Blockchain news is seemingly everywhere these days, and for good reason. The technology behind bitcoin holds a lot of promise for all sorts of use cases — some of them having nothing to do with digital payments.

Over the course of last year, a lot of ideas regarding the technology were tried out, but “during 2017, many of them will be discarded,” one blockchain expert predicted. This year, efforts with related crypto technologies will get even more serious attention from corporate developers.

Expected Developments in 2017

One early initiative is the announcement in February from the Enterprise Ethereum Alliance. The group was formed to encourage a hybrid public/private approach to find best-of-breed solutions for corporate developers.

This mix of public and private methods makes the technology more palatable for a number of different corporate applications. For example, the use of an open-source code base can help attract developers to improve the code and add interoperable frameworks, yet also allow innovation to happen.

“Too often, private blockchain solutions are quickly dismissed by proponents of public network infrastructure,” said developer R Tyler Smith. Hopefully, that time is coming to a close.

One thing helping to expand blockchain’s reach in the past year has been the rise of blockchain-as-a-service (BaaS) offerings from major providers. Microsoft Azure Marketplace and IBM BlueMix are two of the most popular options for enterprises. It’s also interesting to note that Deloitte has a new BaaS offering as part of its blockchain consulting practice, and Amazon is beginning its own offering for AWS as well. Clearly there is a growing groundswell for BaaS.

How to Launch Blockchain Technology

So, how should an IT manager get started? First, look at the core reason for using the technology. “One thing that blockchains do extremely well is allow entities who do not trust one another to collaborate in a meaningful way,” said Smith. If you have to connect a wide partner network or quickly establish a trust relationship among a disparate group, it makes sense to look at blockchain.

Second, spend some time learning what is involved with the technology. Microsoft’s Virtual Academy covers the basics of the infrastructure with numerous training videos and white papers about how to deploy it. IBM also has an informative video on some security issues you should consider. You may also want to consider these well-known BaaS providers and try them both out. For instance, IBM makes it free to get started, and Microsoft’s service isn’t all that expensive for a small test configuration.

Finally, don’t be black and white on the issue of public or private blockchain, but consider a mix. Just like industry discussions on cloud computing have evolved away from an either/or deployment, the same will be the case for blockchain in the near future as the technology becomes a focus of collaboration.

More from Application Security

Critically close to zero(day): Exploiting Microsoft Kernel streaming service

10 min read - Last month Microsoft patched a vulnerability in the Microsoft Kernel Streaming Server, a Windows kernel component used in the virtualization and sharing of camera devices. The vulnerability, CVE-2023-36802, allows a local attacker to escalate privileges to SYSTEM. This blog post details my process of exploring a new attack surface in the Windows kernel, finding a 0-day vulnerability, exploring an interesting bug class, and building a stable exploit. This post doesn’t require any specialized Windows kernel knowledge to follow along, though…

Gozi strikes again, targeting banks, cryptocurrency and more

3 min read - In the world of cybercrime, malware plays a prominent role. One such malware, Gozi, emerged in 2006 as Gozi CRM, also known as CRM or Papras. Initially offered as a crime-as-a-service (CaaS) platform called 76Service, Gozi quickly gained notoriety for its advanced capabilities. Over time, Gozi underwent a significant transformation and became associated with other malware strains, such as Ursnif (Snifula) and Vawtrak/Neverquest. Now, in a recent campaign, Gozi has set its sights on banks, financial services and cryptocurrency platforms,…

Vulnerability management, its impact and threat modeling methodologies

7 min read - Vulnerability management is a security practice designed to avoid events that could potentially harm an organization. It is a regular ongoing process that identifies, assesses, and manages vulnerabilities across all the components of an IT ecosystem. Cybersecurity is one of the major priorities many organizations struggle to stay on top of. There is a huge increase in the number of cyberattacks carried out by cybercriminals to steal valuable information from businesses. Hence to encounter these attacks, organizations are now focusing…

X-Force releases detection & response framework for managed file transfer software

5 min read - How AI can help defenders scale detection guidance for enterprise software tools If we look back at mass exploitation events that shook the security industry like Log4j, Atlassian, and Microsoft Exchange when these solutions were actively being exploited by attackers, the exploits may have been associated with a different CVE, but the detection and response guidance being released by the various security vendors had many similarities (e.g., Log4shell vs. Log4j2 vs. MOVEit vs. Spring4Shell vs. Microsoft Exchange vs. ProxyShell vs.…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today