Information Technology

Blockchain Security Training

Instructor-Led 10 Agenda

Description

This course covers all known aspects of Blockchain security that exist in the Blockchain environment today and provides a detailed overview of all Blockchain security issues, including threats, risk mitigation, node security integrity, confidentiality, best security practices, advanced Blockchain security and more.

Course Overview

Course Objective

Those who attend the Security for Blockchain Professionals course and pass the exam certification will have a demonstrated knowledge of: Identifying and differentiating between security threats and attacks on a Blockchain network. Blockchain security methods, best practices, risk mitigation, and more. All known (to date) cyber-attack vectors on the Blockchain. Performing Blockchain network security risk analysis. A complete understanding of Blockchain’s inherent security features and risks. An excellent knowledge of best security practices for Blockchain System/Network Administrators. Demonstrating appropriate Blockchain data safeguarding techniques.

Who Should Attend

Blockchain Architects Blockchain Developers Application Developers Blockchain System Administrators Network Security Architects Cyber Security Experts IT Professionals w/cyber security experience

Fundamental Blockchain Security Cryptography for the Blockchain Hash Functions Lesson Id 1

Fundamental Blockchain Security Cryptography for the Blockchain Hash Functions

Consensus in the Blockchain Lesson Id 2

Consensus in the Blockchain

Advanced Blockchain Security Mechanisms Architectural Security Measures Permissioned Blockchains Lesson Id 3

Advanced Blockchain Security Mechanisms Architectural Security Measures Permissioned Blockchains

Blockchain Risk Assessment What are the Risks of the Blockchain? Lesson Id 4

Blockchain Risk Assessment What are the Risks of the Blockchain?

Basic Blockchain Security Blockchain Architecture Lesson Id 5

Basic Blockchain Security Blockchain Architecture

Smart Contract Security Introduction to Smart Contracts Lesson Id 6

Smart Contract Security Introduction to Smart Contracts

Network-Level Vulnerabilities and Attacks Introduction to Blockchain Network Attacks Lesson Id 7

Network-Level Vulnerabilities and Attacks Introduction to Blockchain Network Attacks

System-Level Vulnerabilities and Attacks Introduction to Blockchain System Vulnerabilities Lesson Id 8

System-Level Vulnerabilities and Attacks Introduction to Blockchain System Vulnerabilities

Smart Contract Vulnerabilities and Attacks Introduction to Common Smart Contract Vulnerabilities Lesson Id 9

Smart Contract Vulnerabilities and Attacks Introduction to Common Smart Contract Vulnerabilities

Security of Alternative DLT Architectures What Are Alternative DLT Architectures? Lesson Id 10

Security of Alternative DLT Architectures What Are Alternative DLT Architectures?

