The digital transformation is challenging various areas of our everyday lives. Central aspects of our digital identities are our knowledge and experience, asserted by certificates, references and credentials. While digital credentials have primarily started to be used in the e-government and health sectors, acceptance is more and more transferring to the education sector. Within the area of digital credentials, a multitude of different projects and initiatives exist which are hard to follow and compare. Some researchers have attempted to perform systematic literature reviews. However, the scope of the review was often limited. Therefore, we create a conceptual framework to model the requirements of a digital education credential system by following both a conceptual-to-empirical approach and an empirical-to-conceptual approach. We perform an extensive literature review, focusing on identifying needs articulated in the relevant literature. We demonstrate the applicability and usability of the framework by developing a heatmap of requirements representing the current literature landscape. In a second step, we utilised the framework to interview subject matter experts and let them prioritise requirements for a digital education credential system. By comparing the heatmap results with the prioritisation of experts, we identified requirements, which are rarely found in the literature but rated as necessary by experts—making it most likely that they are typically overlooked when a new system is designed. We identified necessary, desirable and overlooked requirements and gave an indicator for prioritisation in our framework.

The current Self-Sovereign Identity (SSI) ecosystem is rapidly changing and ill-defined. Manifold actors, projects, and initiatives produce different SSI solutions, frameworks, protocols, and distributed ledgers. Even though some patterns exist among SSI ecosystem members, no elaborate systematization has been made. This paper conducts a systematic gray literature review to structure the SSI ecosystem. Specifically, we derive a four-dimensional taxonomy that portrays members of the SSI ecosystem. Then, we classify the ecosystem members into eight archetypes. The goals are to allow researchers to describe SSI ecosystem members, help new and existing members locate themselves within the SSI ecosystem, and provide an overview of members’ functionalities. We find that SSI ecosystem members either govern the SSI ecosystem and/or networks, implement SSI offerings, or support governing and/or implementing members. The study suggests that, as the SSI ecosystem grows, the number of governing members will grow slower than the number of implementing and supporting members.

The Self-Sovereign Identity (SSI) paradigm postulates global unique identities that are controlled by the user. To achieve a widespread applicability, the emphasized interoperability principle supports the proclaimed ambition. Furthermore, identity portability enables the transfer of the identity to another SSI solution. These axioms gain additional momentum due to the development of numerous implementations. In this paper, we examine interoperability and portability concepts for SSI. Initially, we define these principles regarding the blockchain-based SSI model. Subsequently, we outline assessment criteria considering functional scope, governance/ trust, scalability and further characteristics. For interoperability, we evaluate the concepts of protocol and standard, broker, hub and pairing. Besides that, we assess the transformer and auxiliary solutions for portability. We can conclude that all interoperability schemes provide the maximum functional level theoretically. In contrast, portability patterns are fragmented in this regard. Nonetheless, protocol and standards can only be applied in the design phase, whereas broker, hub, pairing, transformer and auxiliary solutions enable interoperability, respectively portability post-deployment of the SSI system.

In this paper, we formulate threat detection in SIEM environments as a large-scale graph inference problem. We introduce a SIEM-based knowledge graph which models global associations among entities observed in proxy and DNS logs, enriched with related open source intelligence (OSINT) and cyber threat intelligence (CTI). Next, we propose MalRank, a graph-based inference algorithm designed to infer a node maliciousness score based on its associations to other entities presented in the knowledge graph, e.g., shared IP ranges or name servers.

The self-sovereign identity management model emerged with the rise of blockchain technology. This paradigm focuses on user-centricity and strives to place the user in full control of the digital identity. Numerous implementations embrace the self-sovereign identity concept, leading to a fragmented landscape of solutions. At the same time, traditional identity and access management protocols are largely disregarded and facilities to issue verifiable claims as attributes are not available. Therefore, service providers barely adopt these solutions. We propose a component-based architecture for integrating self-sovereign identity solutions into web applications to foster their adoption by service providers. Furthermore, we outline a sample implementation as a gateway that enables uPort and Jolocom for authentication, via the OpenID Connect protocol, as well as the retrieval of email address attestations for these solutions.