DLT Cybersecurity Monitoring

DLT网络安全监控

• 批准号: 10076590
• 金额: $ 3.95万
• 依托单位: UNIVERSITY OF OXFORD
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10076590
• 关键词: DLT; Cybersecurity; Monitoring

This project seeks to validate the market and identify requirements for a security-monitoring (attack-detection) tool for distributed-ledger technology (DLT)-based systems.DLT-based systems are being developed and implemented in a widening range of applications across sectors. Cryptocurrencies have been the primary application of DLTs in recent years, occupying most of the global blockchain market. More recently, increasing projects have sought to develop DLT-based systems for other applications, including supply-chain management, public services, integrating Internet-of-Things systems into Smart Cities, and digital-identity management.Like most digital systems, DLT-based systems are vulnerable to cyber-attack. High-value cryptocurrency thefts have been achieved through wallet compromise; exploitation of smart-contract vulnerabilities; and 51% attacks. As DLTs emerge in new applications, they will inevitably be targets of attack by adversaries seeking to compromise the integrity and availability of data and decision-making, with potential consequences extending beyond financial theft.It is therefore critical that users of DLT-based systems are able to detect and mitigate against potential attacks by outsiders or by competitors. While there is some common ground, many of the types and indicators of attack against DLT-based systems differ from other digital systems; as such existing approaches are not directly applicable.

该项目旨在验证市场，并确定基于分布式账本技术（DLT）的系统的安全监控（攻击检测）工具的需求。基于DLT的系统正在开发和实施，并在各行业的广泛应用中实施。近年来，加密货币一直是DLT的主要应用，占据了全球区块链市场的大部分。最近，越来越多的项目寻求为其他应用开发基于DLT的系统，包括供应链管理、公共服务、将物联网系统集成到智慧城市以及数字身份管理。与大多数数字系统一样，基于DLT的系统容易受到网络攻击。高价值的加密货币盗窃是通过钱包妥协实现的;利用智能合约漏洞;和51%的攻击。随着DLT在新应用中的出现，它们将不可避免地成为攻击者的攻击目标，这些攻击者试图破坏数据和决策的完整性和可用性，其潜在后果将超出金融盗窃的范围。因此，基于DLT的系统的用户能够检测并缓解外部或竞争对手的潜在攻击至关重要。虽然存在一些共同点，但针对基于DLT的系统的攻击的许多类型和指标与其他数字系统不同;因此，现有方法不能直接适用。