Contracts are a widely used instrument for regulating the interaction between individuals and ensuring their rights and obligations. With the advent of technology in this field, contracts have also found their automated version, the so-called "smart contracts", best known for the platform supporting their execution and storage, i.e., the blockchain. Recognizing the benefits of contract automation, many companies have begun to embrace this technology, automating part or all of their business rules through it. Since the operations contained in smart contracts follow an execution logic, they can be viewed and modelled as business processes. However if their translation from business processes into smart contracts does not take into account security principles, serious problems may arise. In light of this consideration, this thesis will develop a Model-to-Text (M2T) approach to ensure the enforcement of security requirements in smart contracts, represented as business processes. In particular, among all blockchain providers, and thus of smart contracts, the one under analysis will be Corda R3, which is already endowed with structural features favorable to the satisfaction of certain security principles. Instead, "SecBPMN2BC" will be adopted as the input modelling language to represent smart contracts as business processes, being it an extension of BPMN (Business Process Modelling Notation 2.0) enriched with blockchain-specific security requirements. To validate the solution, a set of real case studies will be submitted as input to the M2T generation code conceived.
I contratti sono uno strumento ampiamente utilizzato per regolare l'interazione tra gli individui e garantire i loro diritti e doveri. Con l'avvento della tecnologia in questo campo, anche i contratti hanno trovato la loro versione automatizzata, i cosiddetti "smart contract", meglio conosciuti per la piattaforma a supporto della loro esecuzione e memorizzazione, ovvero la blockchain. Riconosciuti i vantaggi dell'automazione dei contratti, molte aziende hanno iniziato ad abbracciare questa tecnologia, automatizzando parte o tutte le loro regole aziendali attraverso di essa. Dal momento che le operazioni contenute negli smart contracts seguono una logica di esecuzione, essi possono essere visti e modellati come processi aziendali. Tuttavia, se la loro traduzione da processi aziendali a smart contracts non tiene conto di principi di sicurezza, seri problemi possono emergere. Alla luce di questa considerazione, questa tesi svilupperà un approccio Model-to-Text (M2T) per garantire l'applicazione dei requisiti di sicurezza negli smart contracts rappresentati come processi aziendali. In particolare, tra tutti i provider blockchain, e dunque di smart contracts, quella oggetto di analisi sarà Corda R3, già dotata di caratteristiche strutturali favorevoli al soddisfacimento di alcuni principi di sicurezza. Invece, come linguaggio di modellazione di input per rappresentare gli smart contracts come processi aziendali, verrà adottato "SecBPMN2BC", un'estensione di BPMN (Business Process Modelling Notation 2.0) arricchita da requisiti di sicurezza specifici per il settore blockchain. Per validare la soluzione, un set di casi di studio reali sarà sottomesso in input al codice di generazione M2T concepito.
A model-driven approach for secure smart contracts in Corda R3
Iuliano, Fabiana
2022/2023
Abstract
Contracts are a widely used instrument for regulating the interaction between individuals and ensuring their rights and obligations. With the advent of technology in this field, contracts have also found their automated version, the so-called "smart contracts", best known for the platform supporting their execution and storage, i.e., the blockchain. Recognizing the benefits of contract automation, many companies have begun to embrace this technology, automating part or all of their business rules through it. Since the operations contained in smart contracts follow an execution logic, they can be viewed and modelled as business processes. However if their translation from business processes into smart contracts does not take into account security principles, serious problems may arise. In light of this consideration, this thesis will develop a Model-to-Text (M2T) approach to ensure the enforcement of security requirements in smart contracts, represented as business processes. In particular, among all blockchain providers, and thus of smart contracts, the one under analysis will be Corda R3, which is already endowed with structural features favorable to the satisfaction of certain security principles. Instead, "SecBPMN2BC" will be adopted as the input modelling language to represent smart contracts as business processes, being it an extension of BPMN (Business Process Modelling Notation 2.0) enriched with blockchain-specific security requirements. To validate the solution, a set of real case studies will be submitted as input to the M2T generation code conceived.| File | Dimensione | Formato | |
|---|---|---|---|
|
Executive_Summary___Fabiana_Iuliano.pdf
accessibile in internet solo dagli utenti autorizzati
Descrizione: Executive_Summary_Iuliano_Fabiana
Dimensione
457.08 kB
Formato
Adobe PDF
|
457.08 kB | Adobe PDF | Visualizza/Apri |
|
Thesis___Fabiana_Iuliano.pdf
accessibile in internet solo dagli utenti autorizzati
Descrizione: Thesis_Iuliano_Fabiana
Dimensione
3.9 MB
Formato
Adobe PDF
|
3.9 MB | Adobe PDF | Visualizza/Apri |
I documenti in POLITesi sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
https://hdl.handle.net/10589/208936