Method and system for providing secure logging for intrusion detection

A method and system for providing secure logging for intrusion detection is disclosed. The method and system provides for receiving log data, writing information to a log file based on the log data received, writing a first line to a log file as a signature, obtaining a random symmetric key during the writing of a second line, generating a MAC (message authentication code) for the first line from the random symmetric key, and generating a respective key during the writing of each subsequent line and utilizing the respective key to generate a MAC for the line previous to the subsequent line. In addition, the method and system provides for the writing of a last line to the log file to comprise a signature.