Data structure and privacy protection analysis in big data environment based on blockchain technology

Project "Code Safe" is designed to increase the dependability and security of software through strong security measures, as well as sticking to coding guidelines. In today's digital world that is characterized by data breaches and cyber threats, the safety of sensitive data and protection against unauthorized entry have become very necessary. The project aims to provide a secure environment for software applications by including encryption, access control, and secure authentication mechanisms. The project ensures that any confidential information is kept safe from unauthorized tampering or access through the use of robust encryption algorithms. Access control mechanisms are also in place to regulate user permissions and restrict access to specific functionalities and data, thus ensuring that only authorized persons can interact with the application. To this extent, multi-factor authentication secure access mechanisms would be integrated into authenticate user identity; hence preventing illegal entries to the system. To this extent also, it marks the significance that the software project places on high-quality maintainability of software codes. As indicated, this increases the general quality of a base of the developed software codes towards industry coding and best standards of practice. In addition, this involves modular designing principles, routine code reviews, and automated testing frameworks for identification and handling of software defects thereby improving the reliability and stability of an application. "Code Safe" is an iteration-based development process that includes continuous security assessments as well as updates throughout the software development lifecycle. By keeping on the latest trends and technologies that evolve in terms of security, this project could be able to integrate cutting edge security features within its application; hence, resiliency toward current threats could be ensured. Finally, "Code Safe" aims at ensuring secure platforms for different types of software such as web services, mobile applications or desktop software. The project tries to inspire confidence in end-users that their data and interactions are safeguarded through a robust security framework and adherence to coding best practices. Keywords— Security Measures, Encryption, Secure Authentication, Multi-Factor Authentication, Cyber Threats

The Pi-calculus has been developed to reason about behavioural equivalence. Different notions of equivalence are defined in terms of process interactions, as well as the context of processes. There are various extensions of the Pi-calculus, such as the SPI calculus, which has primitives to facilitate security protocol design.<br /> <br />Another area of computer security is access control research, which includes problems of access control models, policies and access control mechanism. The design of a unified framework for access control requires that all policies are supported and different access control models are instantiated correctly.<br /> <br />In this paper we will utilise the Pi calculus to reason about access control policies and mechanism. An equivalence of different policy implementations, as well as access control mechanism will be shown. Finally some experiences regarding the use of Pi-calculus are presented.

Background: The pervasive adoption of edge computing is reshaping real-time big data analysis, smart city management, intelligent transportation, and various other domains. Its appeal lies in its distributed nature, decentralization, low latency, mobile support, and spatial awareness. However, this ubiquity exposes data to security threats, jeopardizing privacy and integrity. Consequently, access control assumes paramount importance in securing data sharing within edge computing and blockchain technologies. Methods: This research addresses this critical issue by conducting a comprehensive study on access control techniques within the context of edge computing and blockchain for secure data sharing. Our methodology commences with an exhaustive review of relevant articles, aiming to identify and expound upon gaps in existing research. Subsequently, we perform a meticulous analysis of access control methods, mechanisms, and performance metrics, seeking to establish a holistic understanding of the landscape. Results: The culmination of this research effort is a multifaceted contribution. We distill insights from a diverse range of access control schemes, shedding light on their nuances and effectiveness. Our analysis extends to evaluating the performance metrics vital for ensuring robust access control. Through this research, we also pinpoint critical research gaps within traditional access control methods, creating a foundation for innovative approaches to address the evolving challenges within edge computing and blockchain environments. Conclusion: In conclusion, this research venture paves the way for secure data sharing in edge computing and blockchain by offering a thorough examination of access control. The findings from this study are anticipated to guide future developments in access control techniques and facilitate the evolution of secure, privacy-conscious, and efficient data sharing practices in the dynamic landscape of digital technology.

