A Design for a Hyperledger Fabric Blockchain-Based Patch-Management System
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
An enterprise patchmanagement system (PMS) typically supplies a single point of failure (SPOF) of centralizationstructure. However, a Blockchain system offers features of decentralization, transaction integrity, usercertification, and a smart chaincode. This study proposes a Hyperledger Fabric Blockchainbased distributedpatchmanagement system and verifies its technological feasibility through prototyping, so that all participatingusers can be protected from various threats. In particular, by adopting a private chain for patch file setmanagement, it is designed as a Blockchain system that can enhance security, log management, latest statussupervision and monitoring functions. In addition, it uses a Hyperledger Fabric that owns a practical Byzantinefault tolerant consensus algorithm, and implements the functions of upload patch file set, download patch fileset, and audit patch file history, which are major features of PMS, as a smart contract (chaincode), and verifiedthis operation. The distributed ledger structure of Blockchainbased PMS can be a solution for distributor andclient authentication and forgery problems, SPOF problem, and distribution record reliability problem. It notonly presents an alternative to dealing with central management server loads and failures, but it also providesa higher level of security and availability.
Abstract
An enterprise patchmanagement system (PMS) typically supplies a single point of failure (SPOF) of centralizationstructure. However, a Blockchain system offers features of decentralization, transaction integrity, usercertification, and a smart chaincode. This study proposes a Hyperledger Fabric Blockchainbased distributedpatchmanagement system and verifies its technological feasibility through prototyping, so that all participatingusers can be protected from various threats. In particular, by adopting a private chain for patch file setmanagement, it is designed as a Blockchain system that can enhance security, log management, latest statussupervision and monitoring functions. In addition, it uses a Hyperledger Fabric that owns a practical Byzantinefault tolerant consensus algorithm, and implements the functions of upload patch file set, download patch fileset, and audit patch file history, which are major features of PMS, as a smart contract (chaincode), and verifiedthis operation. The distributed ledger structure of Blockchainbased PMS can be a solution for distributor andclient authentication and forgery problems, SPOF problem, and distribution record reliability problem. It notonly presents an alternative to dealing with central management server loads and failures, but it also providesa higher level of security and availability.
참고문헌 (25)
- S. Rathore, "BlockDeepNet : a Blockchain-based secure deep learning for IoT network", Sustainability, 11(14) (2019)
- S. Rathore, "BlockSecIoTNet : Blockchain-based decentralized security architecture for IoT network", Journal of Network and Computer Applications, 143, pp.167~177 (2019)
- Pradip Kumar Sharma, "Block-VN: A Distributed Blockchain Based Vehicular Network Architecture in Smart City", JIPS(Journal of Information Processing Systems), 13(1), pp.184~195 (2017), 한국정보처리학회[DOI]
- 성연식, "Future Trends of Blockchain and Crypto Currency: Challenges, Opportunities, and Solutions", JIPS(Journal of Information Processing Systems), 15(3), pp.457~463 (2019), 한국정보처리학회[DOI]
- C. Dennis, "Why is patch management necessary?", Network Security, 2018(7), pp.9~13 (2018)
- S. Liu, "Surviving insecure it : effective patch management", IT Professional, 11(2), pp.49~51 (2009)
- T. Gerace, "The critical elements of patch management", Proceedings of the 33rd Annual ACM SIGUCCS Conference on User services, pp.98~101 (2005)
- C. Higby, "Wireless security patch management system", Proceedings of the 5th Conference on Information Technology Education, pp.165~168 (2004)
- I. Y. Lee, "A study on efficient component in patch management system", Proceedings of the Korean Society of Broad Engineers Conference, pp.21~24 (2008)
- "Bitcoin: a peer-to-peer electronic cash system" (2008)[URL]
- Y. J. Kim, "Design the classed patch distribution system framework considering the extension", Proceedings of the Korean Institute of Information Science Society Conference, pp.199~201 (2004)
- H. Cavusoglu, "Security patch management : Share the burden or share the damage?", Management Science, 54(4), pp.657~670 (2008)
- 김용건, "웹 크롤러를 이용한 자동 패치 정보 수집 시스템", 정보보호학회논문지, 28(6), pp.1393~1399 (2018), 한국정보보호학회[DOI]
- J. Muhammad, "Policy-driven patch management for distributed environments", Proceedings of 2009 3rd International Conference on Network and System Security, pp.158~163 (2009)
- T. Palumbo, "The power of PowerShell : examples of how PowerShell scripts can supplement a patch management system to solve unusual problems", Proceedings of the 2017 ACM Annual Conference on SIGUCCS, pp.7~14 (2017)
- J. Zheng, "Security evaluation of a VM-based intrusion-tolerant system with pulltype patch management", Proceedings of 2019 IEEE 19th International Symposium on High Assurance Systems Engineering(HASE), pp.156~163 (2019)
- T. S. Sohn, "The design of a secure patch distribution architecture", Proceedings of the Korean Information Science Society Conference, pp.559~561 (2002)
- J. T. Seo, "Patch management system with multiplatform support", Proceedings of the Korean Information Science Society Conference, pp.889~891 (2003)
- C. W. Chang, "A cross-site patch management model and architecture design for large scale heterogeneous environment", Proceedings of the 39th Annual 2005 International Carnahan Conference on Security Technology, pp.41~46 (2005)
- S. W. Lee, "Design the normalized secure patch distribution & management system", Proceedings of the Korean Information Science Society Conference, pp.502~504 (2004)
- Y. J. Kim, "Design the security patch central management system using XML", Proceedings of the Korean Information Science Society Conference, pp.505~507 (2004)
- I. T. Jung, "PC information extraction method applicable to MacOS-based patch management system", Proceedings of the Korean Information Science Society Conference, pp.1536~1538 (2017)
- A. M. Antonopoulos, "Mastering Bitcoin: Unlocking Digital Cryptocurrencies" (2014), O'Reilly Media Inc
- "Delegated Proof-of-Stake (DPoS)" (2014)[URL]
- Giang-Truong Nguyen, "A Survey about Consensus Algorithms Used in Blockchain", JIPS(Journal of Information Processing Systems), 14(1), pp.101~128 (2018), 한국정보처리학회[DOI]