Framework for advance persistent threats resilience with blockchain-enhanced intrusion detection response

Abstract

Due to the vast development of Advanced Persistent Threats (APTs), that aims on the infiltration of highly prospects organizations and governmental sectors. It was researched that using Blockchain technology will increase the possibility of an appropriate approach behavior to add with IDR (Intrusion Detection Response) Blockchain-Enhanceed technology maintain phenomenal features allowing for easier forensic analysis, as well as a real-time response and many others. Threats will be shared within the infrastructure in a centralized fashion to appoint each intrusion with an appropriate response. The ideology of having an enhance technology, negates the possibility of tampering, along with persistency in a comprehensive reaction against current and future threats. This research will create a higher aim force with a guarantee of a zero fail theoretically, as the usage of blockchain will get involved in the various type of intruders once found. The occupation of threat aim to get into the DMZ while maintaining a full hideout, defending itself from IDR by intercepting traffic from it. Therefore, a proper constructed information block (blockchain) shall maintain this data to avoid its break-ability due to the prestine behaviour of Blockchain-technology within transfers. The features that Ethereum holds as a blockchain technology will allow Intrusion Detectors traffic forwarded without an affect on Confidentiality, Integrity and Availability. The details within Cryptocurrencies such as bitcoin and Ethereum. In the case of this research Ethereum shall be in our use case as its functionality with smart contract to be used as a response shall play a valid role with respect to IDR. The paper will provide extensive theoretical details that shall be implemented using ``Solidity'' the programming language used by Ethereum creating a solid detailed if-then situations to be created by an AI method and set of proportionate responses. The responses will be accumulated continuously within the blockchain being transfer from and within the blocks to ensure CIA (confidentiality, integrity and availability). This shall solve the issues of communication from and to a non-comprehensive yet continuously patched IDR with the set of responses as all will happen without human interference at the network.