STBM：安全可信的基于区块链的网络安全服务交易模型

doi:10.11959/j.issn.1000-436x.2024158

Abstract

Abstract:

To overcome the numerous challenges faced by traditional models of cybersecurity service transactions, adapt to the needs of industrial digitalization, and address the inconveniences and opacity of cybersecurity service transactions, a secure and trustworthy blockchain-based model for cybersecurity service transactions was proposed, which could provide a secure, efficient, and controllable means of transaction for cybersecurity services. By categorizing cybersecurity services and managing the full lifecycle, and incorporating a dual-chain structure and smart contracts, the model sought to enhance the traceability, transparency, and security of cybersecurity services. Firstly, cybersecurity services were categorized into multiple dimensions, including usage rights, licensing rights, control rights, and ownership rights, to aid in clearer understanding and effective management of these services. Furthermore, a service chain was constructed for the full lifecycle management of cybersecurity services, covering key stages such as creation, publication, configuration, operation, maintenance, updating, and termination, thereby improving cybersecurity service traceability and transparency. In addition, a transaction chain was established for automated service transactions, adopting a post-service payment model to ensure the security and integrity of transactions. Finally, the effectiveness and trustworthiness of these components in cybersecurity service transactions were validated through case studies and experiments.

Key words: cybersecurity service, blockchain, dual-chain, transaction model, full lifecycle management

CLC Number:

TN39

Guirong PIAO, Jianming ZHU. STBM: secure and trustworthy blockchain-based model for cybersecurity service transactions[J]. Journal on Communications, 2024, 45(9): 68-81.

