PURA-SCIS Protocol: A Novel Solution for Cloud-Based Information Sharing Protection for Sectoral Organizations

Abstract

Over recent years, the incidence of data breaches and cyberattacks has increased significantly. This has highlighted the need for sectoral organizations to share information about such events so that lessons can be learned to mitigate the prevalence and severity of cyber incidents against other organizations. Sectoral organizations embody a governance relationship between cross-sector public and private entities, called public-private partnerships (PPPs). However, organizations are hesitant to share such information due to a lack of trust and business-critical confidentially issues. This problem occurs because of the absence of any protocols that guarantee privacy protection and protect sensitive information. To address this issue, this paper proposes a novel protocol, Putra-Ramli Secure Cyber-incident Information Sharing (PURA-SCIS), to secure cyber incident information sharing. PURA-SCIS has been designed to offer exceptional data and privacy protection and run on the cloud services of sectoral organizations. The relationship between organizations in PURA-SCIS is symmetrical, where the entities must collectively maintain the security of classified cyber incident information. Furthermore, the organizations must be legitimate entities in the PURA-SCIS protocol. The Scyther tool was used for protocol verification in PURA-SCIS. The experimental results showed that the proposed PURA-SCIS protocol provided good security properties, including public verifiability for all entities, blockless verification, data privacy preservation, identity privacy preservation and traceability, and private information sharing. PURA-SCIS also provided a high degree of confidentiality to protect the security and integrity of cyber-incident-related information exchanged among sectoral organizations via cloud services.

A Novel Cryptographic Protocol for Secure Data Sharing in Cloud Computing

“…Ogiela et al (2020) [10] delved into intelligent data management and security in cloud computing, emphasizing the need for intelligent mechanisms to enhance data security. This theme aligns with the sectoral information sharing protection protocol introduced by Putra et al (2021) [11]. [11] introduced the PURA-SCIS protocol, aiming at safeguarding information sharing within sectoral organizations using cloud-based solutions.…”

“…This theme aligns with the sectoral information sharing protection protocol introduced by Putra et al (2021) [11]. [11] introduced the PURA-SCIS protocol, aiming at safeguarding information sharing within sectoral organizations using cloud-based solutions. Their work complements the research by Salunke and Mahale (2018) [12] on secure data sharing within distributed cloud environments.…”

Desain dan Analisis Sistem CyberShare Menggunakan Four Node Interplanetary File System (IPFS)

“…PENELITIAN YANG TERKAIT Penelitian sebelumnya membahas mengenai usulan protokol berbagi informasi insiden siber yang berfokus pada perlindungan informasi rahasia yang dibagikan melalui penyimpanan tersentralisasi diantara organisasi sektoral [14]. Penelitian sebelumnya juga membahas mengenai usulan skema berbagi informasi pemerintah untuk kerjasama lintas departemen dengan menggunakan teknologi blockchain [15].…”

A Novel Secure Root Key Updating Scheme for LoRaWANs Based on CTR_AES DRBG 128

“…The communication protocol pairs, 𝑁𝑒𝑤_𝐽𝑜𝑖𝑛-𝑟𝑒𝑞𝑢𝑒𝑠𝑡 and 𝑁𝑒𝑤_𝐽𝑜𝑖𝑛-𝑎𝑐𝑐𝑒𝑝𝑡 and 𝑁𝑒𝑤_𝑅𝑒𝑗𝑜𝑖𝑛-𝑟𝑒𝑞𝑢𝑒𝑠𝑡 and 𝑁𝑒𝑤_𝑅𝑒𝑗𝑜𝑖𝑛-𝑎𝑐𝑐𝑒𝑝𝑡, are validated using Scyther tools [63][64][65]. Scyther is a validation tool that can be used to test the security of protocols and communication networks under enemy control [66] [67]. Modeling with the Scyther tool allows us to prove that the attacker is unable to interfere with or learn any secrets of the protocols [68].…”