Continuous Cybersecurity Management Through Blockchain Technology

Abstract

Traditional management practices applied to the cybersecurity realm are causing significant delays to the product release cycle for major organizations and government agencies. These delays are often seen as a necessary part of the security landscape to ensure appropriate approvals, audits, and risks are addressed prior to fielding software. However, the exact opposite outcome has been observed; delayed releases decrease overall security and functionality. This paper presents an alternative approval and review process using blockchain technology that complements agile development and continuous delivery paradigms. An example implementation is provided to demonstrate the behavior of the proposed system under hypothetical auditing and threat assessment scenarios.