Publication Details

The Security Reference Architecture for Blockchains: Toward a Standardized Model for Studying Vulnerabilities, Threats, and Defenses

HOMOLIAK, I.; VENUGOPALAN, S.; REIJSBERGEN, D.; HUM, Q.; SCHUMI, R.; SZALACHOWSKI, P. The Security Reference Architecture for Blockchains: Toward a Standardized Model for Studying Vulnerabilities, Threats, and Defenses. IEEE COMMUN SURV TUT, 2021, vol. 23, no. 1, p. 341-390. ISSN: 1553-877X.
Czech title
Bezpečnostní referenční architektura pro blockchainy: Směrem ke standardizovanému modelu pro studium zranitelností, hrozeb a obrany
Type
journal article
Language
English
Authors
Homoliak Ivan, doc. Ing., Ph.D. (DITS)
VENUGOPALAN, S.
REIJSBERGEN, D.
HUM, Q.
SCHUMI, R.
Szalachowski Pawel, Dr.
URL
Keywords

Reference architecture, blockchains, distributed ledgers, security, privacy,
vulnerabilities, threats, ISO/IEC 15408

Abstract

Blockchains are distributed systems, in which security is a critical factor for
their success. However, despite their increasing popularity and adoption, there
is a lack of standardized models that study blockchain-related security threats.
To fill this gap, the main focus of our work is to systematize and extend the
knowledge about the security and privacy aspects of blockchains and contribute to
the standardization of this domain. We propose the security reference
architecture (SRA) for blockchains, which adopts a stacked model (similar to the
ISO/OSI) describing the nature and hierarchy of various security and privacy
aspects. The SRA contains four layers: (1) the network layer, (2) the consensus
layer, (3) the replicated state machine layer, and (4) the application layer. At
each of these layers, we identify known security threats, their origin, and
countermeasures, while we also analyze several cross-layer dependencies. Next, to
enable better reasoning about security aspects of blockchains by the
practitioners, we propose a blockchain-specific version of the threat-risk
assessment standard ISO/IEC 15408 by embedding the stacked model into this
standard. Finally, we provide designers of blockchain platforms and applications
with a design methodology following the model of SRA and its hierarchy.

Published
2021
Pages
341–390
Journal
IEEE COMMUN SURV TUT, vol. 23, no. 1, ISSN 1553-877X
DOI
10.1109/COMST.2020.3033665
UT WoS
000631089200014
EID Scopus
2-s2.0-85096142287
BibTeX 
@article{BUT168173,
  author="HOMOLIAK, I. and VENUGOPALAN, S. and REIJSBERGEN, D. and HUM, Q. and SCHUMI, R. and SZALACHOWSKI, P.",
  title="The Security Reference Architecture for Blockchains: Toward a Standardized Model for Studying Vulnerabilities, Threats, and Defenses",
  journal="IEEE COMMUN SURV TUT",
  year="2021",
  volume="23",
  number="1",
  pages="341--390",
  doi="10.1109/COMST.2020.3033665",
  issn="1553-877X",
  url="https://doi.org/10.1109/COMST.2020.3033665"
}
Back to top