Figures/Tables 4

References 44

1	YU Z H, GAO H X, CONG X Y, et al. A survey on cyber-physical systems security[J]. IEEE Internet of Things Journal, 2023, 10(24): 21670-21686.
2	杨毅宇, 周威, 赵尚儒, 等. 物联网安全研究综述: 威胁、检测与防御[J]. 通信学报, 2021, 42(8): 188-205.
	YANG Y Y, ZHOU W, ZHAO S R, et al. Survey of IoT security research: threats, detection and defense[J]. Journal on Communications, 2021, 42(8): 188-205.
3	ALZOUBI H M, GHAZAL T M, HASAN M K, et al. Cyber security threats on digital banking[C]//Proceedings of the 2022 1st International Conference on AI in Cybersecurity (ICAIC). Piscataway: IEEE Press, 2022: 1-4.
4	SHEIKH M S, LIANG J, WANG W S. A survey of security services, attacks, and applications for vehicular ad hoc networks (VANETs)[J]. Sensors, 2019, 19(16): 3589.
5	王冬, 秦倩倩, 郭开天, 等. 联邦学习中的模型逆向攻防研究综述[J]. 通信学报, 2023, 44(11): 94-109.
	WANG D, QIN Q Q, GUO K T, et al. Survey on model inversion attack and defense in federated learning[J]. Journal on Communications, 2023, 44(11): 94-109.
6	QURESHI A, DASHTI W, JAHANGEER A, et al. Security challenges over cloud environment from service provider prospective[J]. Cloud Computing and Data Science, 2020: 12-20.
7	VESTAD A, YANG B. Adoption of cybersecurity innovations—a systematic literature review[C]//The International Conference on Cybersecurity, Situational Awareness and Social Media. Berlin: Springer, 2024: 285-304.
8	LI J J, LI J Q, WANG X, et al. Multi-blockchain based data trading markets with novel pricing mechanisms[J]. IEEE/CAA Journal of Automatica Sinica, 2023, 10(12): 2222-2232.
9	LIU W, FENG W L, HUANG M X, et al. STEB: a secure service trading ecosystem based on blockchain[J]. PLoS One, 2022, 17(6): e0267914.
10	李永明, 赖利娜. 区块链背景下数字版权全链条保护的困境与出路[J]. 科技管理研究, 2022, 42(10): 140-150.
	LI Y M, LAI L N. The dilemma and solution of full chain protection of digital copyright based on blockchain[J]. Science and Technology Management Research, 2022, 42(10): 140-150.
11	TAN T M, SARANIEMI S. Trust in blockchain-enabled exchanges: future directions in blockchain marketing[J]. Journal of the Academy of Marketing Science, 2023, 51(4): 914-939.
12	NAMASUDRA S, DEKA G C, JOHRI P, et al. The revolution of blockchain: state-of-the-art and research challenges[J]. Archives of Computational Methods in Engineering, 2021, 28(3): 1497-1515.
13	霍如, 程祥凤, 孙闯, 等. 区块链网络拓扑优化和转发策略设计[J]. 通信学报, 2022, 43(12): 89-100.
	HUO R, CHENG X F, SUN C, et al. Topology optimization and forwarding strategy design for blockchain network[J]. Journal on Communications, 2022, 43(12): 89-100.
14	XU J, WANG C, JIA X H. A survey of blockchain consensus protocols[J]. ACM Computing Surveys, 2023, 55(13s): 1-35.
15	YAVAPRABHAS K, POURNADER M, SEURING S. Blockchain as the “trust-building machine” for supply chain management[J]. Annals of Operations Research, 2023, 327(1): 49-88.
16	孙俨, 熊翱, 蒋承伶, 等. 基于区块链的计算与无线通信资源联合管理双向拍卖模型[J]. 通信学报, 2022, 43(11): 14-25.
	SUN Y, XIONG A, JIANG C L, et al. Blockchain-based computing and wireless communication resource joint management double auction model[J]. Journal on Communications, 2022, 43(11): 14-25.
17	张海波, 曹钰坤, 刘开健, 等. 车联网中基于区块链的分布式信任管理方案[J]. 通信学报, 2023, 44(5): 148-157.
	ZHANG H B, CAO Y K, LIU K J, et al. Distributed trust management scheme based on blockchain in Internet of vehicles[J]. Journal on Communications, 2023, 44(5): 148-157.
18	BELCHIOR R, VASCONCELOS A, GUERREIRO S, et al. A survey on blockchain interoperability: past, present, and future trends[J]. arXiv Preprint, arXiv: , 2020.
19	SANKA A I, IRFAN M, HUANG I, et al. A survey of breakthrough in blockchain technology: adoptions, applications, challenges and future research[J]. Computer Communications, 2021, 169: 179-201.
20	龚强, 班铭媛, 张一林. 区块链、企业数字化与供应链金融创新[J]. 中国社会科学文摘, 2021(6): 89-90.
	GONG Q, BAN M Y, ZHANG Y L. Blockchain, enterprise digitalization and supply chain finance innovation[J]. Chinese Social Science Digest, 2021(6): 89-90.
21	蔡晓晴, 邓尧, 张亮, 等. 区块链原理及其核心技术[J]. 计算机学报, 2021, 44(1): 84-131.
	CAI X Q, DENG Y, ZHANG L, et al. The principle and core technology of blockchain[J]. Chinese Journal of Computers, 2021, 44(1): 84-131.
