Blockchain Papers

Robert Bartsch

No abstract is available for this record.

Cătălina Goanță

Long before the creation of blockchain platforms, the rise of personal computing and Internet connectivity brought with it a digital, online dimension of the material world, leading to the socio-technical construct known as ‘digital identity’. After the online discussion boards and emailing lists of the early 90s, individuals started socializing via the Internet more predominantly using social networks. One specific type of platform links this online socializing and transacting to blockchain-based spaces: dark web marketplaces. Identified as second-generation cryptocommunities, dark web marketplaces deployed cryptography for the use of pseudonymous identity, for communication, but also currency. This paper explores two questions in this fascinating space: what was the role of identity on the Silk Road, and what governance lessons can be drawn from this illustration for the purpose of applying them to more recent cybercommunities such as Ethereum? The paper is structured as follows. The first part describes the Silk Road and sketches its essential characteristics. The second part looks at how individuals could become platform users on the Silk Road, by analyzing the contractual relationship between the Silk Road and an individual user based on the rights and obligations enshrined in the Silk Road Terms of Service (ToS). The third part critically reflects on arbitrariness as the main pitfall arising out of the private regulatory framework created by the Silk Road, and contributes to existing narratives surrounding the regulatory nature of code by proposing a code-as-procedure perspective for analyzing this regulatory framework. Part four concludes.

Rafael Ziolkowski, Gianluca Miscione, Gerhard Schwabe

Blockchain comes with the promise of being a disruptive technology with the potential for novel ways of interaction in a wide range of applications. Following broader application, scholarly interest in the technology is growing, though an extensive analysis of blockchain applications from a governance perspective is lacking to date. This research pays special attention to the governance of blockchain systems and illustrates decision problems in 14 blockchain systems from four application domains. Based on academic literature, semi-structured interviews with representatives from those organizations, and content analysis of grey literature, common problems in blockchain governance have been singled out and contextualized. Studying their enactment revealed their relevance to major organizational theories in what we labelled “Patrolling the borders,” “External Legitimation,” “Reduction of Discretionality,” and “Temporal Management.” The identification of these problems enriches the scarce body of knowledge on the governance of blockchain systems, resulting in a better understanding of how blockchain governance links to existing concepts and how it is enacted in practice.

Ajay K. Gogineni, S. Swayamjyoti, Devadatta Sahoo, Κ. K. Sahu · 5 authors

Vulnerability detection and safety of smart contracts are of paramount importance because of their immutable nature. Symbolic tools like OYENTE and MAIAN are typically used for vulnerability prediction in smart contracts. As these tools are computationally expensive, they are typically used to detect vulnerabilities until some predefined invocation depth. These tools require more search time as the invocation depth increases. Since the number of smart contracts is increasing exponentially, it is difficult to analyze the contracts using these traditional tools. Recently a machine learning technique called Long Short Term Memory (LSTM) has been used for binary classification, i.e., to predict whether a smart contract is vulnerable or not. This technique requires nearly constant search time as the invocation depth increases. In the present article, we have shown a multi-class classification, where we classify a smart contract in Suicidal, Prodigal, Greedy, or Normal categories. We used Average Stochastic Gradient Descent Weight-Dropped LSTM (AWD-LSTM), which is a variant of LSTM, to perform classification. We reduced the class imbalance (a large number of normal contracts as compared to other categories) by considering only the distinct opcode combination for normal contracts. We have achieved a weighted average Fbeta score of 90.0%. Hence, such techniques can be used to analyze a large number of smart contracts and help to improve the security of these contracts.

