A blockchain-based risk and information system control framework

Shenglan MA; Hao WANG; Hong Ning DAI; Shuhan CHENG; Ruihua YI; Tongsen WANG

doi:10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

A blockchain-based risk and information system control framework

Shenglan MA, Hao WANG^*, Hong Ning DAI, Shuhan CHENG, Ruihua YI, Tongsen WANG

^*Corresponding author for this work

Research output: Book Chapters | Papers in Conference Proceedings › Conference paper (refereed) › Research › peer-review

7 Citations (Scopus)

Abstract

Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.

Original language	English
Title of host publication	Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	114-120
Number of pages	7
ISBN (Electronic)	9781538675182
DOIs	https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031
Publication status	Published - 29 Oct 2018
Externally published	Yes
Event	16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018 - Athens, Greece Duration: 12 Aug 2018 → 15 Aug 2018

Publication series

Name	Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018

Conference

Conference	16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018
Country/Territory	Greece
City	Athens
Period	12/08/18 → 15/08/18

Bibliographical note

Funding Information:
VI. ACKNOWLEDGEMENT This work is partially funded by the Fujian Fumin Foundation and partially supported by the National Natural Science Foundation of China under Grant No. 61672170 and the Science and Technology Planning Project of Guangdong Province under Grant No. 2017A050501035.

Publisher Copyright:
© 2018 IEEE.

Keywords

Blockchain
Risk and information system control framework
Risk association tree
Smart contract

Access to Document

10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

Cite this

MA, S., WANG, H., DAI, H. N., CHENG, S., YI, R., & WANG, T. (2018). A blockchain-based risk and information system control framework. In Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018 (pp. 114-120). [8511874] (Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

MA, Shenglan ; WANG, Hao ; DAI, Hong Ning ; CHENG, Shuhan ; YI, Ruihua ; WANG, Tongsen. / A blockchain-based risk and information system control framework. Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. Institute of Electrical and Electronics Engineers Inc., 2018. pp. 114-120 (Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018).

@inproceedings{bec7a5b0715b4661b888021b443d02f0,

title = "A blockchain-based risk and information system control framework",

abstract = "Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.",

keywords = "Blockchain, Risk and information system control framework, Risk association tree, Smart contract",

author = "Shenglan MA and Hao WANG and DAI, {Hong Ning} and Shuhan CHENG and Ruihua YI and Tongsen WANG",

note = "Funding Information: VI. ACKNOWLEDGEMENT This work is partially funded by the Fujian Fumin Foundation and partially supported by the National Natural Science Foundation of China under Grant No. 61672170 and the Science and Technology Planning Project of Guangdong Province under Grant No. 2017A050501035. Publisher Copyright: {\textcopyright} 2018 IEEE.; 16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018 ; Conference date: 12-08-2018 Through 15-08-2018",

year = "2018",

month = oct,

day = "29",

doi = "10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031",

language = "English",

series = "Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "114--120",

booktitle = "Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018",

address = "United States",

}

MA, S, WANG, H, DAI, HN, CHENG, S, YI, R & WANG, T 2018, A blockchain-based risk and information system control framework. in Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018., 8511874, Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018, Institute of Electrical and Electronics Engineers Inc., pp. 114-120, 16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018, Athens, Greece, 12/08/18. https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

A blockchain-based risk and information system control framework. / MA, Shenglan; WANG, Hao; DAI, Hong Ning; CHENG, Shuhan; YI, Ruihua; WANG, Tongsen.

Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. Institute of Electrical and Electronics Engineers Inc., 2018. p. 114-120 8511874 (Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018).

Research output: Book Chapters | Papers in Conference Proceedings › Conference paper (refereed) › Research › peer-review

TY - GEN

T1 - A blockchain-based risk and information system control framework

AU - MA, Shenglan

AU - WANG, Hao

AU - DAI, Hong Ning

AU - CHENG, Shuhan

AU - YI, Ruihua

AU - WANG, Tongsen

N1 - Funding Information: VI. ACKNOWLEDGEMENT This work is partially funded by the Fujian Fumin Foundation and partially supported by the National Natural Science Foundation of China under Grant No. 61672170 and the Science and Technology Planning Project of Guangdong Province under Grant No. 2017A050501035. Publisher Copyright: © 2018 IEEE.

PY - 2018/10/29

Y1 - 2018/10/29

N2 - Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.

AB - Risk and Information System Control Framework in business includes the methods and processes to manage risks and seize opportunities which involve identifying particular risk events relevant to the objectives, assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. In order to provide better support for the backtracking, traceability, irreversibility, and credible requirements of risk registration table data in the framework, this paper proposes a blockchain-based risk and information system control framework. A risk association tree is designed for combining summarized risk item ledgers with risk assessment ledgers and risk response ledgers based on the Merkle Tree. Three proposed smart contracts are used in risk identification, risk assessment, risk response and mitigation, and risk and control monitoring and reporting processes. We implement a prototype for this framework.

KW - Blockchain

KW - Risk and information system control framework

KW - Risk association tree

KW - Smart contract

UR - http://www.scopus.com/inward/record.url?scp=85056866296&partnerID=8YFLogxK

U2 - 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

DO - 10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

M3 - Conference paper (refereed)

AN - SCOPUS:85056866296

T3 - Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018

SP - 114

EP - 120

BT - Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 16th IEEE International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018

Y2 - 12 August 2018 through 15 August 2018

ER -

MA S, WANG H, DAI HN, CHENG S, YI R, WANG T. A blockchain-based risk and information system control framework. In Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018. Institute of Electrical and Electronics Engineers Inc. 2018. p. 114-120. 8511874. (Proceedings - IEEE 16th International Conference on Dependable, Autonomic and Secure Computing, IEEE 16th International Conference on Pervasive Intelligence and Computing, IEEE 4th International Conference on Big Data Intelligence and Computing and IEEE 3rd Cyber Science and Technology Congress, DASC-PICom-DataCom-CyberSciTec 2018). https://doi.org/10.1109/DASC/PiCom/DataCom/CyberSciTec.2018.00031

A blockchain-based risk and information system control framework

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this