Tamper-evident record history
Each version of a record is hashed and the hashes are chained or anchored in an append-only log, so any later change to history is detectable by anyone holding an earlier hash.
GCRI · Registry
Cybersecurity for registries
Cybersecurity and cryptography protect a registry’s integrity: that records are not altered without trace, that only authorised people change them, and that what a reader receives is what the issuer published. In registries the main threat is often quiet tampering rather than outage, so integrity and audit matter as much as availability.
01Naverok
Cybersecurity for registries in five parts.
02Application
What cybersecurity and cryptography does here.
Cybersecurity and cryptography protect information pergalan and data from unauthorised access, disruption and manipulation. They address threats that can spread rapidly across interconnected digital and physical systems. In governance and institutions and research and evidence, cybersecurity analysis identifies how a single compromise can propagate across sectors that share software, vendors or networks. It informs resilience requirements and cyber insurance. The canonical description is on STEM Commons.
Signed exports and releases
Exports and data releases are signed with keys whose public halves are published, so consumers can verify origin and integrity before ingesting, and a compromised mirror cannot pass off altered content.
Threat modelling of edit paths
Every route by which a record can change, from the interface and bulk import to administrator tools and pipelines, is modelled for abuse, including insiders and stolen credentials, and each route is logged.
03Çavdêrî bike
Security assessment.
The screen a team would use to follow this method: its measures, states and decisions. Names are examples and values are illustrative.
Security assessment
Registry · Cybersecurity for registries · Run R-3129
Two high findingsGCRI · Registry
Encam
| Weak key rotation | Identity service | Bilind | PR.AA | Vekirî |
| Unpatched gateway | Edge | Bilind | PR.PS | Fixing |
| Logging gap | API ya dayînê | Navîn | DE.CM | Vekirî |
| Stale accounts | Rêber | Kêm | PR.AA | Closed |
Method card
- Rêbaz
- Ewlehiya sîber û kriptografî
- Framework
- Fonksiyonên CSF 2.0
- Çarçove
- 37 assets
- Nîşan
- MODELKIRÎ
Control coverage by function
04Dane
What the method consumes.
Datasets and records used by cybersecurity and cryptography on this platform, with the role each plays and the label its values carry. Sources are listed in the source register.
| Dane | Rol | Nîşan |
|---|---|---|
| Security event and audit logs | Detection and reconstruction of changes | ÇAVDÊRÎKIRÎ |
| Content hashes and transparency logs | Integrity verification of records and releases | ÇAVDÊRÎKIRÎ |
| Vulnerability databases such as CVE and OSV | Known weaknesses in registry software dependencies | REPORTED |
| Incident reports | Lessons from past compromises and near misses | REPORTED |
05Simulator
Kaskadeyek di tevahiya torên girêdayî de.
A Şopa metirsîyê hebûnên li heman cihî di her qatê de ji holê radike; perçebûn, girêdayîbûna di navbera qatan de û barkirina zêde ya yên mayî paşê têkçûnê belav dikin. Dîmena 3D qatan bi kûrahiyê ji hev vediqetîne. Modela hînkirinê bi nirxên ronîker ên diyarkirî, ne pêşbînî.
Kontrol
- Mal û milk her qat
- 18
- Metirsî: şop
- 8% ya qadê
- Mal û milkên ku bi qateke din ve girêdayî ne
- 60%
- Kapasîteya zêde (tolerans)
- 30%
Xwendin
- Mal û milkên ku metirsî bandor li wan kiriye
- 6%
- Mal û milkên ku hê dixebitin
- 48%
- Mezinbûna zerara destpêkê
- 9.3 times
- Gavên çareserkirinê
- 3
Jimar, rêbaz û çavkanî
| Gav | Hêz dixebite (%) | Water working (%) | Têlekomunîkasyon dixebitin (%) |
|---|---|---|---|
| 0 | 100 | 100 | 83 |
| 1 | 61 | 100 | 56 |
| 2 | 61 | 56 | 39 |
| 3 | 61 | 44 | 39 |
Rêbaz
- Torên girêdayî Buldyrev û yên din (2010), Catastrophic cascade of failures in interdependent networks, Nature 464
- Zincîra barkêşiya zêde Motter and Lai (2002), Physical Review E 66
- Barê navbeynkariyê Brandes (2001), Journal of Mathematical Sociology 25
- Torên pirqat Kivela and others (2014), Journal of Complex Networks 2
- Girêdayîbûnên binesazê Rinaldi, Peerenboom and Kelly (2001), IEEE Control Systems 21(6)
- Pankeya nediyarîyê (Monte Carlo ya parametreyan) Spiegelhalter, Pearson and Short (2011), Visualising uncertainty about the future, Science 333
- Hesasiyeta yek-yek (tornado) Saltelli and others (2008), Global Sensitivity Analysis: The Primer, Wiley
Dane
The model runs on the teaching values set by the controls. To calibrate it for a place, read it against these admitted layers and series, which this page’s map can draw:
- Rêyên sereke Natural Earth
- Rêhesin Natural Earth
- Benderên behrê Natural Earth
- Balafirgeh Natural Earth
- Dirêjahiyên bajarî Natural Earth
- Ronahiya şevê îşev, qutbûn (VIIRS Day/Night Band) NASA/NOAA VIIRS (Suomi NPP) · register nasa.gibs.context-live-layers
- Bûyerên xwezayî (NASA EONET) NASA EONET · tomar nasa.eonet.events
Li seranserê şeş stûnan, bi pêşengiya Nexus Consortium
- Ceribandin Labs
- Hatiye avakirin di Registry li Foundry
- Tê ceribandin li Registry li Universe
- Hatiye kodkirin di Bingeh û rêveberî di Standards de
- Hatiye weşandin di Registry di Reports de
- Tê de tê dayîn Fakulteya Rêveberî, Siyaset û Karûbarên Navneteweyî di Academy de
06Erêkirin
How results are checked.
