AC-Devchain: An Efficient Context-Aware Access Control in Devsecops Using Blockchain

This paper introduces AC-DevChain, a blockchain-based system integrated with IPFS and smart contracts to establish a secure, efficient, and scalable filesharing framework for distributed software environments, particularly within the DevSecOps model. In this context, access control policies for development, security, and operations teams present complex and varied requirements to support data access and sharing effectively. AC-DevChain addresses these challenges by incorporating a hybrid RBAC-ABAC model, enabling dynamic and context-aware access control across diverse and geographically dispersed teams. The system leverages decentralized storage via IPFS, optimizing performance through unique Content Identifiers (CIDs) and local caching mechanisms, while reducing blockchain overhead through optimized on-chain/offchain operations. By unifying policy enforcement, ACDevChain eliminates redundancy, streamlines access validation, and achieves superior performance over traditional systems, as evidenced by comprehensive experiments under varying user loads.