{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T22:29:31Z","timestamp":1781821771989,"version":"3.54.5"},"reference-count":36,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2022,5,21]],"date-time":"2022-05-21T00:00:00Z","timestamp":1653091200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Ministry of Education","award":["NRF5199991014091"],"award-info":[{"award-number":["NRF5199991014091"]}]},{"name":"Ministry of Education","award":["NRF-2020R1F1A1075605"],"award-info":[{"award-number":["NRF-2020R1F1A1075605"]}]},{"name":"Ministry of Science and ICT","award":["NRF5199991014091"],"award-info":[{"award-number":["NRF5199991014091"]}]},{"name":"Ministry of Science and ICT","award":["NRF-2020R1F1A1075605"],"award-info":[{"award-number":["NRF-2020R1F1A1075605"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Current blockchain-based cloud (BBC) systems have several security vulnerabilities regarding smart contracts (SC), and several attacks have been reported recently. The SC development lacks standard design processes that follow software lifecycle principles to model secure SC. Secondly, the security mechanisms in the SC are not constantly evolved to resist evolving adversary attacks. BBC systems lack self-adaptive security capability to make spontaneous decisions when adversarial attacks are encountered. To build a self-adaptive secure BBC system that follows standard software development lifecycle principles to model secure SC, we propose the so-called self-adaptive security RE_BBC framework. The framework would utilize the MAPE-BBC adaptation loop to make decisions internally based on the threat models, goal models, and service level agreement (SLA) SC security specifications. The framework identifies vulnerabilities and threats and takes precautionary measures using self-adaptive SC agents. We validated the proposed methodology theoretically and empirically, and statistically proved the research questions and hypothesis using the t-test and Mann\u2013Whitney U test. Subsequently, we compare our proposed approach with the Security Quality Requirements Engineering approach (SQUARE). The feasibility results and the replicated study results indicate that the proposed approach outperformed the SQUARE approach in terms of artifacts quality, self-adaptive security evaluation quality, efficiency in response time, complexity, and usefulness of the proposed approach for the Healthcare Data Management (HDM) system. SC security developers can immensely benefit from our proposed methodology. They need not reengineer SC from scratch; depending on their security needs and plan, the contract can be adapted to execute a new plan.<\/jats:p>","DOI":"10.3390\/s22103903","type":"journal-article","created":{"date-parts":[[2022,5,21]],"date-time":"2022-05-21T09:18:08Z","timestamp":1653124688000},"page":"3903","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["SRE_BBC: A Self-Adaptive Security Enabled Requirements Engineering Approach for SLA Smart Contracts in Blockchain-Based Cloud Systems"],"prefix":"10.3390","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9388-7998","authenticated-orcid":false,"given":"Irish","family":"Singh","sequence":"first","affiliation":[{"name":"Department of Computer Engineering, Ajou University, Suwon 16499, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8569-0236","authenticated-orcid":false,"given":"Seok-Won","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Ajou University, Suwon 16499, Korea"},{"name":"Department of Software and Computer Engineering, Ajou University, Suwon 16499, Korea"},{"name":"Department of Artificial Intelligence, Ajou University, Suwon 16499, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2022,5,21]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Luu, L., Chu, D.-H., Olickel, H., Saxena, P., and Hobor, A. (2016, January 24\u201328). Making smart contracts smarter. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS), Vienna, Austria.","DOI":"10.1145\/2976749.2978309"},{"key":"ref_2","unstructured":"Buterin, V. (2021, June 24). Critical Update re: Dao Vulnerability. Available online: https:\/\/blog.ethereum.org\/2016\/06\/17\/critical-update-re-dao-vulnerability\/."},{"key":"ref_3","unstructured":"(2021, June 24). Jake Adelstein and Nathalie-Kyoko Stucky. Behind the Biggest Bitcoin Heist in History: Inside the Implosion of Mt. Gox. Available online: http:\/\/www.thedailybeast.com\/articles\/2016\/05\/19\/behind-the-biggest-bitcoin-heist-in-historyinside-the-implosion-of-mt-gox.html."