# Security Audit of a Blockchain-Based Industrial Application Platform
## 3 Attacker Goals, Resources, and Capabilities
### Attack Classification  
This section presents a classification of the different types of attacks on infrastructure consisting of the hardware and software parts, the communication channel used for data exchange, the data itself, the encryption used to protect the data from attacks, and roles in the area of device and user identification. A complete overview is provided by Table 1. Starting from the left, the individual types of attacks are broken down into more detailed subcategories the further you follow the table to the right. For example, the type of attack \"infrastructure\" breaks down into the subcategories hardware and software. These two subcategories, hardware and software, are each broken down further to show each individual attack type and the corresponding targets. As an example, the index A-IH-NT-CM represents an attack on a condition monitoring system that is assigned to the attack type infrastructures--hardware--node tampering. The other attacks mentioned are structured similarly. Each entry of the Table 1 is discussed in the following subsections.  
Figure 3: Types of attacks, adapted from [32].  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Index** & **Types of Attacks** & **Target** \\ \hline A-IH-NT-CM & & & Condition Monitoring \\ A-IH-NT-LM & & & Legacy Machine \\ A-IH-NT-NG & & & Network Gateway \\ A-IH-NT-OPC & & & OPC UA Server \\ A-IH-NT-SN & & & Sensor \\ A-IH-MCI-LM & & Hardware & \\ A-IH-MCI-OPC & & & Legacy Machine \\ A-IH-MCI-SN & Infrastructure & & OPC UA Server \\ A-IH-SDA-LM & & & Sensor \\ \hline A-IS-MW-ADB & & & Auxiliary DB \\ A-IS-MW-CM & & & Condition Monitoring \\ A-IS-MW-OPC & & & Projan, Virus, and Worms \\ A-IS-MW-SN & & Software & & Sensor \\ A-IS-TJ-CP & & & Client to Peers \\ A-IS-TJ-PB & & & Peers in Blockchain \\ \hline A-C-RT-CM & & & Condition Monitoring \\ A-C-RT-LM & & & Legacy Machine \\ A-C-RT-NG & & & Network Gateway \\ A-C-RT-OPC & & & OPC UA Server \\ A-C-RT-SN & & & Sensor \\ \hline A-C-RP-CP & & & Client to Peers \\ A-C-RP-PB & & & Peers in Blockchain \\ A-C-RP-SN & & & Sensor \\ \hline A-D-AH-CM & & & Selective Forwarding & Client to Peer \\ A-D-AH-OPC & & & Account Hijacking & \begin{tabular}{c} Condition Monitoring \\ OPC UA Server \\ \end{tabular} \\ A-D-BFA-CM & & & & \\ A-D-BFA-CM & & & Brute Force Attack & \begin{tabular}{c} Condition Monitoring \\ OPC UA Server \\ \end{tabular} \\ A-D-DI-ADB & & & Data Inconsistency & Auxiliary DB \\ A-D-MSC-PB & & & Malicious Smart Contracts & Peers in Blockchain \\ A-D-SD-NG & & & Sensor/User Data & \begin{tabular}{c} Network Gateway \\ OPC UA Server \\ Sensor \\ \end{tabular} \\ A-D-SD-OPC & & & Sensor/User Data & \begin{tabular}{c} Network Gateway \\ OPC UA Server \\ Sensor \\ \end{tabular} \\ A-D-UA-ADB & & & Unauthorized Access & Auxiliary DB \\ \hline A-E-SCA-OPC & & Encryption & Side Channel Attack & \
\begin{tabular}{c} OPC UA Server \\ Peers in Blockchain \\ \end{tabular} \\ A-RDI-SF-SN & & Device Identification & Spoofing & Sensor \\ \cline{3-3} A-RDI-SA-ADB & & Sybil Attack & Auxiliary DB \\ \cline{3-3} A-RUI-PA-ADB & & User Identification & Password Attack &
\begin{tabular}{c} Auxiliary DB \\ Condition Monitoring \\ OPC UA Server \\ \end{tabular} \\ A-RUI-PA-OPC & & & & \\ \hline \hline \end{tabular}
\end{table}
Table 1: Overview of Attacks.