Tamper-evident record history
Each version of a record is hashed and the hashes are chained or anchored in an append-only log, so any later change to history is detectable by anyone holding an earlier hash.
GCRI · Registry
Keamanan siber untuk registri
Cybersecurity and cryptography protect a registry’s integrity: that records are not altered without trace, that only authorised people change them, and that what a reader receives is what the issuer published. In registries the main threat is often quiet tampering rather than outage, so integrity and audit matter as much as availability.
01Daftar isi
Cybersecurity for registries in five parts.
02Permohonan
What cybersecurity and cryptography does here.
Cybersecurity and cryptography protect information sistem and data from unauthorised access, disruption and manipulation. They address threats that can spread rapidly across interconnected digital and physical systems. In governance and institutions and research and evidence, cybersecurity analysis identifies how a single compromise can propagate across sectors that share software, vendors or networks. It informs resilience requirements and cyber insurance. The canonical description is on STEM Commons.
Signed exports and releases
Exports and data releases are signed with keys whose public halves are published, so consumers can verify origin and integrity before ingesting, and a compromised mirror cannot pass off altered content.
Threat modelling of edit paths
Every route by which a record can change, from the interface and bulk import to administrator tools and pipelines, is modelled for abuse, including insiders and stolen credentials, and each route is logged.
03Pantau
Security assessment.
Layar yang akan digunakan sebuah tim untuk mengikuti metode ini: ukuran, status, dan keputusannya. Nama adalah contoh dan nilai bersifat ilustratif.
Security assessment
Registry · Cybersecurity for registries · Run R-3129
Two high findingsGCRI · Registri
Temuan
| Weak key rotation | Identity service | Tinggi | PR.AA | Buka |
| Unpatched gateway | Edge | Tinggi | PR.PS | Fixing |
| Logging gap | API pembayaran | Sedang | DE.CM | Buka |
| Stale accounts | Direktori | Rendah | PR.AA | Ditutup |
Kartu metode
- Metode
- Keamanan siber dan kriptografi
- Kerangka
- Fungsi CSF 2.0
- Lingkup
- 37 assets
- Label
- DIMODELKAN
Control coverage by function
04Data
Apa yang digunakan metode ini.
Datasets and records used by cybersecurity and cryptography on this platform, with the role each plays and the label its values carry. Sources are listed in register sumber.
| Data | Peran | Label |
|---|---|---|
| Security event and audit logs | Detection and reconstruction of changes | TERAMATI |
| Content hashes and transparency logs | Integrity verification of records and releases | TERAMATI |
| Vulnerability databases such as CVE and OSV | Known weaknesses in registry software dependencies | DILAPORKAN |
| Incident reports | Lessons from past compromises and near misses | DILAPORKAN |
05Simulator
Efek berantai melalui jaringan yang saling bergantung.
A Jejak bahaya melumpuhkan aset yang berada di lokasi sama pada setiap lapisan; fragmentasi, ketergantungan antarlapisan, dan kelebihan beban pada yang selamat kemudian menyebarkan kegagalan. Tampilan 3D memisahkan lapisan menurut kedalaman. Model pengajaran dengan nilai ilustratif yang dinyatakan, bukan prediksi.
Kendali
- Aset per lapisan
- 18
- Jejak bahaya
- 8% dari luas wilayah
- Aset yang bergantung pada lapisan lain
- 60%
- Kapasitas cadangan (toleransi)
- 30%
Pembacaan
- Aset yang terdampak bahaya
- 6%
- Aset yang masih berfungsi
- 48%
- Penguatan kerusakan awal
- 9.3 times
- Langkah menuju stabil
- 3
Angka, metode, dan sumber
| Langkah | Daya berfungsi (%) | Water working (%) | Telekomunikasi berfungsi (%) |
|---|---|---|---|
| 0 | 100 | 100 | 83 |
| 1 | 61 | 100 | 56 |
| 2 | 61 | 56 | 39 |
| 3 | 61 | 44 | 39 |
Metode
- Jaringan yang saling bergantung Buldyrev dan lainnya (2010), Catastrophic cascade of failures in interdependent networks, Nature 464
- Rambatan kelebihan beban Motter and Lai (2002), Physical Review E 66
- Beban keantaraan Brandes (2001), Journal of Mathematical Sociology 25
- Jaringan multilapis Kivela and others (2014), Journal of Complex Networks 2
- Saling ketergantungan infrastruktur Rinaldi, Peerenboom and Kelly (2001), IEEE Control Systems 21(6)
- Kipas ketidakpastian (Monte Carlo parameter) Spiegelhalter, Pearson and Short (2011), Visualising uncertainty about the future, Science 333
- Sensitivitas satu per satu (tornado) Saltelli and others (2008), Global Sensitivity Analysis: The Primer, Wiley
Data
The model runs on the teaching values set by the controls. To calibrate it for a place, read it against these admitted layers and series, which this page’s map can draw:
- Jalan utama Natural Earth
- Jalur kereta api Natural Earth
- Pelabuhan laut Natural Earth
- Bandar udara Natural Earth
- Luasan perkotaan Natural Earth
- Cahaya malam hari ini, pemadaman (VIIRS Day/Night Band) NASA/NOAA VIIRS (Suomi NPP) · register nasa.gibs.context-live-layers
- Peristiwa alam (NASA EONET) NASA EONET · register nasa.eonet.events
Di seluruh enam pilar, dipimpin oleh Nexus Consortium
- Eksperimen Laboratorium
- Tertanam di Registry di Foundry
- Diuji pada Registry di Universe
- Dikodifikasi dalam Fondasi dan Tata Kelola di Standards
- Diterbitkan di Registry di Reports
- Diajarkan di Fakultas Tata Kelola, Kebijakan, dan Hubungan Internasional di Academy
06Validasi
Cara hasil diperiksa.
