Blockchain system and computer-implemented method for detecting an attack on a computer system or computer network

Abstract

The invention relates to a computer-implemented method for detecting an attack on a computer system or computer network, the method comprising the steps of: inserting an analysis means for the computer system or computer network as a smart contract into a blockchain having a plurality of blocks linked to one another; defining parameters for the analysis means; executing the analysis means on the basis of the parameters; and inserting the analysis result into the blockchain. At least a portion of the parameters corresponds to the behavior of the computer system or computer network and comprises a log file of the computer system or computer network.

Description

technical field [0001] The present invention relates to a blockchain system and a computer-implemented method for identifying attacks on a computer system or computer network. Background technique [0002] An Attack Identification System or Intrusion Detection System (IDS) is a system that actively monitors a computer system or computer network to identify possible attacks. [0003] For attack detection in an IDS, the following two techniques are used in principle: [0004] Signature-based (English: "signature-based") attack recognition works with attack patterns ("Angriffssignaturen" (attack signature)) stored in a database in order to monitor active systems. Attacks are identified by enabling the IDS to compare attack signatures from its own database with current system behavior. If the stored signature is consistent with the current system behavior, then the IDS infers the attack from it. [0005] Anomaly-based IDS attempts to detect attacks by identifying changes in s...

AI Technical Summary

Problems solved by technology

[0010] However, in such a central authority there is the problem that the whole ecosystem regards the authority as a central security node, which can lead to a so-called "single point of failure"

This also leads to the fact that a central analysis agency can be complex and costly

[0013] The high cost of the central authority accumulates on the operator's side, which may also destroy the corresponding business as it is not economically attractive

[0014] Furthermore, such systems are often complex in a central facility, since multiple clients must be served simultaneously

Images