A Blockchain-Based Risk and Information System Control Framework

Shenglan Ma; Wang Hao; Hong-Ning Dai; Shuhan Cheng; Ruihua Yi; Tongsen Wang

doi:10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

A Blockchain-Based Risk and Information System Control Framework

Shenglan Ma, Wang Hao^*, Hong-Ning Dai, Shuhan Cheng, Ruihua Yi, Tongsen Wang

^*Corresponding author for this work

Department of Computer Science

Research output: Chapter in book/report/conference proceeding › Conference proceeding › peer-review

17 Citations (Scopus)

Abstract

Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.

Original language	English
Title of host publication	Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018
Publisher	IEEE
Pages	106-113
Number of pages	8
Edition	1st
ISBN (Electronic)	9781538675182
ISBN (Print)	9781538675199
DOIs	https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031
Publication status	Published - 12 Aug 2018
Event	16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018 - Athens, Greece Duration: 12 Aug 2018 → 15 Aug 2018 https://ieeexplore.ieee.org/xpl/conhome/8511011/proceeding (Conference proceedings) https://dblp.org/db/conf/dasc/dasc2018.html (Conference proceedings)

Publication series

Name	Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec

Conference

Conference	16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018
Country/Territory	Greece
City	Athens
Period	12/08/18 → 15/08/18
Internet address	https://ieeexplore.ieee.org/xpl/conhome/8511011/proceeding (Conference proceedings) https://dblp.org/db/conf/dasc/dasc2018.html (Conference proceedings)

Scopus Subject Areas

Computer Networks and Communications
Information Systems
Artificial Intelligence
Information Systems and Management
Safety, Risk, Reliability and Quality
Control and Optimization

User-Defined Keywords

risk and information system control framework
blockchain
risk association tree
smart contract

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

Cite this

Ma, S., Hao, W., Dai, H.-N., Cheng, S., Yi, R., & Wang, T. (2018). A Blockchain-Based Risk and Information System Control Framework. In Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018 (1st ed., pp. 106-113). (Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec). IEEE. https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

Ma, Shenglan ; Hao, Wang ; Dai, Hong-Ning et al. / A Blockchain-Based Risk and Information System Control Framework. Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. 1st. ed. IEEE, 2018. pp. 106-113 (Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec).

@inproceedings{e68c7df6528c486a8885bf7baf41d466,

title = "A Blockchain-Based Risk and Information System Control Framework",

abstract = "Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.",

keywords = "risk and information system control framework, blockchain, risk association tree, smart contract",

author = "Shenglan Ma and Wang Hao and Hong-Ning Dai and Shuhan Cheng and Ruihua Yi and Tongsen Wang",

note = "Publisher Copyright: {\textcopyright} 2018 IEEE.; 16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018 ; Conference date: 12-08-2018 Through 15-08-2018",

year = "2018",

month = aug,

day = "12",

doi = "10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031",

language = "English",

isbn = "9781538675199",

series = "Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec",

publisher = "IEEE",

pages = "106--113",

booktitle = "Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018",

address = "United States",

edition = "1st",

url = "https://ieeexplore.ieee.org/xpl/conhome/8511011/proceeding, https://dblp.org/db/conf/dasc/dasc2018.html",

}

Ma, S, Hao, W, Dai, H-N, Cheng, S, Yi, R & Wang, T 2018, A Blockchain-Based Risk and Information System Control Framework. in Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. 1st edn, Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec, IEEE, pp. 106-113, 16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018, Athens, Greece, 12/08/18. https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

A Blockchain-Based Risk and Information System Control Framework. / Ma, Shenglan; Hao, Wang; Dai, Hong-Ning et al.
Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. 1st. ed. IEEE, 2018. p. 106-113 (Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec).

Research output: Chapter in book/report/conference proceeding › Conference proceeding › peer-review

TY - GEN

T1 - A Blockchain-Based Risk and Information System Control Framework

AU - Ma, Shenglan

AU - Hao, Wang

AU - Dai, Hong-Ning

AU - Cheng, Shuhan

AU - Yi, Ruihua

AU - Wang, Tongsen

PY - 2018/8/12

Y1 - 2018/8/12

N2 - Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.

AB - Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.

KW - risk and information system control framework

KW - blockchain

KW - risk association tree

KW - smart contract

UR - http://www.scopus.com/inward/record.url?scp=85056866296&partnerID=8YFLogxK

U2 - 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

DO - 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

M3 - Conference proceeding

AN - SCOPUS:85056866296

SN - 9781538675199

T3 - Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec

SP - 106

EP - 113

BT - Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018

PB - IEEE

T2 - 16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018

Y2 - 12 August 2018 through 15 August 2018

ER -

Ma S, Hao W, Dai HN, Cheng S, Yi R, Wang T. A Blockchain-Based Risk and Information System Control Framework. In Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. 1st ed. IEEE. 2018. p. 106-113. (Proceedings - IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE International Conference on Pervasive Intelligence and Computing, IEEE International Conference on Big Data Intelligence and Computing and IEEE Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec). doi: 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

A Blockchain-Based Risk and Information System Control Framework

Abstract

Publication series

Conference

Scopus Subject Areas

User-Defined Keywords

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this