ITU-T X.805 - Security Architecture for End-to-End Communications X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection: ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM)

Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity keeps data correct and accurate. Data are shielded from being altered, deleted, created or copied without authorization, and any such unauthorized activity is made detectable. Data Integrity covers both data at rest and data in transit ensuring the data remains accurate + complete + and unaltered except by authorized parties using authorized means. (1) Integrity Categories: (a) Connection-Oriented Integrity - integrity verified per connection + sequence numbers prevent replay + reorder; (b) Connectionless Integrity - integrity per message + each independently verifiable; (c) Selective Field Integrity - per field rather than per message; (d) Recovery vs Detection-Only - some mechanisms detect + others can restore via redundancy. (2) Cryptographic Integrity Mechanisms: (a) Hash Functions (SHA-256 + SHA-384 + SHA-512 + SHA-3 family per FIPS 202 + BLAKE2/3 + MD5 + SHA-1 DEPRECATED for security but legacy uses persist); (b) Message Authentication Codes (HMAC + KMAC + AES-CMAC + GMAC + Poly1305); (c) Authenticated Encryption with Associated Data (AEAD) - AES-GCM + AES-CCM + ChaCha20-Poly1305 (combined confidentiality + integrity); (d) Digital Signatures (RSA-PSS + ECDSA + EdDSA + ML-DSA + SLH-DSA + Falcon); (e) Merkle Trees - hash trees for efficient verification of large data + Bitcoin Block Header + Ethereum State + Certificate Transparency CT logs + Git commit chains; (f) Hash chains + Blockchain DLT immutable; (g) Erasure Coding + Reed-Solomon for integrity + availability; (h) Replication + Distributed Consensus (Paxos + Raft + PBFT). (3) Integrity at File System + Storage Level: (a) Filesystem Integrity (Btrfs checksumming + ZFS data scrubbing + ReFS); (b) RAID + erasure-coded storage; (c) WORM Write-Once-Read-Many storage; (d) Object Storage with Object Lock + S3 Object Lock + Azure Immutable Blob; (e) Backup integrity (immutable backups + ransomware-resistant + air-gapped); (f) HSM + TPM Trusted Platform Module attestation; (g) Secure Boot + Measured Boot. (4) File Integrity Monitoring (FIM): (a) FIM tools on hosts and containers; (b) baseline hashing + change detection + alerting; (c) PCI DSS Req 11.5 FIM required; (d) HIPAA Security Rule Audit; (e) SOX IT controls; (f) NIST SP 800-53 SI-7 Software Firmware and Information Integrity. (5) Integrity in Communications: (a) TLS 1.3 record integrity via AEAD; (b) IPSec AH/ESP integrity; (c) DKIM email integrity; (d) DNSSEC DNS record signing; (e) SBOM Software Bill of Materials integrity for supply chain (SPDX + CycloneDX); (f) Code Signing + Authenticode + jarsigner + macOS notarisation. (6) Integrity per X.805 Layers: (a) Infrastructure - firmware + boot integrity + Secure Boot + Measured Boot + Remote Attestation; (b) Services - service-layer message integrity + AAA accounting record integrity + CDR integrity; (c) Applications - application data integrity + database constraints + API contract integrity. (7) Integrity per X.805 Planes: (a) Management - config integrity + signed configuration + change audit; (b) Control - signalling integrity + signed routing updates (BGPSEC + DNSSEC) + signed Diameter; (c) End-User - user data integrity + transaction integrity + e-banking transaction signing. (8) Threats Mitigated per X.805 Table 1: (a) Corruption (Y) - direct mitigation; (b) Removal (Y) - via redundancy + replication. (9) Modern Evolution: (a) Supply Chain Integrity - SLSA Supply-chain Levels for Software Artifacts + in-toto + Sigstore + Cosign + SLSA Provenance + SBOM (NIST EO 14028); (b) Container Image signing (Notary v2 + Cosign + Sigstore); (c) Code Signing for ML Models (Hugging Face Safetensors + Model cards); (d) Blockchain Integrity (Bitcoin + Ethereum + Hyperledger Fabric); (e) Distributed Ledger for audit trails; (f) Continuous Integrity Monitoring (CIM); (g) Post-Quantum Hash + Signature Migration. (10) Standards: (a) ISO/IEC 27001 A.12.2 + A.13.2.1 / A.5.34 A.8.13 A.8.7 (2022); (b) ISO/IEC 27040 Storage Security; (c) ITU-T X.815 Integrity Framework; (d) NIST SP 800-53 SI family + SI-7 SFI Integrity + SI-15 Tamper Resistance; (e) NIST SP 800-160 Vol 1 Trustworthy Secure Systems; (f) NIST SP 800-161 Supply Chain Risk Management; (g) FIPS 140-3 Cryptographic Module Validation; (h) FIPS 202 SHA-3; (i) PCI DSS Req 11.5; (j) HIPAA Security Rule. Coordinates with X.805 Layer 1/2/3 + Plane 1/2/3 + Threats Corruption/Removal + Security Dimension 1 Access Control + Security Dimension 3 Non-Repudiation + ITU-T X.815 Integrity Framework + ISO/IEC 27001 + 27040 + NIST SP 800-53 SI + 800-160 + 800-161 SCRM + FIPS 140-3 + 202 + IETF TLS 1.3 + IPSec + DNSSEC + DKIM + SLSA + in-toto + Sigstore + SBOM + Secure Boot + TPM. ITU-T X.805 Security Dimension 6 Data Integrity applies.