BCTD-ICS: A Blockchain-Aided Framework for Trusted Detection of Industrial Control System Components

Abstract

The cybersecurity threats targeting industrial control systems (ICS) are evolving with increasing sophistication. Addressing the detection blind spots in existing source code analysis techniques, this study reveals a dual security paradox arising from code sensitivity: privacy leakage risks caused by decompilation techniques and integrity verification deficiencies in reverse engineering. This paper investigates three critical challenges: (1) What are the component flow process and detection elements of ICS component source code? (2) How can high-performance and reliable tracing and traceability be provided for ICS component source code exceptions and routine detection? (3) How can privacy enhancement and trusted detection of ICS component source code with high sensitivity be achieved? This paper proposes a blockchain-integrated trusted detection framework for ICS (BCTD-ICS), delivering groundbreaking solutions: (1) Establishing a lifecycle circulation model that systematically maps component types, stakeholders, and detection parameters; (2) Developing a tripartite collaborative architecture (Blockchain-Identification Resolution Zero-knowledge proofs (ZKPs)), featuring a traceability mechanism with trusted identification codes (resolution efficiency: 40ms/105 queries) to eliminate decompilation-induced privacy risks; (3) Creating an industrial-oriented privacy enhancement system utilizing DBSCAN clustering for intelligent sampling (26% compression rate on BCN3D Moveo) and optimizing ZK-SNARK protocols through Shamir’s Secret Sharing, establishing a backdoor-resistant distributed parameter generation system (time delay increment < 100ms). Experimentally verified, our solution enables ICS component code detection supply-chain-wise without sensitive data leakage in real-world industries. This work establishes a novel trusted detection paradigm for ICS, advancing detection efficiency and credibility under strict privacy preservation requirements, meeting Industry 4.0 security demands.