new kt ^w / v } v ] d µ / î ì í ó - owasp · 2020. 1. 17. · microsoft powerpoint -...

33
OWASP Indonesia Meetup I 2017 OWASP Indonesia Meetup I 2017 Dimaz Ankaa Wijaya 4 March 2017 | Mozilla Community Space | Jakarta, Indonesia Dimaz Ankaa Wijaya 4 March 2017 | Mozilla Community Space | Jakarta, Indonesia Financial Fraud Mitigation With Blockchain Technology Financial Fraud Mitigation With Blockchain Technology

Upload: others

Post on 26-Sep-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

OWASP Indonesia Meetup I 2017OWASP Indonesia Meetup I 2017

Dimaz Ankaa Wijaya4 March 2017 | Mozilla Community Space | Jakarta, Indonesia

Dimaz Ankaa Wijaya4 March 2017 | Mozilla Community Space | Jakarta, Indonesia

Financial Fraud MitigationWith Blockchain Technology

Financial Fraud MitigationWith Blockchain Technology

Page 2: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Dimaz Ankaa Wijaya, S.Kom., MNS, CSXF

• Education– FMIPA UGM – Sarjana Komputer (2007)– Faculty of IT, Monash University – Master of Networks and

Security (2016)• Field of Expertise

– Digital forensic, database, software engineering– Network security, software security, cryptocurrency

• Book– Mengenal Bitcoin dan Cryptocurrency (2016, Puspantara)– Bitcoin Tingkat Lanjut (2016, Puspantara)

• Contact– https://kriptologi.com– [email protected]

Page 3: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Today’s Menu

• Introduction to Bitcoin• Financial Fraud• Blockchain• Summary

Page 4: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Bitcoin

Page 5: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM
Page 6: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

History of Bitcoin

Page 7: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Centralized vs Decentralized

Page 8: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM
Page 9: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Blockchain Overview

Page 10: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM
Page 11: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Chain of Blocks

Page 12: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Digital Signature

Page 13: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Bitcoin Transaction

Receiver

Sender

Page 14: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Mining

Page 15: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Proof of Work (PoW)

Miners calculate values that match the requirement to create new blocks.

PoW protects the blocks from tampering.

Page 16: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

P2P Network

Each server has a complete copy of the blockchain.

They communicate through P2P protocol.

Page 17: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Financial Fraud

• ID Theft• Cyber Security• Credit Card Fraud

Page 18: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Financial Fraud (2)

• Falsifying data– Enron– WorldCom

• Fake document

Page 19: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Financial Scheme

Page 20: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Employing Blockchain in Finance Industry

• Transparent – visible ledger• Trustless – no central authority needed• Cryptography – digital signature• Permanent – blockchain

Page 21: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Privacy Model

• Disconnecting Identities and Transactions

Page 22: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Blockchain-based Digital Certificate

Page 23: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Multisignature

Page 24: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Visible Transactions

Page 25: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

No Single Point of Failure

• Peer-to-Peer Network• Multiple nodes• Synchronization

Page 26: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Eliminating Middleman

• Reducing fees and risks

Page 27: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Customized Transactions

• Escrow transaction• Hash-locked transaction• Time-locked transaction

Page 28: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

…And Many More!

• Ring Signature (Monero)• Smart Contract (Ethereum)

Page 29: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Current Usage

• Loyalty Program

Page 30: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Recent Development

• R3CEV • Hyperledger• Blockchain of things• Ms. Azure’s BaaS

Page 31: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM
Page 32: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM

Summary

• Blockchain supports transparency in financial industry by using public ledger.

• Blockchain protects the data from unauthorized modification.

• Blockchain supports authentication and non-repudiation in financial transaction by utilizing cryptographic functions.

• These characteristics minimize the risk in financial fraud.

Page 33: New Kt ^W / v } v ] D µ / î ì í ó - OWASP · 2020. 1. 17. · Microsoft PowerPoint - OWASP-dimaz-3 Author: dim Created Date: 3/4/2017 11:15:13 AM