start	end	text
0	5200	Another author of this presentation is Seungjoo Kim.
5260	10340	In this presentation, we prepared together, but only I speak.
10340	18900	The title is Blockchain for Cyber Defense and Will It Be Good As You Think? is our topic.
19080	27440	It's 5 a.m. in Korea, so I think the condition is not normal, but I hope you understand.
36920	42040	Again, I'm Seungri Lee, and I'm a Ph.D. student at Korea University.
42260	45460	I'm the captain of the Republic of Korean Army.
45520	50660	I have three years' experience as a researcher in the Agency for Defense Development.
50660	56580	It's about the development of the defense and armed system.
56940	62120	As a security researcher, I'm interested in network security and cyber defense.
63340	77200	About blockchain, I was a speaker of CryBlock 2019 at IEEE Infocom.
77520	82120	The title was Countering Block Withholding Attack Efficiently.
82240	88540	Also, I will speak at CryBlock 2020 at ACM Mobicom.
88540	101560	It will be September, and the title will be No Prosperous Take Has Taken Predatory Destructive Attack on Prosperous Take Cryptocurrencies.
101560	108760	It will be about a novel attack methodology about POS cryptocurrency.
109760	116360	It's not about research. I like to get groundbreaking ideas from philosophy.
116360	123180	My favorite philosophers are Derrida, Nietzsche, Foucault, and Wittgenstein.
123180	127980	Another author of this presentation is Seungju Kim.
127980	135460	He's my advisor, and he's a professor of cybersecurity at Korea University.
135460	147680	He's a reviewer in several international hacking conferences like Black Hat Asia and Secure Insight.
147680	151900	He's also an advisor of an undergraduate hacking club, Cyker.
152780	158440	The hacking group Cyker is now competing in DEF CON online.
158440	176640	His main research areas are focused on trustworthy systems, development methodology, secure SDLC, RMAF, common criteria, CMVP, blockchain, etc.
178060	182940	So our topics are, what is blockchain for cyber defense?
182940	193200	Maybe many of you are blockchain professionals but not familiar with cyber defense or blockchain for cyber defense.
193260	209400	Our main discussions are challenges in cyber defense, and then we will talk about related military projection analysis.
210220	213600	As a summary, we will talk about takeaway.
220490	224130	Targets of this talk are four kinds of people.
224650	242530	Someone interested in blockchain, someone interested in cyber defense, and someone interested in how blockchain can be hacked, and someone who needs fresh ideas.
244150	247890	Who doesn't know blockchain or what is cyber defense?
247890	255950	I hope this talk will give you fresh ideas about this topic or any ideas.
259270	262250	So blockchain for cyber defense, what is it?
262250	267170	Maybe you know what is blockchain.
267170	273110	Actually, blockchain is not clearly defined.
273110	278510	Blockchain is started from Bitcoin founded by Satoshi Nakamoto.
278510	293210	In his white paper, he didn't write clear definition of blockchain, but his main topic was Bitcoin.
294450	301310	In my thought, I think blockchain is constructed by three concepts.
301310	307570	Maybe some can think differently because the start of blockchain was not clearly defined.
307570	323910	One is, as a data structure, hash chain blocks, as a network structure, distributed network, and as a consensus structure, decentralized consensus.
324650	335810	And it has some fundamental problems.
335810	337750	It's called trilemma.
337750	341310	Scalability, security, and decentralization.
341310	349410	Three kinds of characteristics can be satisfied at the same time.
351230	353310	Then what is cyber defense?
353310	358930	Maybe some of you know, but maybe majority of you don't know.
358930	360710	This picture is just for fun.
360710	362510	It's not like cyber defense.
363150	365190	It's just funny.
367310	369370	So what is cyber defense?
369370	377330	Before I talk about this, I should define what is cyber security.
377330	388570	Classically, many people talk about information security, but also many people just talk about cyber security like information security.
