Bruce Schneier John Kelsey Secure Audit Logs to Support Computer Forensics. 159-176 1999 2 ACM Trans. Inf. Syst. Secur. 2 http://doi.acm.org/10.1145/317087.317089 db/journals/tissec/tissec2.html#SchneierK99