Tamperproof logs

A method for creating a secure log of security events on a computer device, comprising:

• receiving, at an operating system executing on the computer device, a historical digest representing approved historical security events associated with a trusted network of devices communicating with the computer device, wherein the trusted network of devices is created by adding one or more trusted computer devices to the trusted network of devices when the one or more trusted computer devices have a trustworthy reputation;
• receiving, by the operating system, one or more new security events;
• calculating a hash based on at least the historical digest and the one or more new security events;
• determining if a value of the hash is less than a value threshold;
• and
• storing a new security event digest corresponding to a respective hash having a respective value less than the value threshold, wherein the new security event digest is confirmed by one or more trusted devices in the trusted network of devices.

A computer-readable medium storing instructions executable by a computer device, comprising:

• at least one instruction for causing the computer device to receive a historical digest representing approved historical security events associated with a trusted network of devices communicating with the computer device, wherein the trusted network of devices is created by adding one or more trusted computer devices to the trusted network of devices when the one or more trusted computer devices have a trustworthy reputation;
• at least one instruction for causing the computer device to receive one or more new security events;
• at least one instruction for causing the computer device to calculate a hash based on at least the historical digest and the one or more new security events;
• at least one instruction for causing the computer device to determine if a value of the hash is less than a value threshold;
• and
• at least one instruction for causing the computer device to store a new security event digest corresponding to a respective hash having a respective value less than the value threshold, wherein the new security event digest is confirmed by one or more trusted devices in the trusted network of devices.