A Study on Blockchain-Based API and WAAP Level Assignment Using Lifecycle as a Value Assessment Model
A Study on Blockchain-Based API and WAAP Level Assignment Using Lifecycle as a Value Assessment Model
- 한국소프트웨어감정평가학회
- 한국소프트웨어감정평가학회 논문지
- 20(4)
-
2024.12331 - 342 (12 pages)
- 5
In this paper, we propose a novel framework for the lifecycle management and value assessment of APIs and Web Application and API Protection (WAAP) using blockchain technology. By integrating blockchain, the framework ensures transparency, security, and traceability, enabling a robust value assessment model based on the interactions and updates logged throughout the lifecycle of APIs and WAAP. The proposed system also introduces a recursive verification process, enhancing security by continuously monitoring API and WAAP integrity. This recursive approach facilitates the verification and recovery processes by utilizing identical mechanisms, ensuring seamless API validation and WAAP restoration when vulnerabilities are detected. The research is motivated by the increasing reliance on APIs in modern application ecosystems and the limitations of traditional API gateways in addressing complex lifecycle and security challenges. Existing approaches often fail to provide the transparency and traceability required for robust security management. Our framework addresses these gaps by employing blockchain to maintain immutable records of API interactions, leveraging cryptographic hashing for integrity verification, and ensuring that only validated APIs meet operational standards. This approach not only enhances security but also establishes a foundation for systematic lifecycle management and value assessment.
In this paper, we propose a novel framework for the lifecycle management and value assessment of APIs and Web Application and API Protection (WAAP) using blockchain technology. By integrating blockchain, the framework ensures transparency, security, and traceability, enabling a robust value assessment model based on the interactions and updates logged throughout the lifecycle of APIs and WAAP. The proposed system also introduces a recursive verification process, enhancing security by continuously monitoring API and WAAP integrity. This recursive approach facilitates the verification and recovery processes by utilizing identical mechanisms, ensuring seamless API validation and WAAP restoration when vulnerabilities are detected. The research is motivated by the increasing reliance on APIs in modern application ecosystems and the limitations of traditional API gateways in addressing complex lifecycle and security challenges. Existing approaches often fail to provide the transparency and traceability required for robust security management. Our framework addresses these gaps by employing blockchain to maintain immutable records of API interactions, leveraging cryptographic hashing for integrity verification, and ensuring that only validated APIs meet operational standards. This approach not only enhances security but also establishes a foundation for systematic lifecycle management and value assessment.
(0)
(0)