Submission + - DSS/HIPPA/SOX Unalterable Audit Logs
analogrithems writes: Recently I was asked by one of the suits in my company to come up with a method to comply with the new PCI DSS policy that requires companies to have WORM logs or write once, read many. In short a secure method to make sure that once a log is written it can never be deleted or changed. So far I've only been able to find commercial and hardware based solutions. I'd prefer to use an open source solution. I know this policy is already part of HIPPA and soon to be part of SOX. It seems like their should be a way to do this with cryptography and checksums to insure authenticity, has anyone seen or developed a solution? How have other Slashdot users made compliance?