Data Security Overview

Principles

Definition

Data security is a research field and academic concept fundamentally concerned with the protection of digital information across its entire lifecycle. It rigorously investigates the theoretical principles, technical mechanisms, and organizational policies necessary to ensure the confidentiality, integrity, and availability of data, alongside the analysis of vulnerabilities, threats, and risk management strategies. This domain is critical for developing robust defenses against unauthorized access, use, disclosure, disruption, modification, or destruction of information assets in various computing environments.

Ontological type

Core Mechanisms

Risk Assessment

Threat Landscape

Key developments

Key Figures

Provable Cryptographic Foundations era

Ronald L. Rivest [1] is closely associated with the Massachusetts Institute of Technology [3] and Stanford University [4] in this era. Rivest [1] co-authored the paper A method for obtaining digital signatures and public-key cryptosystems [8] (1978) and the paper A method for obtaining digital signatures and public-key cryptosystems [7] (1983), providing the practical blueprint for public-key cryptography and digital signatures that underpinned the era's formal security program. Robert J. McEliece [2] is associated with the California Institute of Technology [5] and the University of Illinois Urbana-Champaign [6] in this era. McEliece [2] proposed the Public-Key Cryptosystem Based On Algebraic Coding Theory [9] (1978), an alternative PKC construction that broadened the cryptographic landscape and enriched the era's study of security assumptions.

Modular Expressive Cryptography era

Brent Waters [1] is a leading figure in modular security and expressive cryptography during this era, with affiliations at Stanford University [3] and the Weizmann Institute of Science [4]. His key contributions include the Attribute-based encryption for fine-grained access control of encrypted data [7], Ciphertext-Policy Attribute-Based Encryption [8], and Secure attribute-based systems [9], which introduced ABEs and CP-ABE and established a foundation for fine-grained, policy-driven data access in secure modular frameworks. Amit Sahai [2] is a central figure in this era with affiliations at Harvard University [5] and the Massachusetts Institute of Technology [6]. These contributions include Attribute-based encryption for fine-grained access control of encrypted data [7] and Ciphertext-Policy Attribute-Based Encryption [8], which Sahai co-authored with Brent Waters [1], underpinning policy-driven access control and secure data sharing in distributed and cloud settings.

Privacy-Preserving Data Processing era

Ali A. Ghorbani [1], affiliated with Nanyang Technological University [3] and University of Hong Kong [4], is a notable figure in privacy-preserving data processing during this era. His key contribution in this era is the 2018 paper Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization [7], which generated a new intrusion detection dataset and characterized intrusion traffic, enabling standardized evaluation and benchmarking for privacy-focused analytics. Vinod Vaikuntanathan [2], affiliated with Massachusetts Institute of Technology [5] and Weizmann Institute of Science [6], has played a leading role in advancing practical homomorphic encryption. His work on (Leveled) fully homomorphic encryption without bootstrapping [8] and Efficient Fully Homomorphic Encryption from (Standard) LWE [9] drove the practical feasibility of private computation on untrusted platforms, a cornerstone for privacy-preserving data processing in cloud and IoT contexts.