22	陈迪, 邱菡, 朱俊虎, 等. 基于区块链的域间路由策略符合性验证方法[J]. 软件学报, 2023, 34(9):4336-4350.
	CHEN D, QIU H, ZHU J H, et al. Blockchain-based validation method for inter-domain routing policy compliance[J]. Journal of Software, 2023, 34(9): 4336-4350.
23	陈烨, 许冬瑾, 肖亮. 基于区块链的网络安全技术综述[J]. 电信科学, 2018, 34(3): 8-16.
	CHEN Y, XU D J, XIAO L. Survey on network security based on blockchain[J]. Telecommunications Science, 2018, 34(3): 8-16.
24	SALMAN T, ZOLANVARI M, ERBAD A, et al. Security services using blockchains: a state of the art survey[J]. IEEE Communications Surveys & Tutorials, 2019, 21(1): 858-880.
25	冯涛, 陈李秋, 方君丽, 等. 基于本地化差分隐私和属性基可搜索加密的区块链数据共享方案[J]. 通信学报, 2023, 44(5): 224-233.
	FENG T, CHEN L Q, FANG J L, et al. Blockchain data sharing scheme based on localized difference privacy and attribute-based searchable encryption[J]. Journal on Communications, 2023, 44(5): 224-233.
26	王苗苗, 芮兰兰, 徐思雅. 面向文化资源可信共享的多因子身份认证方案[J]. 通信学报, 2023, 44(10): 34-45.
	WANG M M, RUI L L, XU S Y. Multi-factor identity authentication scheme for trusted sharing of cultural resources[J]. Journal on Communications, 2023, 44(10): 34-45.
27	LAMBA A, SINGH S, DUTTA N, et al. Uses of different cyber security service to prevent attack on smart home infrastructure[J]. SSRN Electronic Journal, 2014, 1(11): 5809-5813.
28	王利朋, 关志, 李青山, 等. 区块链数据安全服务综述[J]. 软件学报, 2023, 34(1): 1-32.
	WANG L P, GUAN Z, LI Q S, et al. Survey on blockchain-based security services[J]. Journal of Software, 2023, 34(1): 1-32.
29	林莉, 储振兴, 刘子萌, 等. 基于区块链的策略隐藏大数据访问控制方法[J]. 自动化学报, 2023, 49(5): 1031-1049.
	LIN L, CHU Z X, LIU Z M, et al. A policy-hidden big data access control method based on blockchain[J]. Acta Automatica Sinica, 2023, 49(5): 1031-1049.
30	张淑娥, 田成伟, 李保罡. 基于区块链技术的身份认证研究综述[J]. 计算机科学, 2023, 50(5): 329-347.
	ZHANG S E, TIAN C W, LI B G. Review of identity authentication research based on blockchain technology[J]. Computer Science, 2023, 50(5): 329-347.
31	王晟典, 陈娥, 朱岩, 等. 一种基于区块链智能合约的软件服务交易方法[J]. 工程科学学报, 2023, 45(3): 475-488.
	WANG S D, CHEN E, ZHU Y, et al. A software service transaction approach based on blockchain smart contracts[J]. Chinese Journal of Engineering, 2023, 45(3): 475-488.
32	NASEER H, MAYNARD S B, DESOUZA K C. Demystifying analytical information processing capability: the case of cybersecurity incident response[J]. Decision Support Systems, 2021, 143: 113476.
33	XIANG X Y, CAO J, FAN W G. Decentralized authentication and access control protocol for blockchain-based e-health systems[J]. Journal of Network and Computer Applications, 2022, 207: 103512.
34	VISHWAKARMA L, NAHAR A, DAS D. LBSV: lightweight blockchain security protocol for secure storage and communication in SDN-enabled IoV[J]. IEEE Transactions on Vehicular Technology, 2022, 71(6): 5983-5994.
35	NAKAMOTO S. Bitcoin: a peer-to-peer electronic cash system[J]. Consulted, 2008, 28(1): 21260-21268.
36	陈冬林, 唐艺倩, 聂规划, 等. 基于零知识证明的科技服务交易数据保密机制[J]. 科技管理研究, 2021, 41(20): 80-86.
	CHEN D L, TANG Y Q, NIE G H, et al. Data confidentiality mechanism of science and technology service transaction based on zero knowledge proof[J]. Science and Technology Management Research, 2021, 41(20): 80-86.
37	张垿豪, 冯文龙, 黄梦醒, 等. 基于区块链的科技服务质量信任评价方案[J]. 计算机工程, 2022, 48(5): 127-135, 144.
	ZHANG X H, FENG W L, HUANG M X, et al. Trust evaluation scheme for technology quality of service based on blockchain[J]. Computer Engineering, 2022, 48(5): 127-135, 144.
38	李妃养, 黄何, 张宏丽. 区块链技术在技术成果交易领域应用探索[J]. 科学管理研究, 2020, 38(3): 55-60.
	LI F Y, HUANG H, ZHANG H L. Application exploration of block chain technology in the field of technology trading[J]. Scientific Management Research, 2020, 38(3): 55-60.
39	HU J, ZHU P, QI Y, et al. A patent registration and trading system based on blockchain[J]. Expert Systems with Applications, 2022, 201: 117094.
40	ZHUANG C X, DAI Q Y, ZHANG Y. BCPPT: a blockchain-based privacy-preserving and traceability identity management scheme for intellectual property[J]. Peer-to-Peer Networking and Applications, 2022, 15(1): 724-738.
41	李向阳, 刘扬, 闫志全, 等. 基于区块链的知识产权交易平台研究与实现[J]. 计算机工程与应用, 2023, 59(3): 308-316.
