GlobalView: building global view with log files in a distributed/networked system for accountability

Xiao Y., Yue S., Fu B., Ozdemir S.

SECURITY AND COMMUNICATION NETWORKS, cilt.7, sa.12, ss.2564-2586, 2014 (SCI-Expanded) identifier identifier

  • Yayın Türü: Makale / Tam Makale
  • Cilt numarası: 7 Sayı: 12
  • Basım Tarihi: 2014
  • Doi Numarası: 10.1002/sec.374
  • Dergi Adı: SECURITY AND COMMUNICATION NETWORKS
  • Derginin Tarandığı İndeksler: Science Citation Index Expanded (SCI-EXPANDED), Scopus
  • Sayfa Sayıları: ss.2564-2586
  • Anahtar Kelimeler: logging, global view, accountability, flow-net, network, distributed system, Emulab, FLOW-NET, WIRELESS, MANAGEMENT, NETWORKS
  • Gazi Üniversitesi Adresli: Evet

Özet

In this work, we will illustrate our attempt to exploit log files that are recorded locally on each node in a distributed system or a wired/wireless network. In order to improve the efficiency of retrieving data, we propose the idea of building a global view of the system with a clustered log-collecting scheme; this would help the monitoring node gain a whole view of the system by building up and maintaining high-level log files. We also introduce an efficient, tamper-evident scheme to detect whether a local flow-net has been deliberately compromised. We provide both simulation results and implementation of the proposed scheme on Emulab, a network testbed. Copyright (c) 2011 John Wiley & Sons, Ltd.