## 1 Introduction
Hence, any direct or indirect effects on the data used for detecting the attacks will affect the data's immutability and the whole detection systems' results and thus its trustworthiness. In addition, ensuring the reliability of detection systems is another challenge facing this kind of detection technique [15] The reliability challenge comes from the fact that there is a need to ensure that the detection results provided by the attack detection techniques are correct and accurate. If the target system is a distributed system, there is a possibility that the results may be subjected to change if they have not been stored and transmitted securely. At the same time, the detection results have to be easily accessible without any access restrictions caused by security requirements. Hence, achieving the reliability for attack detection techniques that work for distributed systems is essential and must be achieved by balancing data security and accessibility. Therefore, and as a motivation for this research, more investigations to address these challenges are required. From another perspective, blockchain has emerged as a cryptographic distributed data structure named \"blocks\" that can be shared and replicated among the independent network participants in a reliable manner [16]. Accordingly, blockchain has several characteristics compared to other related technologies providing similar services, such as a distributed database. For instance, blockchain is a distributed peer-to-peer data structure and network with no trusted third parties between its participants. Thus, the concept of trusted third parties to serve as intermediaries in the blockchain is meaningless and \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Detection Approach** & **Detected Attacks’** & **False-Positive Detected Attacks’ Behaviours** & **Undetected Attacks’ Behaviours** \\ \hline Signature-based approach & Well-known attacks’ behaviours & None & Unknown/zero-day attacks’ behaviours \\ \hline Anomaly-based approach & Abnormal target system behaviours & Normal, but unusual target system behaviours & None \\ \hline Specification-basedapproach & Any abnormal target system behaviours & None & None \\ \hline \hline \end{tabular}
\end{table} 
Table 1: The difference between detection approaches. unnecessary [17]. In addition, blockchain is a shared, decentralised, and replicated ledger, where this ledger is readable, but it is append-only and cannot be removed or updated [18]. Nevertheless, blockchain can be considered an application layer on top of many other forms of networks to easily interact with other Internet services and technologies [19]. In Table 2 below, the most important differences between blockchain and distributed databases are summarised to demonstrate the significance of blockchain technology [20; 21]. From another perspective, blockchain networks can generally be categorised into two types: (1) Public-permissionless blockchain is an open network where any willing participant can join this network and view, read, and write blockchain. The availability of stored data and the full decentration from any form of authority are the main features of the public blockchain. However, confidentiality and privacy are not provided for public blockchain data. (2) A private-permissioned blockchain is a private network that allows predefined entries of verified participants, which private businesses prefer. While private blockchain does not achieve full decentralisation, it still achieves the blockchain principles for stored data in a distributed, private, and secure manner [22]. In fact, blockchain relies principally on consensus algorithms which are considered the backbone of the blockchain. Consensus algorithms are \"protocol sets that provide a technique with the help of which the users or machines can coordinate in a distributed and decentralised setting\" [23].