kcenon::logger::security Namespace Reference

Namespaces
namespace	detail

Classes
class	audit_logger
	Secure audit logging with tamper detection. More...
interface	critical_logger_interface
	Interface for loggers that support emergency flushing. More...
class	hmac_sha256_integrity_policy
	HMAC-SHA256 integrity policy (ISO/IEC 27001 A.12.4.2 default). More...
class	integrity_policy
	Abstract interface for log integrity signing. More...
class	log_sanitizer
	Log sanitizer for masking sensitive data. More...
class	path_validator
	Validates file paths to prevent security vulnerabilities. More...
struct	sanitization_rule
	Configuration for a sanitization rule. More...
class	secure_key
	RAII wrapper for encryption keys with secure memory management. More...
class	secure_key_storage
	Secure storage and retrieval of encryption keys. More...
class	signal_manager
	Manager for safe signal handler installation. More...
interface	signal_manager_interface
	Interface for signal handler management. More...

Enumerations
enum class	sensitive_data_type {   credit_card , ssn , api_key , password ,   email , ip_address , phone_number , custom }
	Types of sensitive data that can be automatically detected. More...

Functions
std::string	format_signature_suffix (const integrity_policy &policy, const std::string &record)
	Format a signature line suitable for appending to a text log record.
log_sanitizer	make_default_sanitizer ()
	Create a sanitizer with common patterns pre-configured.

Enumeration Type Documentation

sensitive_data_type

enum class kcenon::logger::security::sensitive_data_type

strong

Types of sensitive data that can be automatically detected.

Enumerator
credit_card	Credit card numbers (Visa, MC, Amex, etc.)
ssn	Social Security Numbers (US format)
api_key	API keys (sk-, api_, bearer tokens)
password	Password fields in key=value format.
email	Email addresses.
ip_address	IPv4 addresses.
phone_number	Phone numbers (various formats)
custom	Custom user-defined patterns.

Examples

/home/runner/work/logger_system/logger_system/include/kcenon/logger/security/log_sanitizer.h.

Definition at line 39 of file log_sanitizer.h.

                               {
    credit_card,     
    ssn,             
    api_key,         
    password,        
    email,           
    ip_address,      
    phone_number,    
    custom           
};

Function Documentation

format_signature_suffix()

std::string kcenon::logger::security::format_signature_suffix ( const integrity_policy & policy, const std::string & record )

inline

Format a signature line suitable for appending to a text log record.

Format: " SIGNATURE[<policy-name>]:<hex>"

The leading space makes the signature clearly separable from the preceding record text while keeping the line self-descriptive for the verify tool.

Definition at line 218 of file integrity_policy.h.

                                                                    {
    std::string sig = policy.sign(record);
    if (sig.empty()) {
        return std::string();
    }
    std::string out;
    out.reserve(14 + policy.name().size() + sig.size());
    out.append(" SIGNATURE[");
    out.append(policy.name());
    out.append("]:");
    out.append(sig);
    return out;
}

References kcenon::logger::security::integrity_policy::name(), and kcenon::logger::security::integrity_policy::sign().

Referenced by kcenon::logger::console_writer::write(), kcenon::logger::file_writer::write(), and kcenon::logger::rotating_file_writer::write().

Here is the call graph for this function:

Here is the caller graph for this function:

make_default_sanitizer()

log_sanitizer kcenon::logger::security::make_default_sanitizer ( )

inline

Create a sanitizer with common patterns pre-configured.

Returns

A log_sanitizer with credit_card, ssn, api_key, password, and email patterns

Examples

/home/runner/work/logger_system/logger_system/include/kcenon/logger/security/log_sanitizer.h.

Definition at line 298 of file log_sanitizer.h.

                                              {
    log_sanitizer sanitizer;
    sanitizer.add_common_patterns();
    return sanitizer;
}

References kcenon::logger::security::log_sanitizer::add_common_patterns().

Here is the call graph for this function: