STRIDE Threat Modeling Identifies Risks in Secure Forensic Report Sharing

DOI

10.2991/978-2-38476-589-8_51How to use a DOI?

Keywords

STRIDE threat modeling; Digital forensics security; Blockchain forensic sharing; Hyperledger Fabric IPFS; Risk analysis

Abstract

General Background: Secure collaboration in digital forensic investigations requires mechanisms that ensure confidentiality, integrity, and traceability of shared reports. Specific Background: Existing approaches relying on centralized databases and manual verification are vulnerable to tampering and unauthorized disclosure, leading to the development of ShareBlock, a private blockchain-based system integrating Hyperledger Fabric and IPFS for decentralized forensic report sharing. Knowledge Gap: Despite prior evaluations focusing on confidentiality, integrity, and performance, the comprehensive security posture of ShareBlock has not been systematically assessed. Aims: This study aims to conduct a structured threat modeling analysis of ShareBlock using the STRIDE methodology to identify potential security risks. Results: Based on system architecture analysis, threats were identified across six STRIDE categories—spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege—and evaluated using likelihood and impact to construct a risk matrix and propose mitigation strategies. The findings show that while ShareBlock implements encryption before IPFS upload, role-based access control, and blockchain-backed integrity verification, vulnerabilities remain, particularly in on-chain signature verification and privilege isolation. Novelty: This study provides a comprehensive STRIDE-based threat modeling assessment of a blockchain-enabled forensic report sharing system. Implications: The results support the refinement of secure system design and demonstrate the role of structured threat modeling in developing more resilient blockchain-based digital forensic collaboration platforms.

Copyright

© 2026 The Author(s)

Open Access

Open Access This chapter is licensed under the terms of the Creative Commons Attribution-NonCommercial 4.0 International License (http://creativecommons.org/licenses/by-nc/4.0/), which permits any noncommercial use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made.

Download article (PDF)

TY  - CONF
AU  - Risna Purwita Siwi
AU  - Yudi Prayudi
AU  - Niken Dwi Wahyu Cahyani
PY  - 2026
DA  - 2026/06/18
TI  - STRIDE Threat Modeling Identifies Risks in Secure Forensic Report Sharing
BT  - Proceedings of the 1st International Conference on Communication and Digital Multimedia 2025 (ICCDM 2025)
PB  - Atlantis Press
SP  - 646
EP  - 654
SN  - 2352-5398
UR  - https://doi.org/10.2991/978-2-38476-589-8_51
DO  - 10.2991/978-2-38476-589-8_51
ID  - Siwi2026
ER  -