Blockchain Technology and Related Security Risks: Towards a Seven-Layer Perspective and Taxonomy

Abstract

Blockchain technology can be a useful tool to address issues related to sustainability. From its initial foundation based on cryptocurrency to the development of smart contracts, blockchain technology promises significant business benefits for various industry sectors, including the potential to offer more trustworthy modes of governance, reducing the risks for environmental and economic crises. Notwithstanding its known benefits, and despite having some protective measures and security features, this emerging technology still faces significant security challenges within its different abstract layers. This paper classifies the critical cybersecurity threats and vulnerabilities inherent in smart contracts based on an in-depth literature review and analysis. From the perspective of architectural layering, each layer of the blockchain has its own corresponding security issues. In order to have a detailed look at the source of security vulnerabilities within the blockchain, a seven-layer architecture is used, whereby the various components of each layer are set out, highlighting the related security risks and corresponding countermeasures. This is followed by a taxonomy that establishes the inter-relationships between the vulnerabilities and attacks in a smart contract. A specific emphasis is placed on the issues caused by centralisation within smart contracts, whereby a “one-owner” controls access, thus threatening the very decentralised nature that blockchain is based upon. This work offers two main contributions: firstly, a general taxonomy that compiles the different vulnerabilities, types of attacks, and related countermeasures within each of the seven layers of the blockchain; secondly, a specific focus on one layer of the blockchain namely, the contract layer. A model application is developed that depicts, in more detail, the security risks within the contract layer, while enlisting the best practices and tools to use to mitigate against these risks. The findings point to future research on developing countermeasures to alleviate the security risks and vulnerabilities inherent to one-owner control in smart contracts.

Internet of medical things and blockchain-enabled patient-centric agent through SDN for remote patient monitoring in 5G network

“…Loss of Private Keys : In case of key loss the user of the system can not retrieve the password as there is no option for key recovery. Thus in this scenario, there is a big chance of losing control of user data 41 .…”

The Impact of Blockchain in Financial Industry: A Concept Paper

“…Security concerns are growing as a result of the frequent attacks on popular exchanges. A hacker needs to acquire the majority of mining power to gain control of a network, a concept commonly referred to as the 51 percent assault (Mollajafari & Bechkoum, 2023). Further investigation of this topic is crucial due to the potential consequences it may present, as indicated by Orcutt (2019) Multi-factor authentication is necessary to safeguard blockchain systems from malicious attacks by performing several security checks.…”

A taxonomy of endpoint vulnerabilities and affected blockchain architecture layers

“…Figure 2 represents the different disciplines and applications of Blockchain technology. 31,[34][35][36][37][38][39] F I G U R E 1 An illustration of a Block with its components. 3 depicts all stages with certain defining attributes as follows.…”

“…In 2023, mainly four studies 4,37,43,44 were found on the taxonomy. Mollajafari and Bechkoum 37 examined security risks in all layers of blockchain systems, categorizing them to better understand and defend against vulnerabilities.…”