Some IT systems in an information domain may generate log data (such as user names, IP addresses, e-mail addresses, and computer names) that can be associated with specific persons. Such information can be copied, intercepted, and manipulated if it is not encrypted and securely stored. This may result in attackers accessing confidential information or manipulated log data being used to deliberately disguise security incidents. Furthermore, if attackers obtain a large amount of log data, they may use it to ascertain the internal structure of the corresponding information domain and carry out more targeted attacks.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)