Blockchain Implementation in the Development of a Zero Trust-Based Cybersecurity Framework at the Indonesian National Data Center

Rizaldy Khair; Hamidah Azzahrah S Lubis; Vickri Febrian

doi:10.30865/json.v7i1.8932

Authors

Rizaldy Khair Universitas Muhammadiyah Sumatera Utara https://orcid.org/0000-0002-9506-5848
Hamidah Azzahrah S Lubis Universitas Muhammadiyah Sumatera Utara
Vickri Febrian Universitas Muhammadiyah Sumatera Utara

DOI:

https://doi.org/10.30865/json.v7i1.8932

Keywords:

Zero Trust, Blockchain, National Data Center, Cybersecurity, Smart Contract, Hyperledger

Abstract

Indonesia's National Data Center (PDN) has a strategic role in the country's digital infrastructure, but it is a potential target for cyberattacks. Conventional security models have proven inadequate in dealing with the complexity of modern threats, so a Zero Trust Architecture (ZTA) approach is necessary. This research aims to develop a Zero Trust security framework that is integrated with blockchain technology to improve the efficiency and resilience of PDN systems. The research methods include literature study, identification of PDN security needs, framework design, prototype development using Hyperledger Fabric, and testing and evaluation in a simulation environment. The framework built consists of blockchain-based identity verification, minimum access control (least privilege), and blockchain-based activity monitoring and logging. Provisional results show that the framework successfully rejects 98% of simulated internal attacks, reduces the success of unauthorized access by 80%, and reduces the success of phishing attacks from 25% to 5%. A survey of administrators showed that 90% said security improvements and 85% said the system remained user-friendly. While providing significant improvements in security and auditability, this framework creates an additional latency of 100–150 ms and demands expert human resources. This research contributes to the development of a more transparent and resilient national security model through the integration of blockchain and Zero Trust principles.

References

U. B. Chaudhry and A. K. M. Hydros, “Zero-trust-based security model against data breaches in the banking sector: A blockchain consensus algorithm,” IET Blockchain, vol. 3, no. 2, 2023, doi: 10.1049/blc2.12028.

C. Daah, A. Qureshi, I. Awan, and S. Konur, “Enhancing Zero Trust Models in the Financial Industry through Blockchain Integration: A Proposed Framework,” Electronics (Switzerland), vol. 13, no. 5, 2024, doi: 10.3390/electronics13050865.

P. F. Katina, C. B. Keating, J. A. Sisti, and A. V. Gheorghe, “Blockchain governance,” International Journal of Critical Infrastructures, vol. 15, no. 2, 2019, doi: 10.1504/IJCIS.2019.098835.

R. Jeet, S. S. Kang, S. M. Safiul Hoque, and B. N. Dugbakie, “Secure Model for IoT Healthcare System under Encrypted Blockchain Framework,” Security and Communication Networks, vol. 2022, 2022, doi: 10.1155/2022/3940849.

A. S. Waskita and H. Sidik, “Diplomasi Siber Indonesia dalam Penyelenggaraan Capacity Building on National Cybersecurity Strategy Workshop 2019,” Padjadjaran Journal of International Relations, vol. 5, no. 2, 2023, doi: 10.24198/padjir.v5i2.41337.

S. M. Awan, M. A. Azad, J. Arshad, U. Waheed, and T. Sharif, “A Blockchain-Inspired Attribute-Based Zero-Trust Access Control Model for IoT,” Information (Switzerland), vol. 14, no. 2, 2023, doi: 10.3390/info14020129.

B. Ali, M. A. Gregory, and S. Li, “Trust-aware task load balancing in multi-access edge computing based on blockchain and a zero trust security capability framework,” Transactions on Emerging Telecommunications Technologies, vol. 34, no. 12, 2023, doi: 10.1002/ett.4845.

S. Dhar and I. Bose, “Securing IoT Devices Using Zero Trust and Blockchain,” Journal of Organizational Computing and Electronic Commerce, vol. 31, no. 1, 2021, doi: 10.1080/10919392.2020.1831870.

