
With the growing adoption of cloud services, organizations are increasingly outsourcing their system log management to cloud service providers (CSPs). While this approach offers cost efficiency and scalability, it introduces critical challenges related to the confidentiality, searchability, and integrity of sensitive log data. Specifically, existing solutions fall short in supporting fine-grained Boolean keyword search, dynamic access control, and verifiable result integrity over encrypted log records. To address these challenges, we propose EVSEB—an efficient and verifiable searchable encryption framework for encrypted cloud-hosted logs. EVSEB supports fine-grained multi-keyword Boolean search, privacy-preserving access control, and per-file integrity verification with minimal overhead. At its core, EVSEB introduces a hybrid indexing model that integrates a hierarchical log-type classification tree, Bloom filters, and inverted indexes to reduce search space and accelerate query execution. Access control is enforced through blockchain-based smart contracts that securely validate encrypted user tokens. For integrity assurance, EVSEB combines an off-chain distributed hash table (DHT) and an on-chain Merkle root to detect tampering at the level of individual log files. Experimental evaluion demonstrates that our proposed EVSEB outperforms existing solutions in terms of search under increasing keyword and file load, and integrity verification. This substantiates the practicality of our proposed scheme in implementing a searchable encryption and access solution for large-scale encrypted log management in cloud environments.
blockchain, log files, Electrical engineering. Electronics. Nuclear engineering, Searchable encryption, multiple keyword search, bloom filter, keyword search, TK1-9971
blockchain, log files, Electrical engineering. Electronics. Nuclear engineering, Searchable encryption, multiple keyword search, bloom filter, keyword search, TK1-9971
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 1 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
