Actor-based Risk Analysis for Blockchains in Smart Mobility
This addresses security vulnerabilities for stakeholders in smart mobility blockchain systems, but it is incremental as it applies existing risk analysis methods to a specific domain.
The paper tackled the problem of security risks in blockchain-based smart mobility data markets by performing an actor-based risk analysis, identifying five attack goals and five attacker types, with four causing economic losses and one posing unacceptable or undesirable risks.
Blockchain technology is a crypto-based secure ledger for data storage and transfer through decentralized, trustless peer-to-peer systems. Despite its advantages, previous studies have shown that the technology is not completely secure against cyber attacks. Thus, it is crucial to perform domain specific risk analysis to measure how viable the attacks are on the system, their impact and consequently the risk exposure. Specifically, in this paper, we carry out an analysis in terms of quantifying the risk associated to an operational multi-layered Blockchain framework for Smart Mobility Data-markets (BSMD). We conduct an actor-based analysis to determine the impact of the attacks. The analysis identified five attack goals and five types of attackers that violate the security of the blockchain system. In the case study of the public permissioned BSMD, we highlight the highest risk factors according to their impact on the victims in terms of monetary, privacy, integrity and trust. Four attack goals represent a risk in terms of economic losses and one attack goal contains many threats that represent a risk that is either unacceptable or undesirable.