388570	402510	If cyber security is the same as information security, then it's not worth to talk about cyber security or name cyber security.
402510	412670	So I bring a clear and distinguishable definition from the reference at the bottom you can see.
413130	422230	In their research, they define cyber security as treating stress using ICT.
422230	424550	Then what is classical information security?
424550	429870	Information security is treating stress to information-based assets.
429870	435110	But cyber security is treating any stress using ICT.
435610	438990	ICT is information and communication technology.
438990	446550	For example, car accident is not included in information security.
446550	457690	But if car accident is by a car remotely controlled by a hacker, then it is included in cyber security domain.
457690	461930	Now we can define what is cyber defense.
462830	469410	Cyber defense is intersection of cyber security and national security or national defense.
469410	477830	National security and national defense are used in the same way many times.
479650	488990	Not only cyber defense is about military defense, but widely it's all about national security.
489570	491850	So why is it like that?
491850	494950	You can see in the picture.
495670	504670	At the past, the stress to countries was through only military domain.
504670	511310	They should overcome armed forces, army, air force, and navy.
512610	520270	So general physical stress on defense is through military area.
520270	530930	But non-military domain, including severe assets and critical infrastructures, are covered by military domain.
530930	539030	But these days, they can be attacked directly by ICT, information and communication technologies.
539030	554310	For example, they can hack the plant and hack the financial systems and hack governmental information systems.
554350	558230	It's already happened.
558230	563810	In 2007, cyber attack to Estonia was really severe.
563810	568670	That's the beginning of the CCTCOE in NATO.
568730	573770	In 2010, Stuxnet to Iranian nuclear facilities.
573770	585070	It was shocking accident that computer virus can stop the nuclear targets and stop nuclear plant.
585070	593230	In 2015, Black Energy temporarily stopped the Ukrainian power grid.
593570	601530	Now, cyber attacks can directly attack national security and national assets.
601530	606890	Therefore, national countries need powerful cybersecurity technologies.
607070	611390	That's how cyber defense meets blockchain.
612390	616700	Blockchain looks secure and reliable.
617270	627560	Many articles and news always talk about it's really nice secure world with blockchain.
628010	634210	Secure, reliable, survival, and so on.
634210	635600	It's true.
635600	647980	Blockchain technology is not about single point of failure and it's immune to any minority attacks.
647980	653800	Even DDoS attacks are really difficult to blockchain.
653800	657060	It should overcome majority resources.
659820	667240	So, policy makers of countries easily think like that.
667240	675880	Defense systems require high security and high reliability.
675880	679420	Blockchain looks unhackable.
679420	682980	Okay, then defense needs this technology.
682980	686680	It's really simple logic and expectable.
687840	693800	In reality, many projects are already in progress.
694600	702120	We will discuss about related projects in the next section.
702120	707500	But in preview, military-included messaging app built on blockchain.
707500	715060	Blockchain supply chain enhancement for trusted and assured FPGA and ASICs.
715060	718480	Decentralized key management using blockchain.
718480	724260	Army innovation network provenance using blockchain and disconnected networks.
724260	727140	Navy multi-factor authentication.
727760	730820	Coups through resilient blockchain framework.
730820	734140	Chinese soldiers reward system using cryptocurrency.
734760	738340	Blockchain-based record intelligence.
738540	741720	French military police record on Tazos blockchain.
741720	743160	South Korean military.
743160	748500	Blockchain-based digital identification, DID.
748500	751520	And also other projects.
751740	756480	So, will it be as good as you think?
756480	763300	Well, in this talk, I want to question and introduce some challenges.
765300	770400	So, to meet the challenges, let's go to the battleground.
771660	774700	Maybe some of you like this game.
775840	779660	So, what is waiting for us in the battleground?
780880	787420	There is a profession. I introduced a profession, Carl von Clausewitz.
787440	792300	And he is a really professional in war and battleground.
792300	796800	He said in Twitter, war is a volume of uncertainty.
