Blockchain Based Distributed Package Management Architecture

Ince, M. Numan; Ak, Murat; Gunay, Melih

doi:10.1109/ubmk50275.2020.9219374

Cited by 2 publications

(1 citation statement)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…More recently, Ince et al [24] presented a blockchain-based package management system, which may also be extended with independent review functionality as we describe it in this work.…”

Section: Related Workmentioning

confidence: 99%

Decentralized Review and Attestation of Software Attribute Claims

2022

View full text Add to dashboard Cite

Software can be described, like human users and other objects, through attributes. For this work, we define software attributes as humanly verifiable, falsifiable, or judgeable statements regarding characteristics of said software. Much like attributes in general, software attributes require robust identities for their source but also for their target, meaning a software in general or a binary in particular. As software can be of critical importance, performing an independent review of attribute claims appears beneficial. We posit that decentralized platforms that were developed and refined over the past decade can bridge the gap between existing tools and methods for software review and their open, transparent, and accountable use for the benefit of users. In this work, we explore the feasibility and implications of decentralizing an independent review of software attribute claims. We envision the decentralization of a review process from initialization and execution to the persistent recording of results. We sketch the available design space by decomposing the overall process into a modular design and describe how each component covers overarching objectives. To illustrate practical implications and trade-offs, we present ETHDPR, a proof of concept implementation based on Ethereum and IPFS. Through a quantitative and qualitative evaluation, we show that a decentralized software review is practically feasible. We illustrate the flexibility of the proposed approach using a toy example of a software component in automotive systems. Lastly, we provide a discussion on fundamental limits and open issues of facilitating independent reviews via technological means.

show abstract

“…More recently, Ince et al [24] presented a blockchain-based package management system, which may also be extended with independent review functionality as we describe it in this work.…”

Section: Related Workmentioning

confidence: 99%