Browse > Article
http://dx.doi.org/10.3745/KTCCS.2020.9.7.143

Log Management System of Web Server Based on Blockchain in Cloud Environment  

Son, Yong-Bum (한국정보화진흥원 정보보안팀)
Kim, Young-Hak (금오공과대학교 컴퓨터공학과)
Publication Information
KIPS Transactions on Computer and Communication Systems / v.9, no.7, 2020 , pp. 143-148 More about this Journal
Abstract
Recently, web services have been expanded to various areas with the evolution of cloud environment. Whenever a user accesses a web service, the user's log information is stored in the web server. This log information is used as data to analyze the user's web service tendencies and is also used as important data to track the user's system access when a security problem in the system occurs. Currently, most web servers manage user log information in a centralized manner. When user log information is managed in a centralized manner, it is simple in the side of operation, but has a disadvantage of being very vulnerable to external malicious attacks. In the case of centralized management, user log information stored in the web server can be arbitrarily manipulated by external attacks, and in severe cases, the manipulated information can be leaked. In this case, it not only decreases the trust of the web service, but also makes it difficult to trace the source and cause of the attack on the web server. In order to solve these problems, this paper proposes a new method of managing user log information in a cloud environment by applying blockchain technology as an alternative to the existing centralized log management method. The proposed method can manage log information safely from external attacks because user log information is distributed and stored in blockchain on a private network with cloud environment.
Keywords
Blockchain; Web Site; Web Server; Access Log; Cloud;
Citations & Related Records
Times Cited By KSCI : 11  (Citation Analysis)
연도 인용수 순위
1 H. Mac, D. Truong, L. Nguyen, H. Nguyen, A. Tran, and D. Tran, "Detecting Attacks on Web Applications using Autoencoder," Proceedings of the Ninth International Symposium on Information and Communication Technology, pp.416-421, 2018.
2 H. Lee and K. Kim, "Novelty Detection on Web-server Log Dataset," Journal of the korea Institute of Information and Communication Engineering, Vol.23, No.10, pp.171-181, 2019.
3 Y. Yun, J. Ryou, S. Park, and J. Park, "Profile based Web Application Attack Detection and Filtering Method," The KIPS Transactions: Part A, Vol.13, No.1, pp.19-26, 2006.
4 G. Jung and N. Park, "A Study on using the Web Service by analyzing Web Server's Log File," Journal of the Korea Society of Computer and Information, Vol.5, No.1, pp. 35-42, 2000.
5 J. Yun and M. Kim, "Private Blockchain and Smart Contract Based High Trustiness Crowdsensing Incentive Mechanism," Journal of the Korea Institute of Information Security & Cryptology, Vol.28, No.4, pp.999-1007, 2018.   DOI
6 J. Moon, "Cloud Computing Trend and Future Directions," The Korea Contents Association Review, Vol.17, No.1, pp.23-26, 2019.
7 Hyperledger Fabric [Internet], https://hyperledger-fabric.readthedocs.io/en/release
8 S. Jung, "HyperCerts : Privacy-Enhanced OTP-Based Educational Certificate Blockchian System," Journal of the Korea Institute of Information Security & Cryptology, Vol.28, No.4, pp.987-997, 2018.   DOI
9 J. Yun and M. Kim, "Private Blockchain and Smart Contract Based High Trustiness Crowdsensing Incentive Mechanism," Journal of The Korea Institute of Information Security & Cryptology, Vol.28, No.4, pp.999-1007, 2018.   DOI
10 Y. Son and Y. Kim, "Design of Management System for Registering Agricultural Machine Using Blockchain," Journal of The Korea Contents Association, Vol.19, No.12, pp.18-27, 2019.   DOI
11 S. Park and Y. Kim, "An Analysis of the Interaction Effect of Benefit and Cost on Cloud Computing Service," KIPS Transactions on Computer and Communication Systems, Vol.2, No.1, pp.27-34, 2013.   DOI
12 D. Yoon, Blockchain Learning with Hyperledger Fabric, Jpub, 2018.