# Security Audit of a Blockchain-Based Industrial Application Platform
## 1 Introduction  
In industrial environments, there are a variety of digital technologies that can be categorized as \"Digital product innovation\", \"Cyber-physical systems\", \"Smart objects\" and \"Smart, connected products\" [1]. In industrial environments, \"industrial control systems\" or \"process control systems\" include automatic and semiautomatic monitoring, condition assessment, maintenance, management, and data collection [2]. Equipment operation and maintenance are major tasks in industrial production systems. An intelligent predictive maintenance system is considered a subcategory of Industry 4.0 [3]. The safety of personnel and equipment has to be provided as well, especially as production becomes increasingly automated. In the Fourth Industrial Revolution, sensors are used to detect abnormal conditions on the factory floor to protect machines and people [4]. With the increasing number of different parties forced to work together, it is difficult to establish a trusted partnership. Blockchain technology presents one possible solution to alleviate this problem. However, serious security concerns are emerging due to increased connectivity (e.g., IoT networks) and control outsourcing [5, 6]. Researchers have identified numerous potential attacks in the Industry 4.0 environment [7]. There are many general attacks on IT infrastructures in the literature, and most of them fall into four basic classes: physical, network, software, and data attacks.  
* Physical attacks are carried out by physically accessing the manufacturing environment. Attackers can change the location of measurement devices (e.g., sensors), destroy them, or disrupt power electronics [8]. Attacks on information technology include the following: tampering [9], sleep denial attack [10], and Permanent Denial of Service (PDoS) [11].
* Network attacks are carried out by manipulating the connections between different devices. In the age of the Internet of Things, devices and connections can be compromised from anywhere in the world. The most common forms of network attacks are traffic analysis attacks [9], routing information attacks [9], selective forwarding attacks [12], Sybil attacks [12], replay attacks [13], and DoS attacks [14].
* Software attacks are carried out by an attacker who manipulates software or exploits system vulnerabilities through malicious code injection [10]: viruses, worms, Trojan horses, spyware, adware [9], and malware [13].
* Data and encryption security are one of the main concerns in the industrial sector. Therefore, cloud-based offerings are viewed with skepticism in terms of security. The cloud can help improve security in cases where appropriate audit mechanisms are provided and firmware and software update procedures are managed. The main attacks on data attacks in this environment to avoid data inconsistency [15] are discussed. Attacks on encryption include side-channel attacks [16].
* Attacks on certificates and user accounts result in unauthorized access [11] and stolen identity [17].  
The goal is to further narrow this categorization with respect to the industrial environment and a system architecture based on a distributed ledger.