支持完整性检测的安全日志  

Security log with integrity verification support

作　　者：王永剑[1] 金波[1] 董健[1] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室,上海201204

出　　处：《清华大学学报（自然科学版）》2016年第3期237-245,共9页Journal of Tsinghua University(Science and Technology)

基　　金：国家"九七三"重点基础研究项目(2014CB340406)

摘　　要：随着大数据处理系统日趋复杂,软件错误、软件兼容性、管理失误甚至恶意入侵等导致的拜占庭故障对系统可用性影响日趋严重。拜占庭故障节点可能采用含糊行为欺骗正确节点,因此检测节点是否存在含糊行为是兼顾安全性和效率的一种有效手段。该文提出了一种支持完整性检测的安全日志Log-Keeper,通过创建完整性证据支持存在性和一致性检测,证明状态的完整性。为了支持分布式环境下的频繁检测,基于IndexTree实现了Log-Keeper,支持O（lbn）规模证据。测试表明,Log-Keeper创建的证据规模是AASL（authenticated append-only skip list）的25%~50%。With the increasing complexity of the large data processing systems, Byzantine fault behavior caused by software bugs,misconfiguration or malicious intrusions can seriously affect system availability.Byzantine fault nodes can then cheat other correct nodes by equivocation behavior,so the equivocation behaviors can be detected to maintain system safety.This paper presents a security log with integrity verification support,Log-Keeper,which generates integrity proofs for existence and consistency verification.Frequent verification in a distributed environment uses an IndexTree-based Log-Keeper which supports O（lbn）proof.Tests show that the size of the integrity proofs generated by Log-Keeper is 25% ~ 50% of that of the authenticated append-only skip list（AASL）.

关 键 词：拜占庭故障检测 完整性检测 篡改可察 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]