796800	807180	Three quarters of the factors on which action in war is based are wrapped in a fog of greater and lesser uncertainty.
807900	812460	In summary, he says, it's full of uncertainty.
812460	815260	So, what is big uncertainty?
815260	823980	Blockchain technology already assumes many uncertain situations, right?
823980	830440	But in battleground, uncertainty can be really extreme.
830440	838000	For example, you got ordered to go to mountain and save the mountains.
838000	841220	In Korea, mountains are like that.
841460	850820	And our territory is covered by mountains like that.
850820	860200	So, when you got ordered to go to mountain, then we expect mountains are covered by trees, usually, right?
860260	865040	But in reality, mountains can be devastated.
866960	873200	You can go to mountain and there can be even no single tree.
873260	876740	Rare trees burned down a year ago.
876740	883620	In Korean war in 1950, most of our trees burned down.
884340	895560	So, what I want to say is situations in battleground can be extremely miserable.
896680	904800	But you got ordered and you should say, I swear in army.
906580	914680	So, let's assume policy makers said adopt the blockchain technology and secure our networks.
916100	919880	Also, let's assume it's not questionable.
919880	924340	You are not allowed to question about this decision.
925340	937640	Actually, many people don't agree with private blockchain networks.
940000	943420	So, we will encounter three challenges.
943420	945800	Challenge one, air gap networks.
945800	949720	And challenge two, first dynamic environment.
950240	954240	And challenge three, the resource shortage.
955220	958480	So, challenge one, air gap networks.
958480	960100	So, what is air gap networks?
960400	964400	This is maybe familiar for most of you.
964900	978940	In military networks and critical infrastructures in most countries, many networks have air gap environments.
980200	986880	Air gap is something technology to make networks isolated.
986880	995620	So, you can see internet, mainly stressors come from outer internet.
995620	1001160	So, to protect internet, you can make air gaps.
1001160	1007540	Air gaps can be software-based air gap and hardware-based air gap.
1007540	1010080	And there is true air gap.
1010080	1014520	True air gap means there is no communication between air gap.
1014520	1018380	But, well, it's not always magical.
1018380	1023220	Because Stuxnet exploded air gap networks.
1023220	1034120	Anyway, if there is an air gap, then it is hard to construct blockchain.
1034120	1043740	Because communication is not possible and many networks are partitioned and isolated.
1043740	1048880	So, anyway, let's make blockchain here.
1049260	1064760	So, for example, you can construct servers of each isolated network and communicate messages by those servers.
1064760	1070040	Then, it will be a single point of failure and it's just centralized.
1071040	1082940	Another way, you can make isolated networks and each isolated network has isolated blockchain.
1082940	1095440	But isolated networks have not enough nodes or servers to make enough decentralized networks.
1095440	1100940	So, it will make decentralization not effective.
1101860	1110420	So, in summary, because of the air gap structure of defense network, it may be hard to adopt blockchain.
1111700	1116560	And second challenge, first dynamic environment.
1118400	1124580	Wherever the military goes, communication must always exist.
1126260	1145300	Actually, it was same as the past warfare, but in modern warfare, getting information and process the information and make decisions are really important and should be fast.
1145300	1153080	Because we should make decisions faster than enemy and move faster than enemy.
1154580	1160480	So that we can make the superior position.
1160480	1173080	So, anyway, for this process, communication must be followed.
1173080	1184560	So, in this picture, in modern warfare, all of these things require communication.
1184560	1190640	So, it means, let's see the example.
1193300	1210980	It's map of World War II and second map is how Nazi extended their occupied territory really fast and broadly.
1210980	1217340	And right map is how their occupied territory shrinked really fast.
1218080	1222380	Let's see the left map.
1222820	1237240	When Nazi extended their occupied territory, then communication system must follow all of occupied territory and cover their communication really fast.
1241160	1250720	Even if their advance is really fast, communication and their system must follow. There's no exception.
