@inproceedings{40c8b68142cf4e288a721544c7a67aea,
title = "TraceBlock: Cyberattack Traceback System Based on Blockchain",
abstract = "With the continuous development of cyberattack techniques, attack provenance graph has become an important tool for network defense decision-making. Although existing research has made progress in the logical representation and automatic generation of provenance graphs, the provenance graphs constructed by single organization cannot support collaborative traceability. This paper proposes a blockchain-based cyberattack traceback system called TraceBlock to enable the sharing of graphs across multiple organizations. In TraceBlock system, alert records, which are raw data for contracting, are generated by hosts, securely transmitted by oracle, and filtered by CTI filter. The CTI filter uses a pre-trained model to identify critical threat intelligences (CTIs) and uploads CTIs to the blockchain network. Three smart contracts are deployed on the blockchain network, respectively responsible for CTI verification, provenance graph construction, and subgraph extraction. We conduct simulations using an open-source blockchain platform and the DARPA 1999 dataset. The results demonstrate the feasibility of the proposed system.",
keywords = "Blockchain, Provenance graph, Smart Contract, Subgraph extraction",
author = "Dagula and Lei Xu and Keke Gai and Liehuang Zhu",
note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Switzerland AG 2026.; 4th International Conference on Advanced Security on Software and Systems, ASSS 2025 ; Conference date: 03-12-2025 Through 05-12-2025",
year = "2026",
doi = "10.1007/978-3-032-21600-7\_2",
language = "English",
isbn = "9783032215994",
series = "Communications in Computer and Information Science",
publisher = "Springer Science and Business Media Deutschland GmbH",
pages = "17--34",
editor = "Weizhi Meng and Qingni Shen and Tao Zhang and Jing Yu",
booktitle = "Advanced Security on Software and Systems - International Conference, ASSS 2025, Proceedings",
address = "Germany",
}