TAMPER-EVIDENT-LOGS

Cryptographically tamper-evident audit logs.

Definition

Patterns: (a) hash chaining where each log entry contains hash(previous) ; (b) Merkle tree with root signed periodically ; (c) WORM storage S3 Object Lock or Azure Immutable Blob ; (d) blockchain anchoring (Bitcoin OP_RETURN, Ethereum smart contract).

Origin

Concepts from cryptographic signature theory (Lamport, 1979).

Example in context

AWS CloudTrail Lake log file integrity uses SHA-256 and RSA signatures for tamper detection.

Related terms

• Append-only logs — adjacent pattern.