Controls are tested through red-team exercises, audits and formal analysis of cryptographic schemes. Incident data are used to check whether defences performed as intended.
| Pemeriksaan | Cara pelaksanaannya |
|---|---|
| Hash verification | Published records and exports are re-hashed on a schedule and compared with the logged values |
| Access review | Accounts with edit and administrator rights are reviewed against current roles, and stale access is removed |
| Penetration testing | Edit paths and interfaces are tested by an independent team against the threat model |
| Restore drills | Backups are restored to a clean environment and compared with the live registry |
Adversaries adapt, so historical data may not reflect future attacks. Software supply chains and legacy systems introduce weaknesses that are hard to inventory.
07Metode dan bukti
How cybersecurity for registries is modelled, measured and tested.
Model, asumsi, data, dan ketidakpastiannya, dalam bentuk yang akan diperiksa ilmuwan atau insinyur. Strukturnya mengikuti metode yang dipublikasikan. Nilai yang digambar bersifat ilustratif, bukan temuan.
Set data dan asal-usul
The data classes behind cybersecurity for registries and what is recorded about each before it is used.
| Kelas data | Asal-usul tercatat | Resolusi dinyatakan | Lisensi diperiksa |
|---|---|---|---|
| Citra satelit, optik dan radar | sensor, tingkat pemrosesan, tanggal akuisisi | ukuran piksel dan kunjungan ulang | per adegan |
| Reanalisis dan keluaran model iklim | model, eksperimen, anggota, versi | grid dan langkah waktu | per rilis |
| Sensor dan alat ukur in situ | stasiun, instrumen, catatan kalibrasi | titik dan laju pengambilan sampel | per jaringan |
| Keterpaparan penduduk dan aset | metode, tahun terbit, sumber masukan | ukuran sel dan satuan | per rilis |
| Batas dan geografi acuan | produsen, edisi, tanggal | skala | per edisi |
- Garis keturunan
- Catatan W3C PROV dari sumber hingga gambar
- Prinsip
- FAIR: dapat ditemukan, dapat diakses, interoperabel, dapat digunakan ulang
- Kesenjangan
- ditampilkan sebagai hilang, tidak pernah diisi diam-diam
Prinsip panduan FAIR · GO FAIR dan FORCE11W3C PROV · World Wide Web ConsortiumPanduan penanganan ketidakpastian secara konsisten · IPCCCEOS Analysis Ready Data · Committee on Earth Observation Satellites
08Keterkaitan
Topik yang bertumpu pada metode ini.
09Pengelolaan
Siapa yang memelihara metode ini.
Keamanan Siber dan Ketahanan Digital stewards cybersecurity and cryptography for the Consortium and reviews how it is applied across platforms.
10Terhubung
Ke mana halaman ini mengarah di seluruh Konsorsium.
11Pertanyaan
Tanya jawab.
What are the limits of cybersecurity and cryptography in this field?
Adversaries adapt, so historical data may not reflect future attacks. Software supply chains and legacy systems introduce weaknesses that are hard to inventory.
Bagaimana hasil diperiksa?
Controls are tested through red-team exercises, audits and formal analysis of cryptographic schemes. Incident data are used to check whether defences performed as intended.
Apakah nilai di halaman ini nyata?
The data names, roles and checks are real descriptions of practice. The canvas shows a design of the method’s use, not a run; no result is reported here.
Di mana lagi metode ini diterapkan?
Observatory Halaman metode kanonis mencantumkan setiap platform yang menerapkannya.
LaporanBerkontribusi
Kontribusikan bukti dari halaman ini.
Laporan is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
GCRIRegistriMetode dan Teknis
- SurelGerbang GW-GCRIKirim dari halaman iniBukti, koreksi, kasus, metode, tinjauan, terjemahan, atau masukan profil. Kiriman tiba dengan label halaman ini, sehingga editor pemiliknya menerimanya.
- ZenodoDeposit terbukaDeposit dan ajukan ke komunitasTerbitkan catatan Anda sendiri di Zenodo dengan ORCID iD Anda, lalu ajukan ke komunitas Reports di sana. Kurator meninjaunya; DOI tetap milik Anda.
- LaporanGCRILihat semua cara berkontribusiJenis kontribusi, cara masing-masing ditinjau, kredit yang Anda terima, lisensinya, dan apa yang tidak pernah diterima.
Jangan pernah mengirim data pribadi, rincian infrastruktur sensitif, atau apa pun yang tidak berhak Anda bagikan. Kontribusi ditinjau sebelum digunakan. Mengirimkannya tidak memberikan hak kepenulisan atau editorial, dan sponsor tidak pernah membeli sebuah temuan.
Registri
Bawa metode, dataset, atau pertanyaan.
Informasi dan pertanyaan sudah terbuka hari ini. Sebuah pertanyaan menerima nomor referensi dan menyebutkan langkah berikutnya; lamaran, pembayaran, alokasi komputasi, dan pendaftaran hanya dibuka ketika tim, ketentuan, dan kapasitas tinjauannya tersedia.
Hukum
Dokumen hukum.
Peta, data, dan gambar di situs ini ditampilkan untuk konteks dan informasi umum. Semua itu bukan nasihat, prakiraan, atau peringatan; batasan informasinya dijelaskan dalam Penafian dan Pemberitahuan Data.