TY - GEN
T1 - A Secure Sharing Scheme for Cybersecurity Data Based on Blockchain Hybrid Storage and CP-ABE
AU - Xia, Xinzhuo
AU - Xu, Lei
AU - Zhu, Liehuang
N1 - Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2027.
PY - 2027
Y1 - 2027
N2 - Large amounts of data are generated during the monitoring of network security, and they need to be shared separately among different parties. However, traditional data sharing methods face problems such as centralized storage risks, lack of fine-grained permission control, and difficulty in tracing data access. To solve these issues, this paper proposes a secure sharing scheme for cybersecurity data. The proposed scheme adopts CP-ABE to implement role-based access control. Moreover, the proposed scheme uses a hybrid storage architecture that combines the blockchain system ChainSQL and the InterPlanetary File System to store indexes and ciphertext separately. To demonstrate the feasibility of the proposed scheme, we conduct simulations with real-world alert records. The simulation results show that the time spent on data storging and data qurerying is acceptable. The storage overhead of encrypted data is only 2–19% higher than that of unencrypted data. The scheme ensures data security, traceability, and fine-grained access control, making it suitable for practical cybersecurity data sharing scenarios.
AB - Large amounts of data are generated during the monitoring of network security, and they need to be shared separately among different parties. However, traditional data sharing methods face problems such as centralized storage risks, lack of fine-grained permission control, and difficulty in tracing data access. To solve these issues, this paper proposes a secure sharing scheme for cybersecurity data. The proposed scheme adopts CP-ABE to implement role-based access control. Moreover, the proposed scheme uses a hybrid storage architecture that combines the blockchain system ChainSQL and the InterPlanetary File System to store indexes and ciphertext separately. To demonstrate the feasibility of the proposed scheme, we conduct simulations with real-world alert records. The simulation results show that the time spent on data storging and data qurerying is acceptable. The storage overhead of encrypted data is only 2–19% higher than that of unencrypted data. The scheme ensures data security, traceability, and fine-grained access control, making it suitable for practical cybersecurity data sharing scenarios.
KW - CP-ABE
KW - ChainSQL
KW - InterPlanetary File System
KW - alert data
KW - blockchain
UR - https://www.scopus.com/pages/publications/105047653953
U2 - 10.1007/978-981-92-2973-4_24
DO - 10.1007/978-981-92-2973-4_24
M3 - Conference contribution
AN - SCOPUS:105047653953
SN - 9789819229727
T3 - Communications in Computer and Information Science
SP - 463
EP - 478
BT - Blockchain Technology and Application - 8th CCF China Blockchain Conference, CBCC 2025, Revised Selected Papers
A2 - Zhu, Liehuang
A2 - Sun, Yi
A2 - Gu, Dawu
A2 - Zhu, Jianming
A2 - Li, Wei
A2 - Wu, Qianhong
A2 - Song, Xianhua
A2 - Lu, Zeguang
PB - Springer Science and Business Media Deutschland GmbH
T2 - 8th CCF China Blockchain Conference, CCF CBCC 2025
Y2 - 18 December 2025 through 21 December 2025
ER -