Non-deterministic audit log protection
AssigneeOracle International Corporation
InventorsPaul Youn, Javed Samuel
Life of this patent
Estimating the term…
Abstract
Embodiments of the present disclosure provide a system that performs non-deterministic auditing. The system audits an operation, a record associated with which is maintained in an audit log. In one embodiment, the system subsequently determines whether the operation satisfies one or more criteria. In response to the operation satisfying the criteria, the system protects the audit log. In a further embodiment, the system protects the audit log based on a probability distribution, which indicates a frequency of audit log protection.
Claims22
A computer-executed method for non-deterministic audit log protection, the method comprising:
- auditing, by a computer system, an operation, wherein the computer system maintains a record associated with the operation in an audit log;
- determining, by the computer system, a type of query command associated with the operation;
- and
- in response to the determining a type of query command associated with the operation, protecting the audit log by signing the audit log at an increased frequency or signing pending audit records at an earlier than scheduled time, thereby reducing a vulnerable time-period during which the audit log can be compromised.
A non-transitory computer-readable storage medium storing instructions which when executed by a computer cause the computer to perform a method for non-deterministic audit log protection, the method comprising:
- auditing, an operation, wherein the computer maintains a record associated with the operation in an audit log;
- determining a type of query command associated with the operation;
- and
- in response to the determining a type of query command associated with the operation, protecting the audit log by signing the audit log at an increased frequency or signing pending audit records at an earlier than scheduled time, thereby reducing a vulnerable time-period during which the audit log can be compromised.
A computer-executed method for non-deterministic audit log protection, the method comprising:
- auditing, by a computer system, an operation, wherein the computer system maintains a record associated with the operation in an audit log;
- computing a probability distribution function that indicates a frequency for performing audit log protection events;
- and
- protecting, by the computer system, the audit log by signing the audit log at an increased frequency or signing pending audit records at an earlier than scheduled time, wherein the frequency is determined by the previously computed probability distribution function.
A non-transitory computer-readable storage medium storing instructions which when executed by a computer cause the computer to perform a method for non-deterministic auditing, the method comprising:
- auditing, by the computer, an operation, wherein the computer maintains a record associated with the operation in an audit log;
- computing a probability distribution function that indicates a frequency for performing audit log protection events;
- and
- protecting, by the computer, the audit log by signing the audit log at an increased frequency or signing pending audit records at an earlier than scheduled time, wherein the frequency is determined by the previously computed probability distribution function.
Dependencies are inferred from the claim text.