Security audit logs to support computer forensics (1999)

by B Schneier, J Kelsey
Venue:ACM Transactions on Information and System Security