Security & Privacy
Security log
ActivePublished
Key
innovation
A durable, auditable trail of security events enabling incident detection and forensic analysis.
Category
Security & Privacy
Abstraction level
Building block
Operation level
SystemDeployment
How it works
The system records security events together with timestamps, identity and context. Logs can be forwarded to a central system (e.g. a SIEM), where they are correlated, analyzed against rules and anomalies, and retained for audit and forensic analysis. Log integrity is protected against tampering.
Problem solved
Without event logging it is hard to detect an attack, establish its course and scope and demonstrate compliance; incidents remain invisible.