SecurityResearch-101

Security with Block Chain Technology: Part 3 Security by Design | Researching in Smart Contracts- Block Chain If you are a block chain enthusiast, user, miner or any person involved with the usage of block chain, you will know about Smart Contracts. For people who are new to it, let’s state in simple lines about Smart Contracts: What are smart contracts? Smart contracts are part of executable code that automatically runs on the block chain model to execute agreement presets between multiple parties involved in the transaction. Smart contracts allow the performance of credible transactions without third parties. These transactions are trackable and irreversible. Implementation relies on- Byzantine fault-tolerant  algorithms which allows digital security through decentralization to form smart contracts. Notable examples of implementation of smart contracts include the following: ·          Bitcoin   ·          Ethereum   ·          Ripple  (Codius) Why Sma

Security Testing on Block Chain: By- Samrat Das Now since we have our fundamentals clear on block chain, let’s proceed for understanding the security concepts of block chain penetration testing: Even though block chain is secure with lots of conceptualized security controls, there are quite a few places where an attacker can extract information or attack the nodes. A few of such attack vectors are: ·          Block chain permissions escalation ·          Crypto Key Tampering ·          Inappropriate consensus mechanism ·          Lack of block chain security program plan ·          Lack of block chain integrity ·          Lack of malicious code protection ·          Misused timestamps ·          Genesis block tampering ·          Denial of service (DOS) attacks ·          Packet sniffing & MITM attacks In order to perform a holistic review of Block Chain Technology, we can break our assessment step to four parts: ·          Design review w