{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T16:30:42Z","timestamp":1778085042813,"version":"3.51.4"},"reference-count":57,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2024,12,30]],"date-time":"2024-12-30T00:00:00Z","timestamp":1735516800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"European Commission, H2020 MEDINA project","award":["GA 952633"],"award-info":[{"award-number":["GA 952633"]}]},{"name":"European Commission, H2020 MEDINA project","award":["GA 101120688"],"award-info":[{"award-number":["GA 101120688"]}]},{"name":"Horizon Europe EMERALD project","award":["GA 952633"],"award-info":[{"award-number":["GA 952633"]}]},{"name":"Horizon Europe EMERALD project","award":["GA 101120688"],"award-info":[{"award-number":["GA 101120688"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JCP"],"abstract":"<jats:p>Digital evidence is a critical component in today\u2019s organizations, as it is the foundation on which any certification is based. This paper presents a risk assessment of evidence in the certification domain to identify the main security risks. To mitigate these risks, it also proposes an adaptation of an existing Blockchain-based audit trail system to create an evidence trustworthiness system enhancing security and usability. This system covers specific additional requirements from auditors: evidence confidentiality and integrity verification automation. The system has been validated with cloud service providers to increase the security of evidence for a cybersecurity certification process. However, it can be also extended to other certification domains.<\/jats:p>","DOI":"10.3390\/jcp5010001","type":"journal-article","created":{"date-parts":[[2024,12,31]],"date-time":"2024-12-31T04:10:23Z","timestamp":1735618223000},"page":"1","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Blockchain-Based Evidence Trustworthiness System in Certification"],"prefix":"10.3390","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6031-9449","authenticated-orcid":false,"given":"Cristina","family":"Regueiro","sequence":"first","affiliation":[{"name":"Tecnalia, Basque Research and Technology Alliance (BRTA), Mikeletegi Pasealekua 2, 20009 Donostia-San Sebasti\u00e1n, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9751-757X","authenticated-orcid":false,"given":"Borja","family":"Urquizu","sequence":"additional","affiliation":[{"name":"Tecnalia, Basque Research and Technology Alliance (BRTA), Mikeletegi Pasealekua 2, 20009 Donostia-San Sebasti\u00e1n, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2024,12,30]]},"reference":[{"key":"ref_1","first-page":"8","article-title":"The importance of certification","volume":"37","author":"Pinolini","year":"2020","journal-title":"J. Prot. Coatings Linings"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"266","DOI":"10.35808\/ersj\/1059","article-title":"Quality certification and customer satisfaction","volume":"XXI","author":"Sutawidjaya","year":"2018","journal-title":"Eur. Res. Stud. J."},{"key":"ref_3","unstructured":"ISO (2024, November 03). ISO Survey 2023. Available online: https:\/\/www.iso.org\/the-iso-survey.html."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"050204","DOI":"10.1103\/PhysRevLett.133.050204","article-title":"Evidence-based certification of quantum dimensions","volume":"133","author":"Teo","year":"2024","journal-title":"Phys. Rev. Lett."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"689","DOI":"10.1016\/j.infsof.2014.03.001","article-title":"An extended systematic literature review on provision of evidence for safety certification","volume":"56","author":"Nair","year":"2014","journal-title":"Inf. Softw. Technol."},{"key":"ref_6","first-page":"200908","article-title":"Fintech forensics: Criminal investigation and digital evidence in financial technologies","volume":"33","author":"Nikkel","year":"2020","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"ref_7","first-page":"12","article-title":"Protecting digital evidence integrity and preserving chain of custody","volume":"12","author":"Shah","year":"2017","journal-title":"J. Digit. Forensics Secur. Law"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Guttman, B., White, D.R., and Walraven, T. (2024, November 05). Digital Evidence Preservation. NIST Interagency Report 2022, Available online: https:\/\/nvlpubs.nist.gov\/nistpubs\/ir\/2022\/NIST.IR.8387.pdf.","DOI":"10.6028\/NIST.IR.8387"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"409","DOI":"10.1016\/j.childyouth.2004.11.007","article-title":"The next step: Integrating actuarial risk assessment and clinical judgment into an evidence-based practice framework in CPS case management","volume":"27","author":"Shlonsky","year":"2005","journal-title":"Child. Youth Serv. Rev."