Smart contracts for access monitoring

Project summary

The objective of an access control model is to allow only authorised users to access system resources in an authorised way based on the access policies. After receiving an access request, the credentials of the user requesting access are compared with access policies to determine the access decision.

However, access policies are not perfect. Hence, if an unauthorised user managed to override access policies, there is no way to detect or prevent malicious actions during access sessions. This issue exists in both traditional and dynamic access control models in which, if an attacker managed to deceive the access control manager and was granted access, there is no way to protect system resources. Therefore, there is a need to implement access monitoring to detect and prevent abnormal activities throughout access sessions.

One of the efficient solutions to provide fast and efficient access monitoring is smart contracts. Smart contracts refer to computer protocols that digitally facilitate the verification, control, or execution of an agreement. Smart contracts provide an accurate, secure, safe, and fast way to execute and manage processes/transactions. Utilising smart contracts for tracking and monitoring access sessions will allow utilising security features of blockchain technology which can provide an efficient and fast approach for detecting and preventing malicious activities on time.

Research objectives

• To develop a fast and effective access monitoring system to track and monitor access sessions to detect and prevent malicious actions using smart contracts

Research questions

This project is supported by endpoint protection specialist CrowdStrike . The PhD candidate will work closely with the research team in CrowdStrike.

• How to utilise smart contracts for implementing access monitoring to track and monitor access sessions after granting access?
• What are the criteria to identify/classify malicious activities in the system to be monitored?
• Do smart contracts work better with specific static or dynamic access control models?
• How can smart contracts be built and integrated with existing centralised systems?

Research centre

Data Science Research Centre

Entry requirements

For our PhD programmes, we normally expect you to have a first-class or upper-second (2:1) honours degree and preferably a masters degree from a UK university or qualifications that we consider to be equivalent.

International students may also need to meet our English language requirements. Find out more about our entry requirements for international students.

How to apply

Please contact Dr Abid Khan in the first instance for more information on how to apply.

The University has four starting points each year for MPhil/PhD programmes (September, January, March and June). Applications should be made at least three months before you would want to start your programme. Please note that, if you require a visa, additional time will be required.

Funding

Self-funded by student. There is a range of options that may be available to you to help you fund your PhD.

Supervisors

Dr Ovidiu Bagdasar is the Erasmus Coordinator for Mathematics and Computing. His research in Discrete Mathematics, Optimisation, and Maths Anxiety has been disseminated in numerous international journals and conferences. Ovidiu also works with colleagues and technology companies to improve standards in mathematics education within the University, and beyond.

We are looking for ambitious and talented students to join our dedicated research community where we will support you on your own research journey through to graduation. These pages give you all the i...

If you decide to design your own PhD project, you will need to write a research proposal that will form part of your application. Before applying, you should review the critical literature in your sub...

Find out what the tuition fees are for PhDs and MPhils at Derby, as well as what sources of funding there are to help pay for them.

Research areas