Abstract:Data provenance is a valuable tool for detecting and preventing cyber attack, providing insight into the nature of suspicious events. For example, an administrator can use provenance to identify the perpetrator of a data leak, track an attacker's actions following an intrusion, or even control the flow of outbound data within an organization. Unfortunately, providing relevant data provenance for complex, heterogenous software deployments is challenging, requiring both the tedious instrumentation of many application components as well as a unified architecture for aggregating information between components. In this work, we present a composition of techniques for bringing affordable and holistic provenance capabilities to complex application workflows, with particular consideration for the exemplar domain of web services. We present DAP, a transparent architecture for capturing detailed data provenance for web service components. Our approach leverages a key insight that minimal knowledge of open protocols can be leveraged to extract precise and efficient provenance information by interposing on application components' communications, granting DAP compatibility with existing web services without requiring instrumentation or developer cooperation. We show how our system can be used in real time to monitor system intrusions or detect data exfiltration attacks while imposing less than 5.1 ms end-to-end overhead on web requests. Through the introduction of a garbage collection optimization, DAP is able to monitor system activity without suffering from excessive storage overhead. DAP thus serves not only as a provenance-aware web framework, but as a case study in the non-invasive deployment of provenance capabilities for complex applications workflows.

GovernR: Provenance and Confidentiality Guarantees In Research Data Repositories

Proactive Provenance Policies for Automatic Cryptographic Data Centric Security

Ensuring Purpose Limitation in Large-Scale Infrastructures with Provenance-Enabled Access Control

Towards a new standard in genomic data privacy: a realization of owner-governance

Using Blockchain and smart contracts for secure data provenance management

Efficient Secure Data Provenance Scheme in Multimedia Outsourcing and Sharing

An Analytical Survey of Provenance Sanitization

A five-safes approach to a secure and scalable genomics data repository

A Secure and Trusted Data Sharing Scheme Based on Blockchain for Government Data

Enhanced privacy of a remote data integrity-checking protocol for secure cloud storage

Enabling Integrity and Compliance Auditing in Blockchain-Based GDPR-Compliant Data Management

Blockchain-enabled Data Governance for Privacy-Preserved Sharing of Confidential Data

SciChain: Trustworthy Scientific Data Provenance

Blockchain-Based Secure Data Provenance for Cloud Storage.

Retrofitting Applications with Provenance-Based Security Monitoring

A Blockchain-based Data Governance Framework with Privacy Protection and Provenance for e-Prescription

PROPYLA: Privacy Preserving Long-Term Secure Storage

Research on Data Provenance Model for Multidisciplinary Collaboration.

Identity-Based Privacy Preserving Remote Data Integrity Checking With a Designated Verifier

A Privacy-Preserving Remote Data Integrity Checking Protocol with Data Dynamics and Public Verifiability

Security Enhancements for Data-Driven Systems: A Blockchain-Based Trustworthy Data Sharing Scheme