Protect application critical/sensitive log information from malicious and unauthorize attackers during software development and runtime deployment. Allow authenticated users access to log information.
Software programs often generate unprotected log messages that contain critical and sensitive information about the execution flow of the software program and the data it uses during execution.
Current approaches to protect log messages have been limited to protecting log messages after the software program has generated the log messages and saved to external storage.
To reduce this exposure, a holistic approach is needed to protect log data during the development of the software programs, during the generation of software program executables, and during runtime execution of executables.
Wandi-SSAL (Secure Software Adaptable Logger) solution protects log messages in source code during software development stage, embedded in software libraries during build and integration stages, and compiled in executables during the deployed runtime stage.
Wandi-SSAL is based on U.S Patent Number 12,361,116,B1:
“…provides method that protects software program audit/log messages during: development of software programs, generation of software program executables, and runtime execution of software program executables. The method separates audit/log messages from software programs, and represents audit/ log messages as id=value pairs, where the id is an identifier and the value is an audit/log message string text. To protect and prevent extraction of string text, the solution uses the id elements in the development of software programs and generation of software program executables. During runtime execution the method uses the string text to identify and extract log message arguments, protects, and stores them in fixed size circular queues storage. To prevent loss of audit/log messages the method continuously saves the content of fixed size storage and fixed size circular queues storage.”
To support this patent, Wandi-SSAL Framework implementation uses a Bound Capability Validation to ensure robust and reliable API functions to:
- decode, analyze and validate log message for unintentional and malicious usage. Available for free.
- encode and protect log message for confidentiality, integrity, authenticity and efficient memory usage.
- allow only authenticated users access to protected log message.
Wandi-SSAL provides a rich set of adjustable and on-demand capabilities:
- Simple, easy-to-use and robust APIs.
- Quick glance how to use Wandi-SSAL APIs in your C/C++ application
- Configuration parameters that can be adjusted dynamically:
- Development environments
- Deployment environments
- Cybersecurity:
- Fault prevention
- Confidentiality, Integrity and Authenticity.
- Reduce storage usage:
- Random Access Memory
- External disk capacity
- Flexible output log files configuration.
- Multiple deployable architecture configuration:
- Single processor and process
- Multiple processors and processes
- Client only
- Client and Server
- AI capabilities (pending)
- Near real-time analysis
- Near real-time on-demand response
Contact: info@istech.com