期刊
IEEE ACCESS
卷 9, 期 -, 页码 76153-76177出版社
IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC
DOI: 10.1109/ACCESS.2021.3081998
关键词
Blockchain; Security; Peer-to-peer computing; Bitcoin; Smart contracts; Business; Risk management; Blockchain; blockchain systems; sybil attack; double-spending; security risk management; blockchain emerging challenges
资金
- ERASMUS+ sectoral alliance program on A Blueprint for sectoral cooperation on blockchain skill and development (CHAISE) [621646-EPP-1-2020-1-FR-EPPKA2-SSA-B]
This paper introduces a security risk management domain model and framework to explore two major security risks (Sybil and Double-spending) in blockchain systems. The framework is evaluated in Ethereum-based healthcare applications, highlighting various security and implementation challenges faced by blockchain systems. Additionally, the paper discusses permissioned blockchain systems and how they address these challenges, with a future aim to build an ontology-based blockchain security reference model.
The first step to realise the true potential of blockchain systems is to explain the associated security risks and vulnerabilities. These risks and vulnerabilities, exploited by the threat agent to affect the valuable assets and services. In this work, we use a security risk management (SRM) domain model and develop a framework to explore two security risks - Sybil and Double-spending - that are observed and considered most concerning security risks within blockchain systems. The framework illustrates the protected assets or assets to secure, the classification of threats that the attacker can trigger using Sybil attack, the identification of threats that cause Double-spending, the vulnerabilities of identified threats, and their countermeasures. We evaluated a newly built framework by exploring Sybil and Double-spending risks in Ethereum-based healthcare applications. We also recognise the various other security and implementation challenges of blockchain that hinder the acceptance of blockchain-enabled solutions. Furthermore, we discuss the permissioned blockchain systems making an appearance in industry-level enterprises and how permissioned blockchain systems control these challenges. We conclude the paper and outline the future work that aims to build an ontology-based blockchain security reference model. The results of this work could help blockchain developers, practitioners, and other associated stakeholders to communicate about Sybil and Double-spending risks, what security countermeasures should be introduced, and what security and implementation challenges are emerging in blockchain systems.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据