Cloud Computing are used to deliver services from share pool of computing resources. These resources are provided to the user using the internet. It has advantage over traditional computing services along with new challenge. These are data security, privacy, protection, access control, availability, authentication, scalability, lock-in and confidentiality. These are inherent security flaws of cloud technology due to openness, multi-tenancy, outsourcing of resources. Access control is a fundamental security mechanism but traditional access control like as mandatory, discretionary and role based access control are not suitable. These traditional existing access control model are not effective and feasible solutions for cloud. In this research work, novel access control framework is proposed that can address the security and privacy issues for cloud. The framework is based on dynamic trustworthiness of user and provides an effective and feasible access control solution for cloud. A multi layer security standard, policies and access control mechanism are provided with proposed framework. The access control is based on the trustworthiness of the user, which is demonstrated by static and dynamic trust evidence. The dynamic trustworthiness is used to reduce the possibility to perform unauthorized activities and ensures that only authorized user's access cloud resources. The prototype of the proposed framework is developed in NetLogo on Linux platform and demonstrated with test cases. The analysis of simulated results shows that proposed mechanism is highly efficient and robust under existing security threats.

This review chapter provides an in-depth exploration of various aspects of data security, ranging from foundational principles to advanced techniques. It sheds light on the importance of maintaining confidentiality, integrity, and availability of data and presents a comprehensive overview of technologies and methodologies that can be employed to achieve robust data security. In today's digital age, ensuring the security and protection of data has become paramount. This research chapter explores various topics related to data security, including confidentiality, integrity, and availability. It also delves into the role of blockchain technology, zero-trust architecture, secure coding practices, legal and ethical considerations, homomorphic encryption, secure multi-party computation, hash functions and digital signatures, secure communication protocols, cryptocurrency and blockchain security, as well as cryptanalysis and side-channel attacks.It highlights various techniques and technologies that can be employed to protect data confidentiality, including encryption and access control mechanisms. Blockchain technology has emerged as a groundbreaking solution for enhancing data security. Zero-trust architecture challenges traditional security models by adopting a holistic and dynamic approach to data protection. Secure coding practices and DevSecOps play a vital role in developing secure software applications. The chapter investigates the importance of integrating security measures throughout the software development lifecycle. It emphasizes the adoption of secure coding practices and the implementation of DevSecOps methodologies to build resilient and secure software systems. Legal and ethical considerations are crucial when addressing data security. Homomorphic encryption and secure multi-party computation are advanced cryptographic techniques that allow data to be processed securely while encrypted. The chapter examines the principles and applications of these techniques, highlighting their significance in scenarios where privacy is paramount. Hash functions and digital signatures form the backbone of data authentication and integrity. The chapter discusses the properties and applications of hash functions and digital signatures in verifying the integrity and authenticity of data. Secure communication protocols are essential for protecting data during transmission. The chapter explores various secure communication protocols, such as Transport Layer Security (TLS), and examines their role in ensuring data confidentiality, integrity, and authenticity. Cryptocurrency and blockchain security focus on the secure storage and transfer of digital assets. The research chapter investigates the security considerations specific to cryptocurrencies and explores how block chain technology can mitigate vulnerabilities and ensure the trustworthiness of transactions. Cryptanalysis and side-channel attacks are threats to cryptographic systems. The chapter discusses these attack techniques, highlighting their potential risks and the measures that can be taken to counter them.

In today's digital world, information is exchanged between systems and it is expected that each interaction / transaction between the systems is secure and reliable. Block chain technology can be applied to protect the security of healthcare data. It is important to have access control mechanism that allows only authorized persons to share the medical data. In this work, we introduce a blockchain based system for securely sharing health records. The system includes a smart contract based data protection and accessibility mechanism.

The Internet of Things (IoT) connects many objects and allows continuous communication and data sharing has emerged as a revolutionary technology. However, expanding IoT devices has raised concerns regarding data security and access control. Traditional access control mechanisms face challenges in managing access rights, particularly in scenarios where multiple users with the same roles try to access several resources which may lead to conflicting roles. Additionally, there is also an overhead of system performance using traditional approaches. In existing studies, the main problem of conflict roles is not addressed or not even identified appropriately. This paper proposes a framework to address these challenges using blockchain technology and role-based access control with a smart contract implementation on the hyperledger fabric framework. The proposed methodology introduces a role management system that resolves conflicts based on predefined rules and user preferences. It employs a consensus mechanism to determine access permissions, ensuring fairness and accountability. The findings demonstrate that applying the suggested framework eliminates conflicting problems, improves system security and also provides better results in response times of twelve seconds on average for thirty-five concurrent user requests. It also provides a secure and transparent access control framework which improves response time and provides security based on roles.

