Comment Cryptographic solution: Logcrypt (Score 1) 381
Crypto can take you surprisingly far in this case:
http://lunkwill.org/cv/logcrypt_update.pdf
Abstract: Logcrypt provides strong cryptographic assurances that data stored by a logging facility before a system compromise cannot be modified after the compromise without detection. We build on prior work by showing how log creation can be separated from log verification, and describing several additional performance and convenience features not previously considered.
http://lunkwill.org/cv/logcrypt_update.pdf
Abstract: Logcrypt provides strong cryptographic assurances that data stored by a logging facility before a system compromise cannot be modified after the compromise without detection. We build on prior work by showing how log creation can be separated from log verification, and describing several additional performance and convenience features not previously considered.
