QuantumBlockVault: Post-Quantum Resistant Blockchain for Securing Business-critical Data

QuantumBlockVault：用于保护关键业务数据的后量子区块链

• 批准号: 10078089
• 金额: $ 2.01万
• 依托单位: UNIVERSITY OF THE WEST OF SCOTLAND
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10078089
• 关键词: QuantumBlockVault; Post; Quantum; Resistant; Blockchain

Threat from various cyber-attacks is increasing in terms of number and annual loss. As per IBM's data breach report of 2022, the global average total cost of a data breach was $4.35M whereas the average cost of a ransomware attack was $4.54M. A sector which is hit hard by a data breach is healthcare with an average total cost of $10.10M. According to CSO Online report, In September 2022, Instagram was fined $403M by Ireland's Data Protection Commissioner (DPC) for violating children's privacy under terms of GDPR. There are threats of data theft, data loss, ransomware, and noncompliance with GDPR for companies whether small/medium/large-scale businesses. MIT Technology Review report suggests that quantum computers could break 2048-bit RSA encryption in 8 hours and this technology will catch up with the current encryption standard much sooner than expected. The companies with business-critical data which will still have value in the next 20 years are worried because of the concept of "Harvest Now, Decrypt Later (HNDL). In this project, we aim to provide a secure vault where companies can store business-critical data in encrypted form which will be safe against various cyber-attacks including futuristic post-quantum attacks.

各种网络攻击的威胁在数量和年度损失方面都在增加。根据IBM 2022年的数据泄露报告，数据泄露的全球平均总成本为435万美元，而勒索软件攻击的平均成本为454万美元。受到数据泄露严重打击的行业是医疗保健，平均总成本为1010万美元。据CSO Online报道，2022年9月，Instagram因违反GDPR条款侵犯儿童隐私，被爱尔兰数据保护专员（DPC）罚款4.03亿美元。无论是小型/中型/大型企业，都存在数据盗窃，数据丢失，勒索软件和不遵守GDPR的威胁。麻省理工学院技术评论报告表明，量子计算机可以在8小时内破解2048位RSA加密，这项技术将比预期更快地赶上当前的加密标准。拥有关键业务数据的公司在未来20年内仍然有价值，因为“现在收获，以后解密（HNDL）”的概念而感到担忧。在这个项目中，我们的目标是提供一个安全的保险库，公司可以以加密的形式存储业务关键数据，这将是安全的，可以抵御各种网络攻击，包括未来的后量子攻击。