Controls are tested through red-team exercises, audits and formal analysis of cryptographic schemes. Incident data are used to check whether defences performed as intended.
| Kontrol bikin | How it is done |
|---|---|
| Hash verification | Published records and exports are re-hashed on a schedule and compared with the logged values |
| Access review | Accounts with edit and administrator rights are reviewed against current roles, and stale access is removed |
| Penetration testing | Edit paths and interfaces are tested by an independent team against the threat model |
| Restore drills | Backups are restored to a clean environment and compared with the live registry |
Adversaries adapt, so historical data may not reflect future attacks. Software supply chains and legacy systems introduce weaknesses that are hard to inventory.
07Rêbaz û delîl
How cybersecurity for registries is modelled, measured and tested.
Model, texmînên wî, daneyên wî û nediyariya wî, bi şeweyê ku zanyar an endezyar kontrol bike. Avahî rêbazên weşandî dişopînin. Nirxên hatine xêzkirin nimûneyî ne, ne encam in.
Daneset û çavkanî
The data classes behind cybersecurity for registries and what is recorded about each before it is used.
| Çîna daneyê | Çavkanî hatiye tomarkirin | Biryar hatiye diyarkirin | Lîsans hatiye kontrolkirin |
|---|---|---|---|
| Wêneyên peykî, optîk û radar | sensor, asta pêvajoyê, dîroka wergirtinê | mezinahiya pîkselê û vegera çavdêriyê | her dîmen |
| Vekolîna nû û derxistina modela avhewa | model, ceribandin, endam, guhertoyê | tor û gava demê | her weşan |
| Sensor û pîvanên cihê xwe | stasyon, amûr, tomara kalîbrasyonê | xal û rêjeya nimûnegirtinê | her tor |
| Rûbirûbûna nifûs û mal û milkan | rêbaz, berhema salê, çavkaniyên têketinê | mezinahiya şaneyê û yekeya wê | her weşan |
| Sînor û erdnîgariya referansê | hilberîner, çap, dîrok | pîvan | her çap |
- Xetên eslê daneyê
- Qeyda W3C PROV ji çavkaniyê heta wêneyê
- Prensîp
- FAIR: dîtbar, gihîştbar, hevgirtî, ji nû ve bikaranîn
- Valahî
- wekî winda tê nîşandan, tu carî bi bêdengî nayê dagirtin
Prensîbên rêber ên FAIR · GO FAIR û FORCE11W3C PROV · World Wide Web ConsortiumRêwerzên ji bo birêvebirina hevgirtî ya nediyarîyan · IPCCCEOS Analysis Ready Data · Committee on Earth Observation Satellites
08Connections
Topics that rely on this method.
09Stewardship
Who maintains the method.
Ewlehiya sîber û berxwedana dîjîtal stewards cybersecurity and cryptography for the Consortium and reviews how it is applied across platforms.
10Girêdayî
Ev rûpel li ser Konsorsiyûmê te ber bi kû ve dibe.
11Pirs
Pirs û bersiv.
What are the limits of cybersecurity and cryptography in this field?
Adversaries adapt, so historical data may not reflect future attacks. Software supply chains and legacy systems introduce weaknesses that are hard to inventory.
How are results checked?
Controls are tested through red-team exercises, audits and formal analysis of cryptographic schemes. Incident data are used to check whether defences performed as intended.
Are the values on this page real?
The data names, roles and checks are real descriptions of practice. The canvas shows a design of the method’s use, not a run; no result is reported here.
Where else is this method applied?
Çavdêrxaneya canonical method page lists every platform that applies it.
rêzeya Pergalên StratejîkTevkarî bike
Ji vê rûpelê delîl bidin.
rêzeya Pergalên Stratejîk is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
GCRIRegistryRêbaz û teknîkî
- E-nameDergeh GW-GCRIJi vê rûpelê bişîninDelîl, rastkirin, doz, rêbaz, nirxandin, wergerandin an têketina profîlê. Bi nîşana vê rûpelê digihîje, ji ber vê yekê edîtorê xwediyê wê wê bistîne.
- ZenodoDepoya vekirîWê razînin û ji civakê re bişîninTomara xwe li Zenodo bi ORCID iD ya xwe biweşînin, paşê wê li wir ji civaka Reports re bişînin. Kurator wê vedikolin; DOI ya we dimîne.
- rêzeya Pergalên StratejîkGCRIHemû rêyên beşdariyê bibîneCureyên beşdariyê, her yek çawa tê nirxandin, tu çi navlêkirinê distînî, lîsans û tiştê ku qet nayê qebûlkirin.
Tu carî daneyên şexsî, hûrgiliyên binesaza hesas an tiştekî ku mafê we yê parvekirinê tune ne neşînin. Beşdarî berî bikaranînê tê nirxandin; şandina wê nivîskarî an mafên edîtorî nade û sponsorî tu carî encamekê nakire.
Registry
Rêbazek, danehevek an pirsek bîne.
Agahî û pirs îro vekirî ne. Pirsek referansekê distîne û gava piştî wê dide nasîn; serlêdan, drav, veqetandina hesabkirinê û tomarkirin tenê dema ku tîm, mercên wê û kapasîteya vekolînê hebin vedibin.
Hiqûqî
Belgeyên hiqûqî.
Nexşe, dane û jimarên vê malperê ji bo çarçoveyê û agahiyên giştî têne nîşandan. Ew ne şîret, ne pêşbînî û ne hişyarî ne; sînorên agahiyê di Daxuyaniyên Berpirsiyariyê û Daxuyaniyên Daneyê de hatine diyarkirin.