Seonghyeon Gong, Changhoon Lee

The convergence of fifth-generation (5G) communication and the Internet-of-Things (IoT) has dramatically increased the diversity and complexity of the network. This change diversifies the attacker’s attack vectors, increasing the impact and damage of cyber threats. Cyber threat intelligence (CTI) technology is a proof-based security system which responds to these advanced cyber threats proactively by analyzing and sharing security-related data. However, the performance of CTI systems can be significantly compromised by creating and disseminating improper security policies if an attacker intentionally injects malicious data into the system. In this paper, we propose a blockchain-based CTI framework that improves confidence in the source and content of the data and can quickly detect and eliminate inaccurate data for resistance to a Sybil attack. The proposed framework collects CTI by a procedure validated through smart contracts and stores information about the metainformation of data in a blockchain network. The proposed system ensures the validity and reliability of CTI data by ensuring traceability to the data source and proposes a system model that can efficiently operate and manage CTI data in compliance with the de facto standard. We present the simulation results to prove the effectiveness and Sybil-resistance of the proposed framework in terms of reliability and cost to attackers.

Mohammed Ihab, Nagy Ramadan, Hesham Ahmed

Blockchain technology has become a paradigm shift to digital transactions. It has brought massive potentials in many fields, such as financial services, energy, healthcare and Internet of Things. As often occurs with innovative technologies, it has suffered from several critical Cybersecurity threats and vulnerabilities.

Christos Karapapas, Iakovos Pittaras, Nikos Fotiou, George C. Polyzos

Decentralized systems, such as distributed ledgers and the InterPlanetary File System (IPFS), are designed to offer more open and robust services. However, they also create opportunities for illegal activities. We demonstrate how these technologies can be used to launch a ransomware as a service campaign. We show that criminals can transact with affiliates and victims without having to reveal their identity. Furthermore, by exploiting the robustness and resilience to churn of IPFS, as well as the decentralized computing capabilities of Ethereum, criminals can remain offline during most procedures, with many privacy guarantees.

Yoshiyasu Takefuji

No abstract is available for this record.

Daniel Kornitzer

As the volume and value of data continue to increase exponentially, and at previously unseen speed, cybersecurity professionals are having to rethink how they store and manage digital information. Nowhere is this more relevant than in the financial services sector, a prime target for professional cybercrime operations from organised crime through to rogue nation states. This paper, takes a closer look at two tools that chief information officers are considering turning to for combating this threat in the age of rapid data expansion — artificial intelligence (AI) and blockchain. This paper examines the characteristics of distributed ledger technology, which provides greater security than traditional data storage methods and the protocols that must be implemented to ensure that blockchain-powered data, including cryptocurrencies, remains secure. The paper also provides specific examples of regulatory bodies introducing distributed ledger technology into guidelines and the role this might play in cybercrime prevention. The paper then examines why 69 per cent of financial organisations now say that they will not be able to respond to critical cybersecurity threats without AI and why 73 per cent are testing use cases for AI in cybersecurity, including some examples of testing in action and their results.

Sinyong Choi, Kyung-Shick Choi, Yesim Sungu-Eryilmaz, Heekyung Park

The Darknet and Bitcoins have been widely utilized by those who wish to anonymously perform illegal activities in cyberspace. Restricted in many countries, gambling websites utilize Bitcoin payments that allow users to freely engage in illegal gambling activities with the absence of a formal capable guardian. Despite the urgency and limited knowledge available to law enforcement regarding this issue, few empirical studies have focused on illegal gambling websites. The current study attempts to examine the characteristics and operations of online gambling websites on both the Darknet and Surface Web, which allow Bitcoin payments. The findings suggest that both websites on the Surface Web and Darknet have similar and distinctive features that attract and encourage online users to engage in extensive illegal gambling activities and potentially other illegal activities as well. The study concludes with policy recommendations to remedy the issue of online gambling.

Sebahattin Demirkan, Irem Demirkan, Andrew McKee

This study looks into the current, and potential uses of Blockchain technology in business, specifically in Accounting and in cybersecurity. We relate Blockchain uses to current concerns within cybersecurity and accounting. We review the literature that includes topics such as Big Data in Accounting, blockchain’s use in financial security and cybersecurity, and its use in financial accounting though the use of ledger technology and also as a system of tracking financial misconduct. We also review the Department of Homeland Security plan for cybersecurity over the next few years to understand what the US Government plans because of the importance of cybersecurity development. We show that Blockchain impacts auditing in different ways that will change the profession drastically. We also find that blockchain should be effectively implemented into different aspects of cybersecurity, and accounting, such as Auditing and general accounting procedures.

