Defining and Applying Information Security Goals for Blockchain Technology

Abstract

This article defines and exemplifies the primary information security goals when organisations use, operate or develop blockchain technology solutions. The proposed goals extend the well-known CIA-triad Confidentiality, integrity, Availability) to account for the increased complexity in securing software solutions and organisations. The understanding of these goals can help information security practitioners design and implement more effective security controls for protecting blockchain solutions and organisations. Non-security professionals in the blockchain field can also benefit from the concepts in this article, as security is a core component in all blockchains.