hardlog

Practical Tamper-Proof System Auditing

https://github.com/microsoft/hardlog

Science Score: 44.0%

This score indicates how likely this project is to be science-related based on various indicators:

✓
CITATION.cff file
Found CITATION.cff file
✓
codemeta.json file
Found codemeta.json file
✓
.zenodo.json file
Found .zenodo.json file
○
DOI references
○
Academic publication links
○
Academic email domains
○
Institutional organization owner
○
JOSS paper metadata
○
Scientific vocabulary similarity
Low similarity (10.1%) to scientific vocabulary

Last synced: 6 months ago · JSON representation ·

Repository

Practical Tamper-Proof System Auditing

Basic Info

Host: GitHub
Owner: microsoft
License: gpl-2.0
Language: C
Default Branch: main
Homepage:
Size: 116 KB

Statistics

Stars: 14
Watchers: 5
Forks: 1
Open Issues: 0
Releases: 0

Archived

Created about 4 years ago · Last pushed over 2 years ago

Metadata Files

Readme License Code of conduct Citation Security

Hardlog: Practical Tamper-Proof System Auditing Using a Novel Audit Device

Prototype source code for the Hardlog research paper, presented at IEEE S&P (Oakland) 2022. If you find this repository useful, please cite our paper/repository.

@inproceedings{ahmad2022hardlog,
    author = {Ahmad, Adil and Lee, Sangho and Peinado, Marcus},
    title = {HardLog: Practical Tamper-Proof System Auditing Using a Novel Audit Device},
    booktitle = {43rd IEEE Symposium on Security and Privacy (Oakland 2022)},
    year = {2022},
    month = {May},
    url = {https://www.microsoft.com/en-us/research/publication/hardlog-practical-tamper-proof-system-auditing-using-a-novel-audit-device/},
}

@misc{hardlog-github-repo,
    title={Hardlog: Practical and Effective System Auditing using a Novel Audit Device},
    howpublished={\url{https://github.com/microsoft/HardLog}}
}

1. Machine Setup

Hardlog requires two machines---audit device and host---connected through a USB-3.0 interface. While there are numerous machine configurations that should work, we provide below the specifications for machines that we tested with.

Audit Device

We used a RockPro64 development board, equipped with an RK3399 ARM CPU. The board came with 2 GB of main memory. We attached a 250 GB SSD (tested with WD SN550 and Samsung 950 Pro) using its PCIe interface. On the software side, the board was running Armbian 21.05 (Buster) with Linux v4.4.213. The details about building the correct software toolchain (including OS) is provided below.

Host

The host machine came with an Intel (c) Core i7-8700 x86 CPU with 16 GB of DDR4 memory. The host machine had a 512 GB SSD (Samsung 970 Pro), connected through PCIe 3. On the software side, the machine ran Elementary OS Hera 5.1.7 with Linux v5.4.97. We also partly tested with a vanilla Ubuntu 20.04 OS.

2. Directory Setup

This repository contains two main folders---host and device. The host directory contains scripts to build the kernel, module and library for the host machine. The device folder contains similar scripts for the audit device.

3. Build Directions

Please follow the steps outlined in the host and device folder READMEs, respectively.

Owner

Name: Microsoft
Login: microsoft
Kind: organization
Email: opensource@microsoft.com
Location: Redmond, WA

Website: https://opensource.microsoft.com
Twitter: OpenAtMicrosoft
Repositories: 7,257
Profile: https://github.com/microsoft

Open source projects and samples from Microsoft

Citation (CITATION.cff)

authors:
  - family-names: Ahmad
    given-names:  Adil
    affiliation:  "Purdue University"
  - family-names: Lee
    given-names:  Sangho 
    affiliation:  "Microsoft Research"
  - family-names: Peinado 
    given-names:  Marcus
    affiliation:  "Microsoft Research"
cff-version: 1.2.0
message: "If you use this software, please cite the following article."
preferred-citation:
  type: conference-paper
  authors:
    - family-names: Ahmad
      given-names:  Adil
      affiliation:  "Purdue University"
    - family-names: Lee
      given-names:  Sangho 
      affiliation:  "Microsoft Research"
    - family-names: Peinado 
      given-names:  Marcus
      affiliation:  "Microsoft Research"
  title: "HardLog: Practical Tamper-Proof System Auditing Using a Novel Audit Device"
  collection-title: "Proceedings of the 43rd IEEE Symposium on Security and Privacy (Oakland 2022)"
  year: 2022
  month: 5

GitHub Events

Total

Watch event: 3

Last Year

Watch event: 3

Issues and Pull Requests

Last synced: 11 months ago

All Time

Total issues: 0
Total pull requests: 2
Average time to close issues: N/A
Average time to close pull requests: 6 days
Total issue authors: 0
Total pull request authors: 2
Average comments per issue: 0
Average comments per pull request: 0.0
Merged pull requests: 2
Bot issues: 0
Bot pull requests: 1

Past Year

Issues: 0
Pull requests: 0
Average time to close issues: N/A
Average time to close pull requests: N/A
Issue authors: 0
Pull request authors: 0
Average comments per issue: 0
Average comments per pull request: 0
Merged pull requests: 0
Bot issues: 0
Bot pull requests: 0

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Open Source Science