Antonio López Vivar, Alberto Turégano Castedo, Ana Lucila Sandoval Orozco, Luis Javier García Villalba

Smart contracts have gained a lot of popularity in recent times as they are a very powerful tool for the development of decentralised and automatic applications in many fields without the need for intermediaries or trusted third parties. However, due to the decentralised nature of the blockchain on which they are based, a series of challenges have emerged related to vulnerabilities in their programming that, given their particularities, could have (and have already had) a very high economic impact. This article provides a holistic view of security challenges associated with smart contracts, as well as the state of the art of available public domain tools.

Prabhanjan Gururaj

Authenticating a person's identity has always been a challenge. While attempts are being made by government agencies to address this challenge, the citizens are being exposed to a new age problem of Identity management. The sharing of photocopies of identity cards in order to prove our identity is a common sight. From score-card to Aadhar-card, the details of our identity has reached many unauthorized hands during the years. In India the identity thefts accounts for 77% [1] of the fraud cases, and the threats are trending. Programs like e-Residency by Estonia[2], Bitnation using Ethereum[3] are being devised for an efficient Identity Management. Even the US Home Land Security is funding a research with an objective of “Design information security and privacy concepts on the Blockchain to support identity management capabilities that increase security and productivity while decreasing costs and security risks for the Homeland Security Enterprise (HSE).” [4] This paper will discuss the challenges specific to India around Identity Management, and the possible solution that the Distributed ledger, hashing algorithms and smart contracts can offer. The logic of hashing the personal data, and controlling the distribution of identity using public-private keys with Blockchain technology will be discussed in this paper.

Yan Wu, Fang Tao, Lu Liu, Jiayan Gu · 7 authors

Popular Blockchain-based cryptocurrencies, like Bitcoin, are increasingly being used maliciously for illegal trades. In order to trace and analyze suspected Bitcoin transactions and addresses, address clustering methods and Bitcoin flow analysis methods are gaining attention recently. However, existing methods only focus on Bitcoin addresses and flow, and neglect other important information, such as transaction structure and behavior features. In order to exploit all useful features of transactions, this paper proposes a Bitcoin transaction network analytic method for facilitating Blockchain forensic investigation based on an extended safe Petri Net. The structural features and dynamic semantics of Petri net are used in our proposed model to define the static and dynamic features of Bitcoin transactions. Nineteen features have been identified to define Bitcoin transaction patterns for analyzing and finding suspected addresses. Bitcoin gene has been embedded into the Petri net transitions to trace and analyze Bitcoin flow accurately. Finally, marginal distribution analysis of Bitcoin transaction features and data visualization techniques are used to eliminate some false positive samples further and to improve the accuracy of identifying suspected addresses. The proposed Bitcoin transaction network analytic method provides a reliable forensic investigation model along with a prototype platform which is beneficial for financial security. The efficiency of our proposed method is empirically verified based on a real-life case study analysis.

Fennie Wang, Primavera De Filippi

After introducing key concepts and definitions in the field of digital identity, this paper will investigate the benefits and drawbacks of existing identity systems on the road towards achieving self-sovereign identity. It will explore, in particular, the use of blockchain technology and biometrics as a means to ensure the “unicity” and “singularity” of identities, and the associated challenges pertaining to the security and confidentiality of personal information. The paper will then propose a model of blockchain-based self-sovereign identity based on attestations, claims, credentials and permissions, which is globally portable across the life of an individual. Such a system is not dependent on any particular government or organization for administration or legitimacy, although it might include government issued identification and biometrics as one of many indicia of identity. Such a solution based on a recorded and signed digital history of actions is a system that best approximates the fluidity and granularity of identity, enabling individuals to express only specific facets of their identity, depending on the parties with whom they wish to interact. This paper focuses on two case studies to explain how such a credentials system could work in specific contexts: (1) Kiva’s identity protocol for building credit history in Sierra Leone, and (2) World Food Programme’s Building Blocks program for delivering cash aid to refugees in Jordan. Finally, the paper will explore what the future might look like when blockchain-based cryptocurrencies and self-sovereign identity intersect. With digital transactions functioning as identity claims within an ecosystem based on self-sovereign identity, new business models might emerge, such as identity insurance schemes, along with the emergence of value-stable cryptocurrencies (“stablecoins”) functioning as local currencies.

