Blockchain Application Security: How to Design Secure and Attack Resilient Blockchain Applications - Hardcover

Über die Autorin bzw. den Autor

Marco Morana is the Field CISO at Avocado Systems Inc., where he leads the deployment of runtime threat modeling and product security solutions for enterprise clients where he leads the deployment of runtime threat modeling and product security solutions for enterprise clients. Previously, he held senior security leadership roles at JPMorgan Chase and Citibank, where he directed global architecture programs and led S-SDLC adoption across cloud and application platforms. At Citibank, Marco conducted architecture risk assessments for blockchain pilots including the first digital asset trade with Nasdaq via Chain.com and authored the bank's first security standards for blockchain. He is the coauthor of the PASTA threat modeling methodology and OWASP project leader focused on secure-by-design for blockchain and AI systems.

Harpreet Singh is a seasoned engineering leader with 19 years of experience driving innovation in AI/LLM, cybersecurity, and large-scale distributed systems. He is known for a strategic approach to architecture, a focus on customer trust and safety, and a collaborative leadership style. He has successfully launched new products, integrated emerging technologies, and optimized security practices across global organizations.

Francesco Piccoli is the cofounder and CEO of Almanax, a cybersecurity firm specializing in AI-powered solutions. He was previously the Head of Product at AnChain.AI, where he built security and compliance tools for the US SEC, IRS, and Salesforce. His team was part of $100M+ crypto hacks investigations. Prior to AnChain.AI, he led research initiatives in anomaly detection and autonomous driving. Francesco holds a Master of Engineering from UC Berkeley and lives in New York.

Von der hinteren Coverseite

Blockchain Application Security: How to Design Secure and Attack Resilient Blockchain Applications

Learn to secure, design, implement, and test tomorrow's blockchain applications.

Blockchain Application Security guides readers through the architecture and components of blockchain, including protocols such as Bitcoin and beyond, by offering a technical yet accessible introduction. This resource is ideal for application architects, software developers, security auditors, and vulnerability testers working on enterprise blockchain solutions. It bridges the gap between theory and implementation, providing actionable guidance on protecting decentralized systems while capitalizing on their innovative benefits.

Blockchain Application Security covers the essentials, from the fundamentals of distributed ledgers, consensus algorithms, digital wallets, smart contracts, privacy controls, and DIDs, to designing secure dApp architectures with component-level threat analysis and resilient APIs, token transactions, digital exchanges, and identity models. It features a complete lifecycle example for securing a DeFi lending and borrowing platform, along with practical walkthroughs for smart contract development, AWS-integrated blockchain systems, frontend/API integration, and code auditing.

"An accessible, comprehensive blockchain overview that emphasizes its value across industrial and government sectors with a holistic security focus."
―David W. Kravitz, Technical Advisor, Spring Labs

"A cutting-edge method for securing blockchain applications, pushing the boundaries of current practice."
―David Cervigni, Senior Security Research Engineer at R3

"Bridging theory and practice with realistic examples, this guide empowers architects and developers to build attack-resistant applications."
―Steven Wierckx, Product Security Team Lead & Threatmodel Trainer at Toreon

"A valuable resource for blockchain specialists, featuring hands-on examples of deploying dApps on AWS and securing infrastructure."
―Ihor Sasovets, Lead Security Engineer, Penetration Tester at TechMagic

"A practical roadmap for navigating blockchain security that we recommend to clients and incorporate into our training.
―Vijay Dhanasekaran, Founder & Chief Blockchain Officer, Consultant at Blocknetics

"An indispensable resource for dApp developers, guiding readers from fundamentals to advanced implementation with in-depth vulnerability analysis."
―Mohd Mehdi, Head of DevOps, DevSecOps and Infrastructure at InfStones