these concerns, an optimistic fair cloud compliant logging scheme may ease the cloud to spread. This study proposes a secure logging mechanism. The mechanism employs an online bulletin board as a public write-only storage for the log records. The bulletin board also acts as a trusted third party during conflict resolution. The secure logging protocol describes how the log records are distributed to the stakeholders. The protocol's security is verified with model checking tools and no security threats could be found.

Original language	English
Pages (from-to)	203-214
Number of pages	12
Journal	IET Information Security
Volume	10
Issue number	4
DOIs	https://doi.org/10.1049/iet-ifs.2014.0625
Publication status	Published - 1 Jul 2016

Bibliographical note

Publisher Copyright:
© The Institution of Engineering and Technology 2016.

Access to Document

10.1049/iet-ifs.2014.0625

Cite this

@article{740d8b8c8ef8424795177bdb7c230b56,

title = "Design and formal verification of a cloud compliant secure logging mechanism",

abstract = "Security concerns are still retarding cloud adoption. While the research community work on clearing these concerns, an optimistic fair cloud compliant logging scheme may ease the cloud to spread. This study proposes a secure logging mechanism. The mechanism employs an online bulletin board as a public write-only storage for the log records. The bulletin board also acts as a trusted third party during conflict resolution. The secure logging protocol describes how the log records are distributed to the stakeholders. The protocol's security is verified with model checking tools and no security threats could be found.",

author = "Sandikkaya, {Mehmet Tahir} and Tolga Ovatman and Harmanci, {Ali Emre}",

note = "Publisher Copyright: {\textcopyright} The Institution of Engineering and Technology 2016.",

year = "2016",

month = jul,

day = "1",

doi = "10.1049/iet-ifs.2014.0625",

language = "English",

volume = "10",

pages = "203--214",

journal = "IET Information Security",

issn = "1751-8709",

publisher = "John Wiley & Sons Inc.",

number = "4",

}

TY - JOUR

T1 - Design and formal verification of a cloud compliant secure logging mechanism

AU - Sandikkaya, Mehmet Tahir

AU - Ovatman, Tolga

AU - Harmanci, Ali Emre

PY - 2016/7/1

Y1 - 2016/7/1

N2 - Security concerns are still retarding cloud adoption. While the research community work on clearing these concerns, an optimistic fair cloud compliant logging scheme may ease the cloud to spread. This study proposes a secure logging mechanism. The mechanism employs an online bulletin board as a public write-only storage for the log records. The bulletin board also acts as a trusted third party during conflict resolution. The secure logging protocol describes how the log records are distributed to the stakeholders. The protocol's security is verified with model checking tools and no security threats could be found.

AB - Security concerns are still retarding cloud adoption. While the research community work on clearing these concerns, an optimistic fair cloud compliant logging scheme may ease the cloud to spread. This study proposes a secure logging mechanism. The mechanism employs an online bulletin board as a public write-only storage for the log records. The bulletin board also acts as a trusted third party during conflict resolution. The secure logging protocol describes how the log records are distributed to the stakeholders. The protocol's security is verified with model checking tools and no security threats could be found.

UR - http://www.scopus.com/inward/record.url?scp=84973517718&partnerID=8YFLogxK

U2 - 10.1049/iet-ifs.2014.0625

DO - 10.1049/iet-ifs.2014.0625

M3 - Article

AN - SCOPUS:84973517718

SN - 1751-8709

VL - 10

SP - 203

EP - 214

JO - IET Information Security

JF - IET Information Security

IS - 4

ER -

Design and formal verification of a cloud compliant secure logging mechanism

Abstract

Bibliographical note

Access to Document

Other files and links

Fingerprint

Cite this