Syslog-sign Protocol Syslog-sign Protocol

This document describes syslog-sign, a mechanism for adding origin authentication, message integrity, replay-resistance, message sequencing, and detection of missing messages to syslog. The goal of Kelsey Expires November 2001 [1] Syslog-sign Protocol June 2001 syslog-sign is to provide all these security features in a way that has minimal requirements and minimal impact on existing syslog implementations. It is possible to support syslog-sign and gain some of its security attributes by only changing the behavior of the devices generating syslog messages. Additional security benefits may be realized by some additional processing of the received syslog messages and the syslog-sign messages on the relays and collectors.