Ethereum is a system for decentralized applications that uses blockchains, but in a completely different manner than how they are used in bitcoin.

The Basic Framework

Ethereum has at its core a way to apply arbitrary rules for ownership, transaction formats and state transition functions — taking both the state of a blockchain and a transaction for that chain, and then outputting a new state as its result. It does this by way of an internal scripting language that is aware of a system’s state while being Turing-complete, which means it can encode any computation that may be performed by the system.

The state is made of objects called accounts, which have a 20-byte address and state transitions that exist between accounts. Accounts have four fields: a nonce, so each transaction is processed only once; a balance of ether, or the internal numbers used to pay fees; a contract code that may be empty; and storage, which may also be empty.

Types of Ethereum Accounts

There are two kinds of Ethereum accounts: externally owned and contract accounts. Externally owned accounts are controlled by private keys and contain no code. Sending messages from an externally owned account is done by creating and signing a transaction.

Contract accounts are controlled by their contract code. Every time the contract account receives a message, its code activates, allowing it to read and write to internal storage, send other messages or create contracts in turn.

It must be understood that contract here does not mean a legal arrangement: It is instead an agent inside the framework that executes code when it is stimulated by a message or transaction. It also has control over its own ether balance as well as other internal variables.

Other words have special meanings here. Gas isn’t gasoline, but the cost of one computation step. The value may be higher or lower, depending on the difficulty of the computation. Each transaction sets a limit on how many computational steps it can use by using Gas to specify the upper bound. Thus, Gas is the fuel powering computation; when you run out of Gas, execution stops.

Code inside of contracts is written in Ethereum virtual machine (EVM) code, a series of bytes each representing an operation. It is much like assembly code in concept. Serpent is a higher-level language that compiles to EVM.

What Does This Mean for the IoT?

Blockchains are at their heart a time-stamped (or other unique identifier) ledger of transactions. It’s the transactions involved in the Internet of Things (IoT) ecosystem where the system will shine: Because one can trigger computation or other code action with an Ethereum account message, an IoT device can be controlled if it is connected to an Ethereum-based network.

Work has already begun to develop a comprehensive system of IoT control using Ethereum as a component, according to the IBM report “Device Democracy: Saving the Future of the Internet of Things.” As this paper puts it, “The greatest challenge, however, is not in simply building a decentralized IoT, but one that can scale universally while maintaining private, secure and trustless transactions. In other words, the IoT represents a case of billions of players, not all of which can be trusted — some even malicious — with a need for some form of validation and consensus. And for this, the ‘blockchain’ offers a very elegant solution.”

Ethereum is a more full-featured way to use blockchain technology than bitcoin, which was designed only for financial purposes. By including the ability to use internal executable code, far more can be done with it. And that is what the IoT will require.

At this point, the framework is in its Frontier release. That means it is best suited for developers or other early adopters. That also means that it is a wide-open field in terms of competition and usage. For the strong of heart, opportunities abound to either succeed or fail.

The Time Has Come

Major players have finally come to see the opportunities and disruptions that blockchain technology can cause for their operational and financial assumptions. While they are now aware of alternatives, nothing has yet been set in stone.

While this framework could implement a cryptocurrency, it can do much more than that. It is generalized, not specialized. The practical limits of what it can do are yet to be determined.

Now is the time when developers have the maximum opportunity: What they come up with in these early stages can be considered by those who will implement it outside of a closed environment. Ethereum is up on Github for all to use. Making a useful product from it will not be easy and will require learning an unfamiliar environment. Better start now.

More from Cloud Security

How I got started: Cloud security engineer

3 min read - In today’s increasingly cloud-focused business environment, cloud security engineers are pivotal in protecting an organization’s critical data and infrastructure. As experts in cloud security, they leverage their expertise to ensure that the ever-expanding amount of cloud data is safe from emerging threats and vulnerabilities. Cloud security professionals combine their passion for technology with a deep understanding of security principles to design and implement robust cloud security strategies. What experience do these security experts have, and what led them to the…

“Authorized” to break in: Adversaries use valid credentials to compromise cloud environments

4 min read - Overprivileged plaintext credentials left on display in 33% of X-Force adversary simulations Adversaries are constantly seeking to improve their productivity margins, but new data from IBM X-Force suggests they aren’t exclusively leaning on sophistication to do so. Simple yet reliable tactics that offer ease of use and often direct access to privileged environments are still heavily relied upon. Today X-Force released the 2023 Cloud Threat Landscape Report, detailing common trends and top threats observed against cloud environments over the past…

Lessons learned from the Microsoft Cloud breach

3 min read - In early July, the news broke that threat actors in China used a Microsoft security flaw to execute highly targeted and sophisticated espionage against dozens of entities. Victims included the U.S. Commerce Secretary, several U.S. State Department officials and other organizations not yet publicly named. Officials and researchers alike are concerned that Microsoft products were again used to pull off an intelligence coup, such as during the SolarWinds incident. In the wake of the breach, the Department of Homeland Security…

What you need to know about protecting your data across the hybrid cloud

6 min read - The adoption of hybrid cloud environments driving business operations has become an ever-increasing trend for organizations. The hybrid cloud combines the best of both worlds, offering the flexibility of public cloud services and the security of private on-premises infrastructure. We also see an explosion of SaaS platforms and applications, such as Salesforce or Slack, where users input data, send and download files and access data stored with cloud providers. However, with this fusion of cloud resources, the risk of data…