Comments on Rainer's Blog: Feedback Request for digitally signed log store

Digitally signing the logs provides some evidence ...

2011-12-20T13:07:22.204+01:00

Digitally signing the logs provides some evidence of log integrity. Many logging and SIEM vendors already include this functionality as a requirement for compliance regulations. Some logging and SIEM vendors offer encryption as well as digital signing of logs because it contains sensitive information on the transactions of services.

Thanks John, I have begun to track the feedback o...

2011-12-19T17:27:30.335+01:00

Thanks John,

I have begun to track the feedback on the original article. I think it makes sense to not rush this before the holiday season and then look into the specific cases in January. You are right, a risk profile should be specified.

A critical thing to do before you get started is t...

2011-12-18T02:12:40.636+01:00

A critical thing to do before you get started is to understand what risk you would be trying to mitigate. What risk are you solving by digitally signing the log store.

It would seem to me that the original system creating each event is the one that will need to have signed their individual entry.

The other big problem with digital signatures is that it is very critical to have a trusted date/time stamp.