A Blockchain-based Security Assessment
Framework
N Satyanarayana
e-Security, Centre for Development of Advanced Computing, Hyderabad, India
nanduris@cdac.in

Abstract—Using Blockchain Technology for Security Assessment results in effective monitoring capabilities especially when data
analytics components are inbuilt in such a system. At present days, we can see the availability of many Security Information andEvent Management (SIEM) tools that follow a client-server model for capturing data from different resources and performing data
analysis on the server side. However, such tools serve the purpose of a single institute and depend on the trust level in amulti-institute or multi-center-project kind of environment where they can be used. Another limitation could be if the server itself is
attacked then the whole exercise would be futile. The lack of trust and concerns about data integrity in such an environment makes
performing root cause analysis of security risks difficult. Blockchain technology ensures a tamper-proof, time-stamped, anddecentralized storage repository that helps in maintaining data integrity even in complex and untrusted multi-institute ormulti-center-project environments while assuring data provenance. This article1 presents a unified and comprehensive security
assessment framework that produces a compliance report along with threat perception level by monitoring and assessing resources
across multi-institute or multi-center-project in different geographical locations while supporting data privacy by leveraging
Blockchain Technology capabilities.
Keyword—Blockchain, Security Assurance Policy, Continuous Monitoring
N Satyanarayana lives in Hyderabad, India, and is born in 1976. He did his Master of Technology a post-graduation degree incomputer science from Jawaharlal Nehru Technological University, Hyderabad, India. Prior to this, he completed his Master ofComputer Application post-graduate degree in computer applications from Sri Venkateswara University, Tirupati, India in the year
1999.
He is currently working as Joint Director in the Centre for Development of Advanced Computing (CDAC), Hyderabad, India. He has
been working for CDAC for the past twenty years and played an instrumental role in developing various applications in the areas likeeLearning, Peer to Peer, Network Management, and Blockchain Technology.
Mr. N Satyanarayana published several papers at National and International conferences in various areas such as Peer to Peer
Computing, Network Management, e-Learning, and Blockchain. His current research interest includes Blockchain
consensus algorithms and reference architectures. He is also contributing towards best practices/standards in the respective fields of his work being a memberof the technical committees of the Bureau of Indian Standards.

Manuscript received Dec 09, 2022. This work was supported by the Centre for Development of Advanced Computing, Hyderabad through a funded projectsponsored by the Ministry of Electronics and Information Technology, Government of India. The manuscript is submitted in the follow-up of the invitedjournal to the accepted and presented paper entitled “A Blockchain-based Security Information and Event Monitoring Framework” of the 25 th International
Conference on Advanced Communication Technology (2023).
N Satyanarayana is a Joint Director at the Centre for Development of Advanced Computing, Hyderabad, India. (e-mail: nanduris@cdac.in).