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"2084","DOI":"10.1109\/TSE.2019.2942301","article-title":"Smart contract development: Challenges and opportunities","volume":"47","author":"Zou","year":"2019","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Destefanis, G., Marchesi, M., Ortu, M., Tonelli, R., Bracciali, A., and Hierons, R. (2018, January 20). Smart contracts vulnerabilities: A call for blockchain software engineering?. Proceedings of the 2018 International Workshop on Blockchain Oriented Software Engineering (IWBOSE), Campobasso, Italy.","DOI":"10.1109\/IWBOSE.2018.8327567"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"506","DOI":"10.1016\/j.ins.2019.09.073","article-title":"LSC: Online auto-update smart contracts for fortifying blockchain-based log systems","volume":"512","author":"Shao","year":"2020","journal-title":"Inf. Sci."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1109\/MS.2020.3000579","article-title":"RE_BBC: Requirements Engineering in a Blockchain-Based Cloud System: Its Role in Service-Level Agreement Specification","volume":"37","author":"Singh","year":"2020","journal-title":"IEEE Softw."},{"key":"ref_8","unstructured":"Van Lamsweerde, A. (2009). Requirements Engineering: From System Goals to UML Models to Software Specifications, John Wiley and Sons."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1109\/MC.2003.1160055","article-title":"The vision of autonomic computing","volume":"36","author":"Kephart","year":"2003","journal-title":"Computer"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"688","DOI":"10.1093\/beheco\/ark016","article-title":"The unequal variance t-test is an underused alternative to Student\u2019s t-test and the Mann\u2013Whitney U test","volume":"17","author":"Ruxton","year":"2006","journal-title":"Behav. Ecol."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"McKnight, P.E., and Najab, J. (2010). Mann-Whitney U Test. Corsini Encycl. Psychol.","DOI":"10.1002\/9780470479216.corpsy0524"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1082983.1083214","article-title":"Security quality requirements engineering (SQUARE) methodology","volume":"30","author":"Mead","year":"2005","journal-title":"ACM SIGSOFT Softw. Eng. Notes"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Singh, I., and Lee, S.W. (2021, January 20\u201324). Self-Adaptive Security for SLA Based Smart Contract. Proceedings of the 2021 IEEE 29th International Requirements Engineering Conference Workshops (REW), Notre Dame, IN, USA.","DOI":"10.1109\/REW53955.2021.00069"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"659","DOI":"10.1142\/S0218843006001529","article-title":"A formal analysis of a business contract language","volume":"15","author":"Governatori","year":"2006","journal-title":"Int. J. Coop. Inf. Syst."},{"key":"ref_15","unstructured":"Lee, S.W., and Rine, D.C. (2004, January 20\u201324). Case Study Methodology Designed Research in Software Engineering Methodology Validation. Proceedings of the SEKE, Banff, AB, Canada."},{"key":"ref_16","unstructured":"Yin, R.K. (2017). Case Study Research and Applications: Design and Methods, Sage Publications."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1016\/j.infsof.2013.11.004","article-title":"Model-based requirements verification method: Conclusions from two controlled experiments","volume":"56","author":"Aceituna","year":"2014","journal-title":"Inf. Softw. Technol."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1109\/MCC.2018.011791712","article-title":"Blockchain: A panacea for healthcare cloud-based data security and privacy?","volume":"5","author":"Esposito","year":"2018","journal-title":"IEEE Cloud Comput."},{"key":"ref_19","first-page":"9","article-title":"Health insurance portability and accountability act","volume":"72","author":"Dwyer","year":"2004","journal-title":"Secur. Issues Digit. Med. Enterp."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"571","DOI":"10.1016\/j.jss.2006.07.009","article-title":"Lessons from applying the systematic literature review process within the software engineering domain","volume":"80","author":"Brereton","year":"2007","journal-title":"J. Syst. Softw."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"77","DOI":"10.1016\/S1389-1286(00)00075-X","article-title":"Supporting reconfigurable security policies for mobile programs","volume":"33","author":"Hashii","year":"2000","journal-title":"Comput. Netw."},{"key":"ref_22","unstructured":"Baresi, L., Pasquale, L., and Spoletini, P. (October, January 27). Fuzzy goals for requirements driven adaptation. Proceedings of the 18th International Requirements Engineering Conference (RE), Sydney, Australia."