Download Publication
Who it's for:
- CISO
- CSO
- Blockchain Architects
- Security Architects
- Application and Smart Contract Developers
- Blockchain Network Administrators
Hyperledger Fabric 2.0 Architecture Security Controls Checklist
Release Date: 06/28/2021
Working Group: Blockchain/Distributed Ledger
Blockchain technology is being rapidly adopted by enterprises to bring traceability and transparency to external business workflows. Considering that many of these workflows involve transactions and custody of value in the form of digital assets or other high-value data, cybersecurity attributes such as privacy, confidentiality, integrity, and availability certainly take center stage in the blockchain space.
In this spreadsheet, we deliver a fully implementable security controls checklist for the blockchain framework Hyperledger Fabric 2.0. These controls are aligned with the NIST Cybersecurity Framework’s controls to proactively prevent, detect and respond to the risks of Fabric 2.0, thus mitigating the business impacts downstream caused by loss of trade, trust, and ownership. In the accompanying Hyperledger Fabric 2.0 Architecture Security Report, we identified the cybersecurity risks of implementing Hyperledger Fabric 2.0’s architecture as a permissioned blockchain enterprise network for a trade finance business in a cloud-based environment.
Key Takeaways:
Key Takeaways:
- Definitions for terms relating to Hyperledger Fabric and cybersecurity
- Descriptions for 156 controls
- The cybersecurity functional area for each control, allowing for clear lines of roles and responsibilities
- The architectural flaws or weaknesses that could be triggered or exploited to get access to the Fabric network
- How each control works to mitigate the listed vulnerability
This publication is part of a larger series on Securing DLT Frameworks for Financial Institutes. If you’re interested in learning more, you can find all the papers in the series here.
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
.jpeg)
.jpeg)
.jpeg)
.jpeg)
.jpg)
.jpg)
Interested in helping develop research with CSA?
Related Certificates & Training
.png){kind=logo}
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more