1250720	1268240	At the right map, even if their occupied territory shrinks really fast, communication system will shrink really fast.
1268240	1272240	Anyway, just whatever is distributed throughout.
1273120	1281700	Another example. It's our country case. It's map of Korean War in 1950.
1282960	1293480	Before the Korean War, the territory was divided at this line, 38th parallel.
1293480	1302480	In three months, South Korea's territory was shrinked to just two cities, Daegu and Busan.
1302600	1305640	And we are really shrinking really fast.
1305640	1317880	But you can see, just in two or three months, we expanded our territory till the nearly end of North Korea.
1317880	1322200	But we retreated really fast again.
1322200	1340050	So, what I want to say is, better ground environment is really dynamic and we can't choose and there's no exception.
1340130	1347250	We are just first to meet situations.
1347370	1354110	So, let's move on the blockchain.
1354110	1359530	So, let's consider the case, sudden expansion.
1361110	1367030	Our private blockchain network is just like PBFT.
1368510	1377970	At the left situation, we have 8 total nodes and acceptable 30 nodes are like 2.
1377970	1395370	But we expanded our territory really fast and we just added a lot of nodes because we should cover the occupied territory.
1395370	1399530	Then, acceptable 30 nodes should be 12.
1399530	1408650	But in PBFT, this kind of consensus mechanism, we need settings.
1409030	1422590	But if this expansion is really fast and if this setting is not adapted, then it will be really easy to make consensus.
1422590	1432850	So, past majority becomes minority. 8 is minority of 36, so that is now your minority can make consensus.
1433590	1437230	Another case is kind of a reverse case.
1437230	1439790	So, let's think about sudden sharing key.
1440470	1442890	Sharing key is this typo.
1444690	1458950	Your original set is total nodes 36 and in PBFT, the number of acceptable 30 nodes is 11.
1459010	1463710	But most of nodes are just destroyed.
1463710	1470750	And then you have total nodes 8 and the number of acceptable 30 nodes should be 3.
1470750	1477750	But you are just destroyed, so you can't make setting in the time.
1477750	1482150	So, it will be nearly impossible to make consensus.
1482610	1490730	So, the past minority becomes the majority in this situation.
1490730	1494570	That is, now your majority can't make the consensus.
1496690	1500750	So, another situation, bombing and partitioning.
1500750	1503200	It's the last situation.
1503450	1507890	Your nodes just can't be partitioned.
1507890	1519650	In public blockchain, it's nearly impossible because nodes are connected by a worldwide web.
1519650	1524220	So, it's really hard to make clear partition.
1524490	1527250	Just divide into two partitions.
1527250	1533690	But it's possible in VR situations.
1533690	1541350	So, for example, you have to turn 36 nodes and partition them.
1541410	1544210	There's no majority anymore.
1544970	1547210	Furthermore, there's another issue.
1547210	1555450	If you connect the partitions but they have their own blocks,
1556100	1567290	especially for PVF tier deterministic consensus mechanisms, consistency will be a really big problem.
1567290	1570550	So, we'll meet our first problem.
1570550	1577810	In military situation, we can't just throw another information.
1577810	1581450	We can't choose just one information.
1581450	1586670	We need to collect all information and process and decide.
1586670	1588790	So, it'll be a problem.
1589510	1591750	So, it was the second challenge.
1591790	1599270	To summarize, in more extreme situations, assumptions can be easily broken.
1599270	1603370	Weakness can be easily revealed.
1603370	1616530	So, especially in my examples, deterministic consensus mechanisms that cannot guarantee aliveness are real problems in these situations.
1618270	1620410	Challenge 3, research shortage.
1620410	1624730	Actually, it's a classical problem of blockchain.
1625730	1633630	But I can't mention this problem.
1633630	1639610	Blockchain's other name is state replication system.
1639610	1649290	So, it'll replicate computation resource, storage resource, latency resource, bandwidth resource.
1649960	1660790	But existing military system were considered existing missions and existing systems.