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1177\/0049124118782533","article-title":"Fairness in criminal justice risk assessments: The state of the art","volume":"50","author":"Berk","year":"2021","journal-title":"Sociol. Methods Res."},{"key":"ref_11","unstructured":"Ross, R.S. (2024, November 02). Guide for Conducting Risk Assessments, Available online: https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800-30r1.pdf."},{"key":"ref_12","unstructured":"van den Bos, J. (2014). Gathering Evidence: Model-Driven Software Engineering in Automated Digital Forensics. [Ph.D. Thesis, Universiteit van Amsterdam]."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"158","DOI":"10.1038\/s41746-023-00896-7","article-title":"Evaluating large language models on medical evidence summarization","volume":"6","author":"Tang","year":"2023","journal-title":"NPJ Digit. Med."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"34","DOI":"10.37134\/jictie.vol8.2.4.2021","article-title":"Review on confidentiality, integrity and availability in information security","volume":"8","author":"Yee","year":"2021","journal-title":"J. ICT Educ."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"100167","DOI":"10.1016\/j.chbr.2022.100167","article-title":"Hacker types, motivations and strategies: A comprehensive framework","volume":"5","author":"Chng","year":"2022","journal-title":"Comput. Hum. Behav. Rep."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"122199","DOI":"10.1016\/j.eswa.2023.122199","article-title":"Anti-phishing: A comprehensive perspective","volume":"238","author":"Varshney","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"103663","DOI":"10.1016\/j.cose.2023.103663","article-title":"DDoS family: A novel perspective for massive types of DDoS attacks","volume":"138","author":"Zhao","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_18","first-page":"1","article-title":"Data encryption and anonymization techniques for enhanced information system security and privacy","volume":"1","author":"Pratomo","year":"2023","journal-title":"West Sci. Inf. Syst. Technol."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1367","DOI":"10.1109\/JSYST.2021.3097744","article-title":"Blocktrail: A service for secure and transparent blockchain-driven audit trails","volume":"16","author":"Ahmad","year":"2021","journal-title":"IEEE Syst. J."},{"key":"ref_20","unstructured":"Tysebaert, S., Lloreda Sanchez, H., Riviere, E., and Rath, A. (2022). AuditTrust: A blockchain-based secure audit trail for data sharing in distributed environment. Commun. Comput. Inf. Sci."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"102176","DOI":"10.1016\/j.techsoc.2022.102176","article-title":"The benefits of blockchain for digital certificates: A multiple case study analysis","volume":"72","author":"Pu","year":"2023","journal-title":"Technol. Soc."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Chowdhury, M.J.M., Colman, A., Kabir, M.A., Han, J., and Sarda, P. (2018, January 1\u20133). Blockchain versus database: A critical analysis. Proceedings of the 2018 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications\/12th IEEE International Conference on Big Data Science and Engineering (TrustCom\/BigDataSE), New York, NY, USA.","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00186"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"645","DOI":"10.1109\/69.868912","article-title":"Performance modeling of distributed and replicated databases","volume":"12","author":"Nicola","year":"2000","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"ref_24","unstructured":"Carcary, M. (2020, January 18\u201319). Advancing the research audit trail: A ten year retrospective. Proceedings of the European Conference on Research Methods for Business & Management Studies, Aveiro, Portugal."},{"key":"ref_25","first-page":"72","article-title":"Blockchain technology and its impact on audit activities","volume":"9","author":"Gokoglan","year":"2022","journal-title":"J. Econ. Financ. Account."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"100466","DOI":"10.1016\/j.accinf.2020.100466","article-title":"Blockchain architecture: A design that helps CPA firms leverage the technology","volume":"38","author":"Vincent","year":"2020","journal-title":"Int. J. Account. Inf. Syst."