A. Jaradat, O. Ali, and A. AlAhmad, “Blockchain Technology: A Fundamental Overview,” in Environmental Footprints and Eco-Design of Products and Processes, 2022. doi: 10.1007/978-981-16-6301-7_1.

S. Das, S. Namasudra, and V. H. C. de Albuquerque, “Blockchain technology: fundamentals, applications, and challenges,” in Blockchain Technology in e-Healthcare Management, 2023. doi: 10.1049/pbhe048e_ch1.

M. Iansiti and K. R. Lakhani, “The truth about blockchain,” 2017.

P. M. Chanal and M. S. Kakkasageri, “Blockchain-based data integrity framework for Internet of Things,” Int J Inf Secur, vol. 23, no. 1, 2024, doi: 10.1007/s10207-023-00719-6.

M. Alles and G. L. Gray, “‘The first mile problem’: Deriving an endogenous demand for auditing in blockchain-based business processes,” International Journal of Accounting Information Systems, vol. 38, 2020, doi: 10.1016/j.accinf.2020.100465.

S. Perera, A. A. Hijazi, G. T. Weerasuriya, S. Nanayakkara, and M. N. N. Rodrigo, “Blockchain-Based Trusted Property Transactions in the Built Environment: Development of an Incubation-Ready Prototype,” Buildings, vol. 11, no. 11, 2021, doi: 10.3390/BUILDINGS11110560.

J. Angelis and E. Ribeiro da Silva, “Blockchain adoption: A value driver perspective,” Bus Horiz, vol. 62, no. 3, 2019, doi: 10.1016/j.bushor.2018.12.001.

M. J. Islami, “TANTANGAN DALAM IMPLEMENTASI STRATEGI KEAMANAN SIBER NASIONAL INDONESIA DITINJAU DARI PENILAIAN GLOBAL CYBERSECURITY INDEX,” Masyarakat Telematika Dan Informasi?: Jurnal Penelitian Teknologi Informasi dan Komunikasi, vol. 8, no. 2, 2018, doi: 10.17933/mti.v8i2.108.

R. Xu, C. Li, and J. Joshi, “Blockchain-Based Transparency Framework for Privacy Preserving Third-Party Services,” IEEE Trans Dependable Secure Comput, vol. 20, no. 3, 2023, doi: 10.1109/TDSC.2022.3179698.

R. Kumar, P. Kumar, R. Tripathi, G. P. Gupta, N. Kumar, and M. M. Hassan, “A Privacy-Preserving-Based Secure Framework Using Blockchain-Enabled Deep-Learning in Cooperative Intelligent Transport System,” IEEE Transactions on Intelligent Transportation Systems, vol. 23, no. 9, 2022, doi: 10.1109/TITS.2021.3098636.

M. Rahmah;, K. Almadany;, and R. Khair, “Implementation of Blockchain Technology in the Development of a Mobile-Based E-Career System,” Indonesian Journal of Computer Science, vol. 15, no. 5, pp. 7328–7338, 2024, [Online]. Available: http://ijcs.stmikindonesia.ac.id/ijcs/index.php/ijcs/article/view/3135

D. Appelbaum and R. A. Nehmer, “Auditing cloud-based blockchain accounting systems,” Journal of Information Systems, vol. 34, no. 2, 2020, doi: 10.2308/isys-52660.

E. Guustaaf, U. Rahardja, Q. Aini, N. A. Santoso, and N. P. L. Santoso, “Desain Kerangka Blockchain terhadap pendidikan: A Survey,” CESS (Journal of Computer Engineering, System and Science), vol. 6, no. 2, p. 236, 2021, doi: 10.24114/cess.v6i2.25099.

J. M. Kapadia, “Blockchain Technology: Application in the Financial Industry,” Scholedge International Journal of Management & Development ISSN 2394-3378, vol. 7, no. 8, 2021, doi: 10.19085/sijmd070801.

M.Fahmideh, B. Abedin, and J.Shen, “Towards an integrated framework for developing blockchain systems,” Polym Test, p. 106972, 2023, doi: 10.1016/j.dss.2024.114181.