IJDAR 2019
DOI: 10.4192/1577-8517-v19_5
|View full text |Cite
|
Sign up to set email alerts
|

A Cybersecurity Control Framework for Blockchain Ecosystems

Abstract: This paper proposes a cybersecurity control framework for blockchain ecosystems, drawing from risks identified in the practitioner and academic literature. The framework identifies thirteen risks for blockchain implementations, ten common to other information systems and three risks specific to blockchains: centralization of computing power, transaction malleability, and flawed or malicious smart contracts. It also proposes controls to mitigate the risks identified; some were identified in the literature and s… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1

Citation Types

0
4
0

Year Published

2020
2020
2024
2024

Publication Types

Select...
6

Relationship

0
6

Authors

Journals

citations
Cited by 6 publications
(5 citation statements)
references
References 18 publications
0
4
0
Order By: Relevance
“…The decentralised and transparent nature of Blockchain introduces unique vulnerabilities that require advanced security measures (Kushwaha et al, 2022). Furthermore, the lack of a common framework for developing and implementing security management practices for Blockchain poses challenges in managing cybersecurity risks (Canelon et al, 2019). The absence of a protocol for documenting and reporting incidents hinders the ability to learn from past mistakes and improve security practices.…”
Section: Technical Challengesmentioning
confidence: 99%
“…The decentralised and transparent nature of Blockchain introduces unique vulnerabilities that require advanced security measures (Kushwaha et al, 2022). Furthermore, the lack of a common framework for developing and implementing security management practices for Blockchain poses challenges in managing cybersecurity risks (Canelon et al, 2019). The absence of a protocol for documenting and reporting incidents hinders the ability to learn from past mistakes and improve security practices.…”
Section: Technical Challengesmentioning
confidence: 99%
“…These apps run on a custom-built blockchain, an enormously powerful shared global infrastructure that can move value around and represent the ownership of property” (Kaal and Calcaterra, 2017, p. 115). Canelòn et al (2019, p. 123) argue that “a nascent industry satisfies this need by offering to the audit of smart contract code where one or more auditors evaluate the code for vulnerabilities before its insertion into a blockchain”.…”
Section: Insights and Critique Of Findings Through Analysing The Datasetmentioning
confidence: 99%
“…Moreover, there is the possibility to automate some external auditing functions over the blockchain to improve audit quality and narrow the expectation gap between auditors, financial statement users and regulatory bodies (Rozario and Vasarhelyi, 2018). Some authors call for the appearance of a new brand of auditor that can offer attestation services for independent evaluations of blockchain controls (Canelón et al , 2019; Sheldon, 2019).…”
Section: Key Research Topics: Focus and Critiquementioning
confidence: 99%
“…This raises sustainability questions and may not be an issue that gets resolved until renewable energy accounts for most of our energy production (Coyne and McMickle, 2017). Three further risks are often raised, each surrounding changing business processes (Canelón et al , 2019; Coyne and McMickle, 2017; Kokina et al , 2017). The first relates to the centralisation of computing power, also called the “51% attack risk”, which can happen when most of the computing power in a blockchain's network is centralised.…”
Section: Key Research Topics: Focus and Critiquementioning
confidence: 99%