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"42413","DOI":"10.1007\/s11042-023-17104-z","article-title":"A survey on blockchain based IoT forensic evidence preservation: Research trends and current challenges","volume":"83","author":"Sakshi","year":"2024","journal-title":"Multimed. Tools Appl."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3491258","article-title":"Scrybe: A Secure Audit Trail for Clinical Trial Data Fusion","volume":"4","author":"Oakley","year":"2023","journal-title":"Digit. Threat. Res. Pract."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s12920-020-0720-3","article-title":"Decentralized genomics audit logging via permissioned blockchain ledgering","volume":"13","author":"Pattengale","year":"2020","journal-title":"BMC Med. Genom."},{"key":"ref_30","first-page":"87","article-title":"The impact of blockchain technology on audit process quality: An empirical study on the banking sector","volume":"5","author":"Hashem","year":"2023","journal-title":"Int. J. Audit. Account. Stud."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"1009","DOI":"10.1080\/09537287.2022.2058412","article-title":"Improving operational efficiency through blockchain: Evidence from a field experiment in cross-border trade","volume":"35","author":"Tian","year":"2024","journal-title":"Prod. Plan. Control"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"106195","DOI":"10.1016\/j.infsof.2019.106195","article-title":"Impact of usability mechanisms: An experiment on efficiency, effectiveness and user satisfaction","volume":"117","author":"Ferreira","year":"2020","journal-title":"Inf. Softw. Technol."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"719","DOI":"10.1080\/10447318.2022.2121879","article-title":"Usevalia: Managing Inspection-Based Usability Audits","volume":"40","year":"2024","journal-title":"Int. J. Hum. Comput. Interact."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"2605","DOI":"10.1109\/TPDS.2020.2998462","article-title":"Towards usable cloud storage auditing","volume":"31","author":"Chen","year":"2020","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Miller, A. (2019). Permissioned and permissionless blockchains. Blockchain for Distributed Systems Security, IEEE.","DOI":"10.1002\/9781119519621.ch9"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Williams, I. (2020). Cross-chain blockchain networks, compatibility standards, and interoperability standards: The case of european blockchain services infrastructure. Cross-Industry Use of Blockchain Technology and Opportunities for the Future, IGI Global.","DOI":"10.4018\/978-1-7998-3632-2.ch010"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Fan, C., Lin, C., Khazaei, H., and Musilek, P. (2022, January 15\u201318). Performance analysis of hyperledger besu in private blockchain. Proceedings of the 2022 IEEE International Conference on Decentralized Applications and Infrastructures (DAPPS), Newark, CA, USA.","DOI":"10.1109\/DAPPS55202.2022.00016"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Regueiro, C., Seco, I., Guti\u00e9rrez-Ag\u00fcero, I., Urquizu, B., and Mansell, J. (2021). A blockchain-based audit trail mechanism: Design and implementation. Algorithms, 14.","DOI":"10.3390\/a14120341"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Melissari, F., Papadakis, A., Chatzitheodorou, D., Tran, D., Schouteten, J., Athanasiou, G., and Zahariadis, T. (2024). Experiences Using Ethereum and Quorum Blockchain Smart Contracts in Dairy Production. J. Sens. Actuator Netw., 13.","DOI":"10.3390\/jsan13010006"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"100113","DOI":"10.1016\/j.bcra.2022.100113","article-title":"Comparative analysis of permissioned blockchain frameworks for industrial applications","volume":"4","author":"Capocasale","year":"2023","journal-title":"Blockchain Res. Appl."},{"key":"ref_41","unstructured":"Pavlovics, A. (2024, December 17). JPMorgan\u2019s Quorum Blockchain Performance Testing. Available online: https:\/\/scandiweb.com\/blog\/jpmorgan-s-quorum-blockchain-performance-testing\/."},{"key":"ref_42","first-page":"10","article-title":"The eu general data protection regulation (gdpr)","volume":"Volume 10","author":"Voigt","year":"2017","journal-title":"A Practical Guide"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3047307","article-title":"Hashing techniques: A survey and taxonomy","volume":"50","author":"Chi","year":"2017","journal-title":"ACM Comput. Surv."