Secure Logging as a Service against DDoS and Pollution Attacks

Abstract

Now a days cloud computing has became as a popular computing paradigm. However, cloud computing architectures
lack support for computer forensic investigations. Analyzing
various logs like process logs, network logs play an important
role in computer forensics. Unluckily, collecting logs from a cloud
is hard given the black-box nature of clouds and the multi-tenant
cloud models, where the same processing and network resources
are shared by many users. Researchers have proposed to mitigate
the challenges of collecting logs from cloud infrastructure using
log API or cloud management console. However, there is no
concrete work, which shows the ways to provide cloud logs to
investigator promising users privacy and integrity of the logs
is preserved. In this paper, we introduce Secure-Logging-as-aService (SecLaaS) that stores virtual machines logs and provides
access to forensic investigators ensuring the confidentiality of the
cloud users. SecLaaS also preserves proofs of past log and thus
protects the integrity of the logs from dishonest investigators or
cloud providers.