Actor-based Risk Analysis for Blockchains in Smart Mobility

TL;DR

This paper presents an actor-based risk analysis framework for blockchain systems in smart mobility, identifying attack goals, attacker types, and assessing the impact on security, privacy, and trust in a multi-layered blockchain data market.

Contribution

It introduces a novel actor-based risk analysis method tailored for blockchain in smart mobility, highlighting specific attack goals and threat levels.

Findings

Identified five attack goals and five attacker types.

Highlighted highest risk factors affecting monetary, privacy, and trust aspects.

Found one attack goal with multiple threats posing unacceptable risks.

Abstract

Blockchain technology is a crypto-based secure ledger for data storage and transfer through decentralized, trustless peer-to-peer systems. Despite its advantages, previous studies have shown that the technology is not completely secure against cyber attacks. Thus, it is crucial to perform domain specific risk analysis to measure how viable the attacks are on the system, their impact and consequently the risk exposure. Specifically, in this paper, we carry out an analysis in terms of quantifying the risk associated to an operational multi-layered Blockchain framework for Smart Mobility Data-markets (BSMD). We conduct an actor-based analysis to determine the impact of the attacks. The analysis identified five attack goals and five types of attackers that violate the security of the blockchain system. In the case study of the public permissioned BSMD, we highlight the highest risk factors according to their impact on the victims in terms of monetary, privacy, integrity and trust. Four attack goals represent a risk in terms of economic losses and one attack goal contains many threats that represent a risk that is either unacceptable or undesirable.