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Morandini, M., Penserini, L., and Perini, A. (2008, January 12\u201313). Towards goal-oriented development of self-adaptive systems. Proceedings of the 2008 International Workshop on Software Engineering for Adaptive and Self-Managing Systems, Leipzig, Germany.","DOI":"10.1145\/1370018.1370021"},{"key":"ref_24","unstructured":"Morandini, M., Penserini, L., and Perini, A. (2017, January 14\u201317). Security implications of blockchain cloud with analysis of block withholding attack. Proceedings of the 2017 17th IEEE\/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGRID), Madrid, Spain."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Johng, H., Kim, D., Hill, T., and Chung, L. (2018, January 2\u20137). Using blockchain to enhance the trustworthiness of business processes: A goal-oriented approach. Proceedings of the 2018 IEEE International Conference on Services Computing (SCC), San Francisco, CA, USA.","DOI":"10.1109\/SCC.2018.00041"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"3243","DOI":"10.1007\/s00500-015-1699-0","article-title":"Cloud-based electronic health record system supporting fuzzy keyword search","volume":"20","author":"Liu","year":"2016","journal-title":"Soft Comput."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Zyskind, G., and Nathan, O. (2015, January 21). Decentralizing privacy: Using blockchain to protect personal data. Proceedings of the Security and Privacy Workshops (SPW), San Jose, CA, USA.","DOI":"10.1109\/SPW.2015.27"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Azaria, A., Ekblaw, A., Vieira, T., and Lippman, A. (2016, January 22\u201324). Medrec: Using blockchain for medical data access and permission management. Proceedings of the Open and Big Data (OBD), Vienna, Austria.","DOI":"10.1109\/OBD.2016.11"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"219","DOI":"10.1016\/j.ins.2018.06.071","article-title":"Block-secure: Blockchain based scheme for secure p2p cloud storage","volume":"465","author":"Li","year":"2018","journal-title":"Inf. Sci."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"989","DOI":"10.1109\/ACCESS.2020.3046931","article-title":"What is core and what future holds for blockchain technologies and cryptocurrencies: A bibliometric analysis","volume":"9","author":"Nasir","year":"2020","journal-title":"IEEE Access"},{"key":"ref_31","unstructured":"Clack, C.D., Bakshi, V.A., and Braine, L. (2016). Smart contract templates: Essential requirements and design options. arXiv."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"338","DOI":"10.69554\/XYVT7035","article-title":"Smart contract templates: Legal semantics and code validations","volume":"2","author":"Clack","year":"2018","journal-title":"Digit. Bank."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Choudhury, O., Rudolph, N., Sylla, I., Fairoza, N., and Das, A. (2018, January 7\u20138). Auto-generation of smart contracts from domain-specific ontologies and semantic rules. Proceedings of the 2018 IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData), Seoul, Korea.","DOI":"10.1109\/Cybermatics_2018.2018.00183"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Bhamidipati, V.S., Chan, M., Chamorro, D., Jain, A., and Murthy, A.S. (2019, January 26\u201328). Adaptive Security for Smart Contracts using High Granularity Metrics. Proceedings of the 3rd International Conference on Vision, Image, and Signal Processing, Vancouver, BC, Canada.","DOI":"10.1145\/3387168.3387214"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Mavridou, A., Laszka, A., Stachtiari, E., and Dubey, A. (2019, January 18\u201322). VeriSolid: Correct-by-design smart contracts for Ethereum. Proceedings of the International Conference on Financial Cryptography and Data Security, Frigate Bay, Saint Kitts and Nevis.","DOI":"10.1007\/978-3-030-32101-7_27"},{"key":"ref_36","unstructured":"Sharifi, S., Parvizimosaed, A., Amyot, D., Logrippo, L., and Mylopoulos, J. (September, January 31). Symboleo: Towards a specification language for legal contracts. Proceedings of the 28th IEEE International Requirements Engineering Conference (RE\u201920), Zurich, Switzerland."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/10\/3903\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T23:15:59Z","timestamp":1760138159000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/10\/3903"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,21]]},"references-count":36,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2022,5]]}},"alternative-id":["s22103903"],"URL":"https:\/\/doi.org\/10.3390\/s22103903","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,5,21]]}}}