Jiajing Wu, Jieli Liu, Weili Chen, Huawei Huang · 6 authors

As the first decentralized peer-to-peer (P2P) cryptocurrency system allowing people to trade with pseudonymous addresses, Bitcoin has become increasingly popular in recent years. However, the P2P and pseudonymous nature of Bitcoin make transactions on this platform very difficult to track, thus triggering the emergence of various illegal activities in the Bitcoin ecosystem. Particularly,mixing servicesin Bitcoin, originally designed to enhance transaction anonymity, have been widely employed for money laundering to complicate the process of trailing illicit fund. In this article, we focus on the detection of the addresses belonging to mixing services, which is an important task for anti-money laundering in Bitcoin. Specifically, we provide a feature-based network analysis framework to identify statistical properties of mixing services from three levels, namely, network level, account level, and transaction level. To better characterize the transaction patterns of different types of addresses, we propose the concept of attributed temporal heterogeneous motifs (ATH motifs). Moreover, to deal with the issue of imperfect labeling, we tackle the mixing detection task as a positive and unlabeled learning (PU learning) problem and build a detection model by leveraging the considered features. Experiments on real Bitcoin datasets demonstrate the effectiveness of our detection model and the importance of hybrid motifs including ATH motifs in mixing detection.

Mahendra Kumar Shrivas, Thomas Yeboah, S. Selva Brunda

Computer and network security in the most interesting and challenging field in Computer Science. In Cyberspace, no one can guarantee the complete security of any computer system as technology is evolving day by day. Blockchain is an emerging technology and it is still evolving. The probability of a higher security threat rate has been seen in the case of immature technology. However, mature technologies are also not completely secure. One successful attack could cost millions of dollars to the victim organization and damage their public and financial reputation badly. A transaction can be performed anonymously in Blockchain. In many past reported security breaches, attackers are still unknown and untraceable. In this research article, researchers are proposing a more secure and reliable hybrid security framework for Blockchain platforms that can be used as a generalized reference model to counter various security threats in Blockchain platforms.The proposed hybrid security framework can be applied to secure any kind of Blockchain platform. This research could influence future research in the direction of security of Blockchain 1.0, Blockchain 2.0 and beyond.

