@article {831,
	title = {Blockchain meets Internet of Things (IoT) forensics: A unified framework for IoT ecosystems},
	journal = {Internet of Things},
	year = {2023},
	month = {oct},
	pages = {100968},
	abstract = {<p>With the continuously increasing number of security incidents targeting sensors, embedded devices, and other electronics appliances and systems that comprise the so-called Internet of things (IoT), the field of IoT forensics emerged as a branch of digital forensics focusing on the investigation of attacks in the IoT ecosystem. Digital evidence authenticity, integrity, confidentiality, and privacy are among the factors affecting the investigation process in IoT forensics, which can be addressed by employing the blockchain as the means not only for the preservation of digital evidence, but also for other steps of a digital forensics investigation process. The high-level goal of the paper is three-fold: to establish a holistic IoT forensics process as a reference point against which blockchain integration patterns and best practices will be identified in order to yield a robust, widely accepted and scalable architecture of the blockchain-enabled solution; to integrate the blockchain with the proposed IoT forensics process for addressing the above challenges; and to evaluate the overall solution highlighting improvements and potential performance bottlenecks. The proposed blockchain-enabled platform leverages multi-access edge computing and has been implemented with Hyperledger Fabric on an extensive virtualized testbed providing a realistic smart home environment. A thorough evaluation was conducted with real cyber-attacks generating digital evidence at high rates for testing the platform{\textquoteright}s behavior at high load. The experimental results showed that the proposed platform achieved high throughput, excessively low latency, and zero error rate in the operation of the blockchain network.</p>
},
	keywords = {blockchain, cyber-security, Digital forensics, Edge computing, Internet of Things},
	doi = {10.1016/j.iot.2023.100968},
	url = {https://www.sciencedirect.com/science/article/pii/S2542660523002913},
	author = {Sotirios Brotsis and Konstantinos P. Grammatikakis and Dimitrios Kavallieros and Antonio I. Mazilu and Nicholas Kolokotronis and Konstantinos Limniotis and Costas Vassilakis}
}
@conference {Kolokotronis2019IEEESrv,
	title = {On Blockchain Architectures for Trust-based Collaborative Intrusion Detection},
	booktitle = {Proceedings of the 1st IEEE Services Workshop on Cyber Security and Resilience in the Internet Of Things, within IEEE Services 2019},
	year = {2019},
	publisher = {IEEE},
	organization = {IEEE},
	abstract = {This paper considers the use of novel technologies for mitigating attacks that aim at compromising intrusion detection systems (IDSs). Solutions based on collaborative intrusion detection networks (CIDNs) could increase the resilience against such attacks as they allow IDS nodes to gain knowledge from each other by sharing information. However, despite the vast research in this area, trust management issues still pose significant challenges and recent works investigate whether these could be addressed by relying on blockchain and related distributed ledger technologies. Towards that direction, the paper proposes the use of a trust-based blockchain in CIDNs, referred to as trust-chain, to protect the integrity of the information shared among the CIDN peers, enhance their accountability, and secure their collaboration by thwarting insider attacks. A consensus protocol is proposed for CIDNs, which is a combination of a proof-of-stake and proof-of-work protocols, to enable collaborative IDS nodes to maintain a reliable and tampered-resistant trust-chain.},
	keywords = {blockchain, collaborative intrusion detection, insider threats, security, trust management},
	author = {Nicholas Kolokotronis and Sotirios Brotsis and Georgios Germanos and Costas Vassilakis and Stavros Shiaeles}
}