Lesson Id	Title	Description
1	Fundamental Blockchain Security Cryptography for the Blockchain Hash Functions	Public Key Cryptography<br />Elliptic Curve Cryptography<br />A Brief Introduction to Blockchain The Blocks<br />The Chains<br />The Network<br />Promises of the Blockchain<br />Blockchain Security Assumptions Digital Signature Security<br />Hash Function Security<br />Limitations of Basic Blockchain Security Public Key Cryptography Review<br />Real-Life Public Key Protection<br />Cryptography and Quantum Computers<br />Lab 1 (Tentative) Finding Hash Function Collisions Reversible hash function<br />Hash function with poor non-locality<br />Hash function with small search space<br />Breaking Public Key Cryptography Brute Forcing a Short Private Key<br />Brute Forcing a Poorly-Chosen Private Key
2	Consensus in the Blockchain	Blockchain Consensus and Byzantine Generals Blockchain Networking Review<br />Byzantine Generals Problem Relation to Blockchain<br />Byzantine Fault Tolerance<br />Introduction to Blockchain Consensus Security Blockchain Consensus Breakthrough<br />Proof of Work What is Proof of Work?<br />How does Proof of Work Solve BGP?<br />Proof of Work Security Assumptions<br />Attacking Proof of Work<br />Proof of Stake What is Proof of Stake?<br />How does Proof of Stake Solve BGP?<br />Proof of Stake Security Assumptions<br />Attacking Proof of Stake<br />General Attacks on Blockchain Consensus<br />Other Blockchain Consensus Algorithms<br />Lab 2 (Tentative) Attacking Proof of Work Performing a 51% Attack<br />Performing a Selfish Mining Attack<br />Attacking Proof of Stake Performing a XX% Attack<br />Performing a Long-Range Attack<br />Malleable Transaction Attacks
3	Advanced Blockchain Security Mechanisms Architectural Security Measures Permissioned Blockchains	Checkpointing<br />Advanced Cryptographic Solutions Multiparty Signatures<br />Zero-Knowledge Proofs<br />Stealth Addresses<br />Ring Signatures<br />Confidential Transactions<br />Lab 3 (Tentative) Permissioned Blockchains<br />51% on a Checkpointed Blockchain<br />Data mining on a blockchain with/without stealth addresses<br />Zero-Knowledge Proof Simulation<br />Trying to fake knowledge of a ZKP<br />Module 4: Blockchain for Business Introduction to Ethereum Security What is Ethereum<br />Consensus in Ethereum<br />Smart Contracts in Ethereum<br />Ethereum Security<br />Pros and Cons of Ethereum Blockchains<br />Introduction to Hyperledger Security What is Hyperledger<br />Consensus in Hyperledger<br />Smart Contracts in Hyperledger<br />Hyperledger Security<br />Pros and Cons of Hyperledger Blockchains<br />Introduction to Corda Security What is Corda<br />Consensus in Corda<br />Smart Contracts in Corda<br />Corda Security<br />Pros and Cons of Corda Blockchains<br />Lab 4
4	Blockchain Risk Assessment What are the Risks of the Blockchain?	Information Security<br />Information Sensitivity Data being placed on blockchain<br />Risks of disclosure<br />Regulatory Requirements Data encryption<br />Data control<br />PII protection<br />Blockchain Architectural Design Public and Private Blockchains<br />Open and Permissioned Blockchains<br />Choosing a Blockchain Architecture<br />Lab 5<br />Exploring public/private open/permissioned blockchains?
5	Basic Blockchain Security Blockchain Architecture	User Security Protecting Private Keys<br />Malware<br />Update<br />Node Security<br />Configuring MSPs<br />Network Security<br />Lab 6 (TBD)
6	Smart Contract Security Introduction to Smart Contracts	Smart Contract Security Considerations Turing-Complete<br />Lifetime<br />External Software<br />Smart Contract Code Auditing Difficulties<br />Techniques<br />Tools<br />Lab 7 (Tentative)<br />Try a couple of smart contract code auditing tool against different contracts with built-in vulnerabilities<br />Module 8: Security Implementing Business Blockchains Ethereum Best Practices<br />Hyperledger Best Practices<br />Corda Best Practices<br />Lab 8
7	Network-Level Vulnerabilities and Attacks Introduction to Blockchain Network Attacks	51% Attacks<br />Denial of Service Attacks<br />Eclipse Attacks<br />Routing Attacks<br />Sybil Attacks<br />Lab 9<br />Perform different network-level attacks
8	System-Level Vulnerabilities and Attacks Introduction to Blockchain System Vulnerabilities	The Bitcoin Hack<br />The Verge Hack<br />The EOS Vulnerability<br />Lab 10
9	Smart Contract Vulnerabilities and Attacks Introduction to Common Smart Contract Vulnerabilities	Reentrancy<br />Access Control<br />Arithmetic<br />Unchecked Return Values<br />Denial of Service<br />Bad Randomness<br />Race Conditions<br />Timestamp Dependence<br />Short Addresses<br />Lab 11<br />Exploiting vulnerable smart contracts
10	Security of Alternative DLT Architectures What Are Alternative DLT Architectures?	Introduction to Directed Acyclic Graphs (DAGs)<br />DAGs vs. Blockchains<br />Advantages of DAGs<br />DAG Vulnerabilities and Security<br />Lab 12<br />Exploring a DAG network