A. Michail

Information security incident under-reporting is unambiguously a business problem, as identified by a variety of sources, such as ENISA (2012), Symantec (2016), Newman (2018) and more. This research project identified the underlying issues that cause this problem and proposed a solution, in the form of an innovative artefact, which confronts a number of these issues. This research project was conducted according to the requirements of the Design Science Research Methodology (DSRM) by Peffers et al (2007). The research question set at the beginning of this research project, probed the feasible formation of an incident reporting solution, which would increase the motivational level of users towards the reporting of incidents, by utilizing the positive features offered by existing solutions, on one hand, but also by providing added value to the users, on the other. The comprehensive literature review chapter set the stage, and identified the reasons for incident underreporting, while also evaluating the existing solutions and determining their advantages and disadvantages. The objectives of the proposed artefact were then set, and the artefact was designed and developed. The output of this development endeavour is “IRDA”, the first decentralized incident reporting application (DApp), built on “Quorum”, a permissioned blockchain implementation of Ethereum. Its effectiveness was demonstrated, when six organizations accepted to use the developed artefact and performed a series of pre-defined actions, in order to confirm the platform’s intended functionality. The platform was also evaluated using Venable et al’s (2012) evaluation framework for DSR projects. This research project contributes to knowledge in various ways. It investigates blockchain and incident reporting, two domains which have not been extensively examined and the available literature is rather limited. Furthermore, it also identifies, compares, and evaluates the conventional, reporting platforms, available, up to date. In line with previous findings (e.g Humphrey, 2017), it also confirms the lack of standard taxonomies for information security incidents. This work also contributes by creating a functional, practical artefact in the blockchain domain, a domain where, according to Taylor et al (2019), most studies are either experimental proposals, or theoretical concepts, with limited practicality in solving real-world problems. Through the evaluation activity, and by conducting a series of non-parametric significance tests, it also suggests that IRDA can potentially increase the motivational level of users towards the reporting of incidents. This thesis describes an original attempt in utilizing the newly emergent blockchain technology, and its inherent characteristics, for addressing those concerns which actively contribute to the business problem. To the best of the researcher’s knowledge, there is currently no other solution offering similar benefits to users/organizations for incident reporting purposes. Through the accomplishment of this project’s pre-set objectives, the developed artefact provides a positive answer to the research question. The artefact, featuring increased anonymity, availability, immutability and transparency levels, as well as an overall lower cost, has the potential to increase the motivational level of organizations towards the reporting of incidents, thus improving the currently dismaying statistics of incident under-reporting. The structure of this document follows the flow of activities described in the DSRM by Peffers et al (2007), while also borrowing some elements out of the nominal structure of an empirical research process, including the literature review chapter, the description of the selected research methodology, as well as the “discussion and conclusion” chapter.

Musbaudeen Titilope Oladejo, Lisa Jack

This paper set out to explore the challenges posed by blockchain to forensic accountants in the prevention and detection of fraud. Blockchain will create a decentralised environment where transactions and data have no third-party control. This technology is capable of disrupting accounting and audit because it is capable of automating financial records and audit processes. The fraud analysis in a digital environment is complex and the evolution of new technologies or innovations such as blockchain, artificial intelligence, and robotics have added to these challenges. The framework for analysis adopted is a qualitative study using the library research methodology. The findings portray that blockchain technology is not 100% flawless, impenetrable to malicious attacks and hacking. The results of the study found that technology will affect the core functions of accountants, but the overall effects on the roles of forensic accountants and auditors are still unknown.

Kevin Keane

No abstract is available for this record.

Authors unavailable

Bitcoin is a well known cryptocurrency that has existed for over a decade. We examine the historical cross-market dynamic relationships among four important Bitcoin cryptocurrency markets at a pivotal point in cryptocurrency acceptance among markets and the public. We pay particular attention to cross-market relations during the introduction of a new, competing Bitcoin exchange, Bitfinex, and the subsequent demise of the once-prominent Bitcoin exchange, Mt. Gox. Our findings show that Bitfinex's introduction led to a shifting of trading activity from the once popular Mt. Gox exchange to other exchanges. Mt. Gox's loss of trading activity caused price distortions in all Bitcoin markets under study. In addition, cross-market relationships became less efficient while Mt. Gox experienced its death throes. Our study provides evidence that (1) Bitcoin markets are susceptible to volume losses to rival exchanges, (2) shifting trading activity is also associated with price distortions mainly originating from the suffering exchange, and (3) Bitcoin cross-market dynamics are resilient and, ultimately, self-healing from shocks, strengthening Bitcoin's long-term viability.

Lyazid Sabri, Abdelhak Boubetra

No abstract is available for this record.

Byron Kruger, Wai Sze Leung

No abstract is available for this record.

Alexandra Yuryevna Bokovnya, А. A. Shutova, Tatyana Gennadievna Zhukova, Liliya Viktorovna Ryabova

Cryptocurrency crime cases continue to increase. The legal nature of cryptocurrency is analyzed, and it is concluded that nowadays, despite of some attempts to regulate cryptocurrency circulation legislatively, there are numerous gaps, most of which are in the field of criminal law. Based on the study of the available theoretical views of domestic, as well as the analysis of the judicial investigative practice materials of the legal sphere under consideration, the authors consider the necessity to carry out a work to formulate several areas that will streamline the criminal law relations in the field of cryptocurrency circulation.