Risk Framework for Bitcoin Custody Operation with the Revault Protocol

Analyzing the Threats to Blockchain-Based Self-Sovereign Identities by Conducting a Literature Survey

“…Shoulder surfing: Shoulder surfing describes the act of watching the victim type and using this information for ill-purposes. Swambo and Poinsot [83] outline the compromise of the key backup by observing. However, further variants, such as watching the authentication on the smartphone or wallet, are possible.…”

“…Hence, proper key management and algorithms are important [41,47,49]. Park et al [43] and Swambo and Poinsot [83] point out the risk of reconstructing the private key. AlFaw et al [67] state that digital signatures, hash function, mining malware, software flows, and user address vulnerabilities might be an issue, whereas Dabrowski et al [40] and Swambo and Poinsot [83] outline firmware, client software, and human-in-the-middle (MITM) of hardware wallets.…”

“…Park et al [43] and Swambo and Poinsot [83] point out the risk of reconstructing the private key. AlFaw et al [67] state that digital signatures, hash function, mining malware, software flows, and user address vulnerabilities might be an issue, whereas Dabrowski et al [40] and Swambo and Poinsot [83] outline firmware, client software, and human-in-the-middle (MITM) of hardware wallets. Spoofing at the user agent layer refers to the illegitimate execution of identity actions, such as disclosing credentials or authorization.…”

“…Fröhlich et al [131] describe the issues of not updating wallets and not following laws. Swambo end Poinsot [83] outline access to the location of servers and the compromise of servers by software or human vulnerability. Yan et al [56] generally point out that third parties can be adversaries.…”