With rapid advancements in the technology, almost all the devices around are becoming smart and contribute to the Internet of Things (IoT) network. When a new IoT device is added to the network, it is important to verify the authenticity of the device before allowing it to communicate with the network. Hence, access control is a crucial security mechanism that allows only the authenticated node to become the part of the network. An access control mechanism also supports confidentiality, by establishing a session key that accomplishes secure communications in open public channels. Recently, blockchain has been implemented in access control protocols to provide a better security mechanism. The foundation of this survey article is laid on IoT, where a detailed description on IoT, its architecture and applications is provided. Further, various security challenges and issues, security attacks possible in IoT and their countermeasures are also provided. We emphasize on the blockchain technology and its evolution in IoT. A detailed description on existing consensus mechanisms and how blockchain can be used to overpower IoT vulnerabilities is highlighted. Moreover, we provide a comprehensive description on access control protocols. The protocols are classified into certificate-based, certificate-less and blockchain-based access control mechanisms for better understanding. We then elaborate on each use case like smart home, smart grid, health care and smart agriculture while describing access control mechanisms. The detailed description not only explains the implementation of the access mechanism, but also gives a wider vision on IoT applications. Next, a rigorous comparative analysis is performed to showcase the efficiency of all protocols in terms of computation and communication costs. Finally, we discuss open research issues and challenges in a blockchain-envisioned IoT network.

Blockchain (BC) technology has become known as a main facilitator for verification-driven transactions for people who lack trust in consensus-based transactions. BC offers a provenance-driven verifiable ledger and data management organizations, so research and industry communities are eager to use BC to address the main difficulties of real-world applications like healthcare and business. BC is a storage approach, where information is stored on several nodes, and access control features allow only valid users to communicate in the Internet of Things (IoT) network for elevated-security applications, which is one of the most critical components of network security. Access control policy misconfiguration is more likely to result in secrecy or security rupture, as an outcome, access control systems enable genuine user communication, and data may be maintained more securely without incurring bigger losses. Because the data management and access control methods in BC-enabled IoT systems are so important, several academics have worked on creating a variety of ways to ensure suitable authentication and permission. To acquire a deeper comprehension of the mechanisms available and to provide a future path for researchers, 50 research papers will be collected in this study based on the data management and access control mechanisms used in decentralized storage systems, and the study will be enabled through the designed taxonomy categorization, which will bring a deep insight into the mechanisms available, and open challenges. Rather than a questionnaire, the comparative examination of alternative development platforms for decentralized apps will be analyzed using research papers to give a technically efficient solution. The researchers can focus on an adaptable notion by analyzing the many approaches accessible and their merits in real-time applications. The study will analyze the numerous approaches accessible in the decentralized framework, as well as their benefits, drawbacks, and research gaps, allowing the researchers to learn about the ways available for providing access control in decentralized storage systems.

In this paper, a variety of cloud service combinations is used to form the control core of a smart home, realize data forwarding, storage, and analysis in the cloud, and complete the remote management of smart home devices. This paper studies the secure access control of smart home data combined with the blockchain technology and password technology to realize the secure and efficient access control of smart home data. The system can achieve the goal of independent research and development. Aiming at the problem that the access control of a smart home is generally managed by third‐party authorized institutions and there is an unauthorized access, a blockchain‐based smart home (BSH) access control scheme is proposed. The scheme extends the attribute‐based access control model (ABAC) and applies the blockchain technology to the smart home ABAC model to realize fine‐grained access control. In the scheme, the resource provider first publishes the access control policy of the resource to the blockchain. If the resource visitor wants to access the resource, he needs to submit an access request to the blockchain and use an SM2 threshold signature to process the transaction proposal. The endorsement peer node in the blockchain runs the access control policy smart contract to decide whether to grant access rights. This scheme can ensure that resource providers can participate in all the processes of access control and avoid the risk of unauthorized access caused by the centralized management of the third party. Finally, the simulation experiment is carried out on the Hyperledger Fabric alliance chain development platform. The results show that the BSH access control scheme has good applicability in the smart home scenario.

