GDPR-Compliant Data Breach Detection: Leveraging Semantic Web and Blockchain

Insider attacks are becoming common and have a significant financial impact on organizations. Insider threats come from within the targeted organization, and insider attacks are carried out by users who have been granted access to the target organization’s network, apps, or databases. An attacker with administrative capabilities can edit logs and login records to remove traces of the attack, making insider attacks difficult to detect. Such data breaches may severely negatively influence the life of the Data Owner. Creating a mechanism for quickly identifying data breaches is still essential and difficult. The General Data Protection Regulation (GDPR) has established processes and guidelines to address data privacy issues. Due to this, when a data breach occurs, the Data Controller is required under the GDPR implementation to notify the Data Protection Authority. To address these problems, this article proposes a GDPR-compliant data breach detection system with a severity assessment mechanism using the semantic web and blockchain technology. The suggested method can generate alert notifications for each data breach. Consequently, with the help of the severity assessment mechanism, the proposed model conducts a breach assessment to indicate the data breach’s severity level.