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Rawal, B.S., Kumar, L.S., Maganti, S., and Godha, V. (2022, January 6\u20139). Comparative Study of Sha-256 Optimization Techniques. Proceedings of the 2022 IEEE World AI IoT Congress (AIIoT), Seattle, WA, USA.","DOI":"10.1109\/AIIoT54504.2022.9817185"},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Alkhwaja, I., Albugami, M., Alkhwaja, A., Alghamdi, M., Abahussain, H., Alfawaz, F., Almurayh, A., and Min-Allah, N. (2023). Password cracking with brute force algorithm and dictionary attack using parallel programming. Appl. Sci., 13.","DOI":"10.3390\/app13105979"},{"key":"ref_46","unstructured":"Orue-Echevarria, L., Garcia, J.L., Banse, C., and Alonso, J. (2021, January 23\u201326). MEDINA: Improving Cloud Services trustworthiness through continuous audit-based certification. Proceedings of the CEUR Workshop Proceedings, CEUR-WS, St. Petersburg, Russia."},{"key":"ref_47","unstructured":"EMERALD (2024, November 05). Evidence Management for Continuous Certification as a Service in the Cloud. Available online: https:\/\/cordis.europa.eu\/project\/id\/101120688."},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Zhou, S., Li, K., Xiao, L., Cai, J., Liang, W., and Castiglione, A. (2023). A systematic review of consensus mechanisms in blockchain. Mathematics, 11.","DOI":"10.3390\/math11102248"},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"100026","DOI":"10.1016\/j.bcra.2021.100026","article-title":"Performance evaluation of permissioned blockchains for financial applications: The ConsenSys Quorum case study","volume":"3","author":"Mazzoni","year":"2022","journal-title":"Blockchain Res. Appl."},{"key":"ref_50","first-page":"2022","article-title":"The raft consensus algorithm","volume":"190","author":"Ongaro","year":"2015","journal-title":"Lect. Notes CS"},{"key":"ref_51","unstructured":"Baliga, A., Subhod, I., Kamat, P., and Chatterjee, S. (2018). Performance evaluation of the quorum blockchain platform. arXiv."},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Gupta, M.K., Dwivedi, R.K., Sharma, A., and Farooq, M. (2023, January 23\u201324). Performance Evaluation of Blockchain Platforms. Proceedings of the 2023 International Conference on IoT, Communication and Automation Technology (ICICAT), Gorakhpur, India.","DOI":"10.1109\/ICICAT57735.2023.10263700"},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"1389","DOI":"10.1016\/j.procs.2020.04.149","article-title":"Computing optimal block size for blockchain based applications with contradictory objectives","volume":"171","author":"Singh","year":"2020","journal-title":"Procedia Comput. Sci."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"149","DOI":"10.4338\/ACI-2010-02-R-0009","article-title":"Quality and Certification of Electronic Health Records","volume":"1","author":"Hoerbst","year":"2010","journal-title":"Appl. Clin. Inform."},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Georgieva, P., Nikolova, E., Orozova, D., and Jecheva, V. (2019, January 11\u201313). Certification in Teaching Information Technologies for Engineering Graduates. Proceedings of the ICERI2019 Proceedings, IATED, Seville, Spain.","DOI":"10.21125\/iceri.2019.1136"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"1456","DOI":"10.1111\/poms.13623","article-title":"Quality certification in agricultural supply chains: Implications from government information provision","volume":"31","author":"Bian","year":"2022","journal-title":"Prod. Oper. Manag."},{"key":"ref_57","doi-asserted-by":"crossref","first-page":"2829","DOI":"10.1002\/bse.2546","article-title":"Environmental management certification and environmental performance: Greening or greenwashing?","volume":"29","author":"Boiral","year":"2020","journal-title":"Bus. Strategy Environ."}],"container-title":["Journal of Cybersecurity and Privacy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2624-800X\/5\/1\/1\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T16:56:49Z","timestamp":1760115409000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2624-800X\/5\/1\/1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,30]]},"references-count":57,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,3]]}},"alternative-id":["jcp5010001"],"URL":"https:\/\/doi.org\/10.3390\/jcp5010001","relation":{},"ISSN":["2624-800X"],"issn-type":[{"value":"2624-800X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12,30]]}}}