1660790	1669920	So, just replicating existing performances will be a problem.
1670350	1678750	And we adopt blockchain for missions, not missions for blockchain.
1678750	1683330	So, influence on mission-critical functions should be checked.
1683330	1688870	Mission-critical functions should be guaranteed and then we can adopt blockchain.
1689250	1693030	But, yeah, first problem is resource consumption.
1693030	1694490	Then, what is second problem?
1694490	1700050	Second problem is serving resource consumption is not easy.
1700050	1714870	So, if we don't have enough resources, then we should get more resources and then we need to get more systems or more resources.
1714870	1723210	Then, we need to use defense acquisition process.
1726270	1745670	But maybe some of you already knew that military acquisition process is really conservative and it requires really rigorous tasks and evaluation process.
1745670	1747830	It's really heavy.
1750290	1757610	Defense acquisition process was having developed in this way.
1757610	1771950	So, you can see in the left picture, it's the US military acquisition system and it's really bureaucratic and conservative and really heavy.
1771950	1787330	So, there are many articles and interviews that DOD or many countries are suffering from full defense acquisition process.
1790030	1800930	Well, rigorous tasks and evaluations and rigorous acquisition system process is essential.
1800930	1814710	But, it is a really big problem in cybersecurity because, you know, system is developed and vulnerabilities are always hiding.
1816990	1830790	Vulnerabilities are just found time by time, but military acquisition system is not that rapid to react from these updates or kind of that.
1830790	1845790	So, anyway, military bureaucratic acquisition system process, because of that, it will be difficult to solve resource consumption problem.
1847090	1850450	So, in this situation, what can you do?
1850450	1864550	To adopt proof-of-work, we can't waste energy. Of course, proof-of-stake, we don't have coins in defense system.
1864550	1876510	And when we go to private consensus mechanism like PVRT, then we will go back to the challenge 2 again.
1876510	1882490	It can't guarantee liveness, so it will make such extreme problems.
1884390	1895910	So, in summary, mission is always first, but due to the military environment, support is not so timely and sufficient to adopt blockchain.
1897110	1901840	So, next is related military projects.
1902050	1911430	So, we surveyed 42 defense projects about blockchain and categorized as below.
1911430	1917570	And each project can be categorized into multiple categories.
1917570	1929090	For example, there's a research about key management about military drone system.
1929090	1936330	Then it's categorized into internet of things and communications and identification and authentication.
1936990	1945990	And especially data integrity category is just for data integrity project.
1945990	1954710	It's because adopting blockchain technology is basically about data integrity.
1954970	1964170	So, we categorized a project only about data integrity into that category.
1964170	1977640	So, main categories are like that. Data integrity, supply chain management, internet of things and communications, and identification and authentication.
1977640	1998440	So, we are somewhat careful about mentioning a project because about related project, detailed information about many real military projects are classified.
1998440	2008740	We got information from project notification, interviews, and news articles.
2008740	2020000	So, the information we got can be not clear or can be somewhat misunderstood.
2020200	2028380	So, we want to notice that our comments are based on limited information.
2030040	2038680	So, data integrity. For example, there are three projects.
2038860	2044000	French military police records on Taz's blockchain.
2044000	2048280	It's interesting that they put records on public blockchain.
2048680	2058020	So, maybe they can avoid problems that I mentioned like the problems happening in private blockchain.
2058020	2068360	And another example is U.S. DoD project sharing of defense research development testing evaluation on blockchain.
2069540	2078000	And another project is also U.S. DoD provenance using blockchain on disconnected networks.
2078000	2088400	This project is also interesting that they already considered some disconnected network situation in tactical networks.
2091770	2097530	So, another related category is supply chain management.
2097790	2106880	In cyber defense, supply chain management is really a big issue.
2106880	2118140	Maybe you read Bloomberg article about microchip hacking.
2118320	2127440	I don't know if it's true or not, but what I know is it was truly a big issue.
