BAC-L2-SEC-101Blockchain security
Threat modelling a blockchain system
Before securing anything, know against whom: actors, motives, capabilities, budgets. A threat model without an attacker budget is decorative.
- Level
- L2 — Appchain developer
- Duration
- 4 h
- Track
- Blockchain security
- Maintainer
- Blockchain Security Engineer
Learning objectives
- 01Identify a system's assets, actors and attack surfaces
- 02Cost out a realistic attacker's budget
- 03Rank countermeasures by cost/benefit
Guided lab
Threat-model an agricultural traceability chain and rank the risks.
Independent lab
Threat-model your own capstone project and have a peer review it.
Security angle
The workshop establishes the method used by every later security review in the curriculum.
Assessment
Threat model assessed on the realism of its estimated attack budgets.