Blockchain solutions: the balance of safety and efficiency, or just a trend?

Presented at UASC conference in Kyiv, Ukraine.

--------------------------------------
The security engineer's job is to choose the appropriate solutions for the problems and to apply them. Discussing blockchain regarding cryptography is rather boring: it is simple, and even some assumptions in high-level protocols do not cause protests.

I will talk about the other side - where blockchain looks like an optimal strategy, where it causes questions. We will walk through the risk&threats models, trust, and guarantees, to the experience of using blockchain in the real project (and what happened next).

--------------------------------------

Links to check:

Learn Blockchains by Building One
https://hackernoon.com/learn-blockchains-by-building-one-117428612f46

Blockchain & Cyber Security. Let’s Discuss
https://www2.deloitte.com/content/dam/Deloitte/ie/Documents/Technology/ IE_C_BlockchainandCyberPOV_0417.pdf

3 Ways Blockchain Is Revolutionizing Cybersecurity
https://www.forbes.com/sites/omribarzilay/2017/08/21/3-ways-blockchain-is- revolutionizing-cybersecurity/#6d43bcf4233

Transcript

1. Blockchain solutions: the balance of safety and efficiency, or just a trend?
2. #uasc @vixentael Security instrument
4. Security instrument #uasc @vixentael counteracts specific risks
5. #uasc @vixentael Blockchain: what data signature
6. #uasc @vixentael Blockchain: what data signature data signature ] data signature ]
7. #uasc @vixentael Blockchain: what linked list of blocks distributed database history of trans- actions each block contains meta-info data signature
8. #uasc @vixentael Blockchain: decentralized
9. #uasc @vixentael consensus problem Blockchain: decentralized
10. #uasc @vixentael identity ownership resistance to the single point of failure transparency cannot modify transactions Blockchain: why these reasons are more valid than ‘everyone uses blockchain’
11. #uasc @vixentael
12. #uasc @vixentael crypto currency smart contracts voting systems digital identity Blockchain: where
13. #uasc @vixentael https://www.ibm.com/blogs/insights-on-business/government/ten-things-blockchain-not/ replacement of distributed db secure messaging replacement high volume transactions anonymous Blockchain: is NOT
14. Blockchain: is NOT #uasc @vixentael
15. blockchain-based PKI #uasc @vixentael
16. #uasc @vixentael Problem PKI == centralized trust
17. #uasc @vixentael PKI is about registration verification revocation
18. #uasc @vixentael PKI is about registration verification revocation CA
19. CA #uasc @vixentael PKI is about registration verification revocation LET’S ADD BLOCKCHAIN!
20. #uasc @vixentael PKI on blockchain key storage blockchain records about revoked keys blockchain
21. #uasc @vixentael No need to trust one point key storage blockchain records about revoked keys blockchain key storage blockchain records about revoked keys blockchain key storage blockchain records about revoked keys blockchain
22. #uasc @vixentael PKI on blockchain registration verification revocation key storage blockchain records about revoked keys blockchain
23. #uasc @vixentael Pros vs Cons registration verification revocation
24. #uasc @vixentael PKI on blockchain is cool, but cumbersome key storage blockchain records about revoked keys blockchain key storage blockchain records about revoked keys blockchain key storage blockchain records about revoked keys blockchain
25. Blockchain-based solutions are not for everything #uasc @vixentael
26. WHAT I THINK I LOOK LIKE WHEN I’M TALKING ABOUT BLOCKCHAIN WHAT I ACTUALLY LOOK LIKE TALKING ABOUT BLOCKCHAIN
27. Home reading https://hackernoon.com/learn-blockchains-by-building-one-117428612f46 Learn Blockchains by Building One https://www2.deloitte.com/content/dam/Deloitte/ie/Documents/Technology/ IE_C_BlockchainandCyberPOV_0417.pdf Blockchain & Cyber Security. Let’s Discuss https://www.forbes.com/sites/omribarzilay/2017/08/21/3-ways-blockchain-is- revolutionizing-cybersecurity/#6d43bcf4233 3 Ways Blockchain Is Revolutionizing Cybersecurity
28. @vixentael Tech Lead Feel free to reach me with any mobile security questions. I do check my inbox :)