	LI X Y, LIU Y, YAN Z Q, et al. Research and implementation of intellectual property trading platform based on blockchain[J]. Computer Engineering and Applications, 2023, 59(3): 308-316.
42	黄华梅, 陆建波, 李文敬, 等. 基于区块链的家政服务交易群智合约算法研究[J]. 计算机应用与软件, 2023, 40(9): 137-144, 204.
	HUANG H M, LU J B, LI W J, et al. Blockchain-based housekeeping service transaction group smart contract algorithm[J]. Computer Applications and Software, 2023, 40(9): 137-144, 204.
43	YAHAYA A S, JAVAID N, JAVED M U, et al. Blockchain-based secure energy trading with mutual verifiable fairness in a smart community[J]. IEEE Transactions on Industrial Informatics, 2022, 18(11): 7412-7422.
44	LIU Z W, HU C Q, XIA H, et al. SPDTS: a differential privacy-based blockchain scheme for secure power data trading[J]. IEEE Transactions on Network and Service Management, 2022, 19(4): 5196-5207.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Xuewang ZHANG, Zhitao LEI, Jinzhao LIN. Scalable PBFT-like algorithm for trust management of degree/graduation certificates [J]. Journal on Communications, 2024, 45(9): 40-54.
[2]	Yuan ZHUANG, Zekai FAN, Cheng WANG, Jianguo SUN, Yaolin LI. Smart contract vulnerability detection method based on pre-training and novel timing graph neural network [J]. Journal on Communications, 2024, 45(9): 101-114.
[3]	Chaoyi QIN, Yu ZHANG, Binxing FANG. Survey on decentralized security-enhanced technologies for RPKI [J]. Journal on Communications, 2024, 45(7): 196-205.
[4]	Youliang TIAN, Yuqing HUANG, Shuai WANG. Blockchain sharding storage scheme based on concatenated coding [J]. Journal on Communications, 2024, 45(7): 159-170.
[5]	Li’na GE, Haiao LI, Jie WANG. Federated edge learning model based on multi-level proxy permissioned blockchain [J]. Journal on Communications, 2024, 45(4): 201-215.
[6]	Jianwei CHEN, Shuyu WANG, Meiping ZHANG, Zhenping ZHANG. Blockchain-based and verifiable multidimensional data aggregation and sharing scheme for smart grid [J]. Journal on Communications, 2024, 45(1): 167-179.
[7]	Zhiyuan LI, Binglei XU, Yingyi ZHOU. Graph neural network-based address classification method for account balance model blockchain [J]. Journal on Communications, 2023, 44(9): 115-126.
[8]	Yue CHEN, Zenghang HAO, Jianghong WEI, Xuexian HU, Dongmei YANG. Redactable blockchain supporting trapdoor revocation and limited number of redactions [J]. Journal on Communications, 2023, 44(7): 100-113.
[9]	Xuejiao LIU, Qiang ZHONG, Yingjie XIA. Efficient authentication scheme for cross-trust domain of IoV based on double-layer shard blockchain [J]. Journal on Communications, 2023, 44(5): 213-223.
[10]	Haibo ZHANG, Yukun CAO, Kaijian LIU, Ruyan WANG. Distributed trust management scheme based on blockchain in Internet of vehicles [J]. Journal on Communications, 2023, 44(5): 148-157.
[11]	Baiji HU, Xiaojuan ZHANG, Yuancheng LI, Rongxin LAI. Multi-function supported privacy protection data aggregation scheme for V2G network [J]. Journal on Communications, 2023, 44(4): 187-200.
[12]	Yingjie XIA, Siyu ZHU, Xuejiao LIU. Research on efficient cross trust-domain group authentication with conditional privacy of vehicle platoon under blockchian architecture [J]. Journal on Communications, 2023, 44(4): 111-123.
[13]	Xuejiao LIU, Tiancong CAO, Yingjie XIA. Research on efficient and secure cross-domain data sharing of IoV under blockchain architecture [J]. Journal on Communications, 2023, 44(3): 186-197.
[14]	Pujie JING, Liangmin WANG, Xuewen DONG, Yushu ZHANG, Qian WANG, Sohail Muhammad. CHA: cross-chain based hierarchical architecture for practicable blockchain regulatory [J]. Journal on Communications, 2023, 44(3): 93-104.
[15]	Qianyi DAI, Bin ZHANG, Song GUO, Kaiyong XU. Blockchain network layer anomaly traffic detection method based on multiple classifier integration [J]. Journal on Communications, 2023, 44(3): 66-80.

STBM: secure and trustworthy blockchain-based model for cybersecurity service transactions

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 4

References 44

Related Articles 15

Metrics

Recommended 0