BloCyNfo-Share: Blockchain based Cybersecurity Information Sharing with Fine Grained Access Control

Badsha, Shahriar; Vakilinia, Iman; Sengupta, Shamik

doi:10.1109/ccwc47524.2020.9031164

Cited by 26 publications

(11 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…So, some technologies were used in essence to help with privacy. This was guaranteed by leveraging blockchain with technologies like proxy re-encryption, hierarchical at-tribute-based encryption, capability-based access control and many more [21,41,24,47,22,57,33].…”

Section: A Rq1: How Have Blockchain-driven Access Control Systems Sho...mentioning

confidence: 99%

See 1 more Smart Citation

Blockchain Driven Access Control Mechanisms, Models and Frameworks: A Systematic Literature Review

Dar¹,

Baba

Lone

et al. 2022

JISCR

View full text Add to dashboard Cite

Access control or authorization is referred to as the confinement of specific actions of an entity, thereby allowing them to be performed as per certain rules. Blockchain-driven access control mechanisms gained considerable attention directly after applications beyond the premise of cryptocurrency were found. However, there are no systematic efforts to analyze existing empirical evidence. To this end, we aim to synthesize litera- ture to understand the state-of-the-art blockchain driven access control mechanisms with respect to underlying platforms, utilized blockchain properties, nature of the mod- els and associated testbeds and tools. We conducted the review in a systematic way. Meta analysis and thematic synthesis were performed on the findings from relevant primary studies, in order to answer the framed research questions in perspective. We identified 76 relevant primary studies that passed the quality assessment. The problems targeted by relevant studies were single point of failure, security, and privacy, etc. The meta-analysis of the primary studies suggests the use of different blockchain platforms along with several application domains where different blockchain proprieties were utilized. In this paper, we present a systematic literature review of blockchain driven access control systems. In hindsight, we present a taxonomy of blockchain-driven access control systems to better understand the immense implications of this field spanning various application domains

show abstract

Section: A Rq1: How Have Blockchain-driven Access Control Systems Sho...mentioning

confidence: 99%

“…Organizational Value, Storage, Networks -Several studies have applications that are different from the usual and evident application domains. Some studies have shown applications that have organizational value [24,80,82,86].…”

Section: Rq3: What Are the Various Application Domains Covered By Blo...mentioning

confidence: 99%

Blockchain Driven Access Control Mechanisms, Models and Frameworks: A Systematic Literature Review

Dar¹,

Baba

Lone

et al. 2022

JISCR

View full text Add to dashboard Cite

show abstract

“…Besides, this work, unlike ours, does not support data provenance of shared threat events. Like in our work, in [26], the authors propose combining both CP-ABE encryption for confidential CTI data sharing and blockchain to address nonrepudiation issues of exchanged data. However, their proposal requires a centralized server to store the encrypted data and a centralized trusted entity in charge of managing all the keys.…”

Section: Related Workmentioning

confidence: 99%

Distributed Security Framework for Reliable Threat Intelligence Sharing

Preuveneers

Joosen

Bernabé

et al. 2020

Security and Communication Networks

View full text Add to dashboard Cite

Computer security incident response teams typically rely on threat intelligence platforms for information about sightings of cyber threat events and indicators of compromise. Other security building blocks, such as Network Intrusion Detection Systems, can leverage the information to prevent malicious adversaries from spreading malware across critical infrastructures. The effectiveness of threat intelligence platforms heavily depends on the willingness to share among organizations and the responsible use of sensitive information that may potentially harm the reputation of the reporting organization. The challenge that we address is the lack of trust in the source providing the threat intelligence and the information itself. We enhance our security framework TATIS—offering fine-grained protection for threat intelligence platform APIs—with distributed ledger capabilities to enable reliable and trustworthy threat intelligence sharing with the ability to audit the provenance of threat intelligence. We have implemented and evaluated the feasibility of our distributed framework on top of the Malware Information Sharing Platform (MISP) solution, and we evaluate the performance impact using real-world open-source threat intelligence feeds.

show abstract

“…Blockchain is an open, distributed, and immutable ledger system that was first conceptualized as a public transaction ledger of the cryptocurrency bitcoin by Satoshi Nakamoto in 2008. Since then, blockchain technology has been proposed to apply in several domains, including but not limited to, task allocation [10], ride-sharing [11], cybersecurity information sharing [12], cyber insurance [13] etc. In this paper, we have considered extending the application of blockchain in the smart grid area.…”

Section: E Blockchainmentioning

confidence: 99%

PoRCH: A Novel Consensus Mechanism for Blockchain-Enabled Future SCADA Systems in Smart Grids and Industry 4.0

Hossain

Badsha

Shen

2020

2020 IEEE International IOT, Electronics and Mechatronics Conference (IEMTRONICS)

Self Cite

View full text Add to dashboard Cite

Smart Grids and Industry 4.0 (I4.0) are neither a dream nor a near-future thing anymore, rather it is happening now. The integration of more and more embedded systems and IoT devices is pushing smart grids and I4.0 forward at a breakneck speed. To cope up with this, the modification of age-old SCADA (Supervisory Control and Data Acquisition) systems in terms of decentralization, near-real-time operation, security, and privacy is necessary. In this context, blockchain technology has the potential of providing not only these essential features of the data acquisition process of future SCADA systems but also many other useful add-ons. On the other side, it is evident that various type of security breach tends to take place more during any economic turmoil. These can cause even more serious devastation to the global economy and human life. Thus, it is necessary to make our industries robust, automated, and resilient with secured and immutable data acquiring systems. This paper deals with the implementation scopes of blockchain in the data acquisition part of SCADA systems in the area of the smart grid and I4.0. There are several consensus mechanisms to support blockchain integration in the field cryptocurrencies, vehicular networks, healthcare systems, e-commerce, etc. But little attention has been paid for developing efficient and easy to implement consensus mechanisms in the field of blockchain-enabled SCADA systems. From this perspective, a novel consensus mechanism, which we call PoRCH (Proof of Random Count in Hashes), with a customized mining node selection scheme has been proposed in this paper. Also, a small-scale prototype of a blockchain-enabled data acquisition system has been developed. The performance evaluation of the implemented prototype shows the benefits of blockchain technology.

show abstract

BloCyNfo-Share: Blockchain based Cybersecurity Information Sharing with Fine Grained Access Control

Cited by 26 publications

References 25 publications

Blockchain Driven Access Control Mechanisms, Models and Frameworks: A Systematic Literature Review

Blockchain Driven Access Control Mechanisms, Models and Frameworks: A Systematic Literature Review

Distributed Security Framework for Reliable Threat Intelligence Sharing

PoRCH: A Novel Consensus Mechanism for Blockchain-Enabled Future SCADA Systems in Smart Grids and Industry 4.0

Contact Info

Product

Resources

About