2128020	2134760	And there are other articles about supply chain attacks are suspicious.
2134760	2141220	Yeah, it's truly a really big, really important attack factor.
2141220	2151600	And so, there's a U.S. DoD project about it, blockchain supply chain enhancements for trusted and assured LPGA and ASICs.
2151600	2162580	But blockchain on supply management is actively researched for efficiency about supply chain, not only for security.
2163580	2167640	Another category is Internet of Things.
2168960	2181560	There's a U.S. Department of Homeland Security project combining blockchain technology with critical infrastructure.
2181560	2194950	This project is about sensors and cameras that protect integrity and authenticity of critical infrastructure.
2194950	2206530	This project is about IoT, so we can just relate it to Challenge 3 research series.
2206530	2217450	But I think the infrastructure is not dynamic, so it can be adaptable, I think.
2218450	2230630	So, in communication category, there's a DARPA project building an encrypted message system based on blockchain technology.
2233110	2245370	I think it's about tactical networks, so I don't know the detailed information, but if it is related to messages in tactical networks.
2245370	2253310	Challenge 2, first dynamic environments, and Challenge 3 research series should be considered. Maybe they will be considered.
2254570	2262430	For identification and authentication, there are two projects.
2262430	2268870	For example, a U.S. DHS project decentralizes KME management using blockchain.
2268870	2281030	There's a South Korea project blockchain-based DID.
2281030	2291930	But maybe some of you noticed, some of these projects are not domain-specific.
2291930	2300570	I mean, it's not just only for cyber defense. Many projects are just general.
2300570	2314190	But for this project, especially identification and authentication, the decentralized key management and DID is not only military issue, not only cyber defense.
2314190	2317610	So maybe they are not interesting.
2318170	2325070	So, related projects in my examples are like that.
2325070	2332530	Lines mean that projects are not domain-specific.
2334210	2344470	I'm interested in blockchain specifically for cyber defense.
2344470	2350530	So I'm still surveying about this topic and I'm preparing a paper.
2353140	2361580	Actually, I think I criticized a lot with just question this topic and introduced challenges.
2361580	2365580	But then some can ask, then what are alternatives?
2366280	2372280	What I want to say is we don't need to choose a perfect blockchain structure.
2372280	2385720	As I mentioned at the first part of this talk, blockchain is constructed by three concepts.
2385760	2388580	As a data structure, hash chain blocks.
2388580	2392040	And as a network structure, distributed network.
2392040	2396020	And as a consensus structure, decentralized consensus.
2396020	2401140	But you can just give up one concept or two concepts.
2401140	2407940	Maybe you only need distributed network and penalized networks.
2407940	2418220	So what I need to do is figure out problems and figure out right solutions.
2418220	2427300	Not just decide to use blockchain and figure out which blockchain is adaptable.
2428800	2435520	So to summarize, takeaway are three.
2435520	2441700	Cyber defense makes more challenges and requirements for blockchain.
2441820	2445820	Error gaps, sudden expansion, shrinkage, partitioning.
2446680	2449860	Extreme situation can exist.
2451700	2457460	Second, blockchain's resource consumption can be a problem.
2457460	2464020	But defense environments are not that flexible to assign more resources.
2465980	2471880	Third, we don't need to cling to blockchain if it's not adaptable.
2471880	2475320	Otherwise, it will bring more issues.
2475320	2479220	So it's all of my talk.
2479360	2482920	And get in touch to these emails.
2482920	2486780	We welcome any questions and discussions.
2487000	2497650	And I think this presentation will be uploaded somewhere so you can see our emails.
2498650	2506250	So thank you for your attention and thank you again.
2506250	2507650	Any questions?
2547170	2549370	Is there a question?
2561810	2568210	If you can't ask now, then you can just send email or send message to Discord.
2568840	2573340	Any questions and discussions are welcome.
2584070	2586910	Okay, then. Thank you.
2586910	2592430	Then I can just quit the live streaming, right?