Authentication and access control are critical issues in IoT networks, as these networks comprise a large number of connected devices that exchange sensitive data. One of the biggest challenges in IoT authentication is the lack of uniformity among devices, which makes it difficult to implement a standard mechanism. Additionally, many IoT devices makes implementing robust authentication protocols challenging. Another challenge is the issue of access control, which is critical to ensure that only authorized users and devices can access sensitive data. Access control mechanisms should be implemented at various levels, including the device level, network level, and application level. However, in many cases, IoT devices lack the necessary features to implement advanced access control mechanisms. To address these challenges, IoT manufacturers and developers must prioritize security in their design and development processes. This includes implementing robust authentication and access control mechanisms, ensuring software and firmware updates are timely, and conducting regular security audits to identify and address vulnerabilities. Additionally, IoT devices should be designed with security in mind, and security features should be a core component of the device's design, rather than an afterthought. This work aims to solve the problem of authentication and access control in IoT networks, using Blockchain technology, proposing a consensus algorithm and a trust model between nodes.

In today’s world rapid development in technology has produced large number of smart devices, such as tabs, smart phones, smart watches, etc. This leads to a digital world where all day-to-day activity data is saved online from any where, any time and using numerous of smart devices. At the same time, Authentication and Access Control plays an important role in the concept of smart spaces. Authentication of user is a process to verify the user’s identity that protects the user's personal information stored on his/her personal devices such as smart watches, phones and tabs such as online banking and also on customized services which are available in smart spaces such as smart homes. Traditional authentication methods have recently been repeatedly demonstrated to be vulnerable to attacks. To overcome these problems blockchain can provide tamper proof data, security and integrity. Researchers nowadays have invented many new mechanisms for authentication of the user and their access control. In this survey, we will describe an introduction to authentication and access control and blockchain, we presents a thorough background details of authentication, access control mechanism and blockchain technology, the need of integrating blockchain in authentication and access control. Then, we construct classification of available methods according to their category, application and use of blockchain.

Data security is a major issue for smart home networks. Yet, different existing tools and techniques have not been proven highly effective for home networks’ data security. Blockchain is a promising technology because of the distributed computing infrastructure network that makes it difficult for hackers to intrude into the systems through the use of cryptographic signatures and smart contracts. In this paper, an architecture for smart home networks that could guarantee data integrity, robust security, and the ability to protect the validity of the blockchain transactions has been investigated. The system model is tested using various sizes of realistic datasets (30, 3 k, and 30 k to represent a small, medium, and large number of transactions, respectively). Four different consensus algorithms were considered, the conventional schemes concatenated hash transactions (CHT) and Merkle hash tree (MHT), as well as the newly proposed odd and even modified MHT (O&E MHT) and modified MHT (MMHT). Moreover, 15 hash functions were also examined and compared to understand the effects of each consensus algorithms on the data integrity verification check execution time and the time optimization provided by the proposed MMHT algorithm. The results show that even though the CHT algorithm gives the lowest execution time, it is impractical for a blockchain implementation due to the requirement to copy the entire blockchain ledger in real time. Meanwhile, the O&E MHT does not give any tangible benefit in the execution time. However, the proposed MMHT offers a minimum of 30% gain in time optimization than the conventional MHT algorithm typically used in blockchains. This work shows that the proposed MMHT consensus algorithm not only can identify malicious codes but has an improved data integrity check performance in smart homes, all while ensuring network stability.

Chapter 23 - Policies, Access Control, and Formal Methods

Security concerns have been rapidly increasing because of repeated security incidents such as unexpected personal information leakage. Since XML [38] has been playing an important role in IT systems and applications, a big surge of requirements for legislative compliance is driving enterprises to protect their XML data for secure data management as well as privacy protection, and the access control mechanism is a central control point. In this chapter, we are concerned with fine-grained (element- and attribute-level) access control for XML database systems, rather than with document-level access control. We use the term XML access control to address such fine-grained access control. The XML access control deals with XML data and access control policies as well as schema definitions, e.g. XML Schema [40], and queries, e.g. XQuery [36]. The scope of XML access control is not limited to a specific application but covers broader areas that involve XML-based transactional systems such as e-commerce applications (Commerce XML [7] etc.), medical and health record applications (HL7 [16] etc.), and newspaper article distribution and applications (NewsML [17] etc.).