Security in Computing 5th Edition by Shari Lawrence Pfleeger, Charles P Pfleeger, Jonathan Margulies

Exercise 13

Explain how information in an access log could be used to identify the true identity of an impostor who has acquired unauthorized access to a computing system. Describe several different pieces of information in the log that could be combined to identify the impostor.

Step 1 of 3

Information in the access log identified by the impostor:

• The information in the access logs is used to identify the real and true identity of the impostor who has acquired the access to the computing system.

• Suppose the user of a web server have an access to the logs of the web server as the user can easily log onto a bit of the information about the site visitors.

• Thus the user must be able to specifically identify someone who visits the site regardless of its log.

• It deals with the process where the acquired unauthorized access can be defined by an imposter.