Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Validate Allowed Signers | Contents | next: Require Multiple Signers

Compare Old Transactions

Statement of Requirement

Signature Managers SHOULD provide a mechanism to compare a transaction proposed for signing against previously signed transactions.

See it in the specification

Applicability

• Signature Managers

Purpose

Help verify that a transaction is similar to previous transactions, and identify accidentally and incorrectly anomalous transactions before deploying them.

Audit Procedure

Verify that the Signature Manager provides a comparison of a transaction presented for signature to previous transactions

Success Criteria

The Signature Manager provides a comparison to previous transactions

See also Apply Transaction Policies to Signing, Enable Transaction Policies for Signing

Best Practice

The Signature Manager provides information about the proposed transaction compared to patterns in previous transactions such as

• address information
• value
• security verifications for Application Transactions

Parameters for this feature are configurable, as part of Enable Transaction Policies for Signing

Failure Criteria

There is no mechanism to compare a transaction to old transactions

Justifiable Exceptions

This is a useful feature. However, its absence is justifiable on the grounds of keeping code or interfaces simple. Justification for not meeting this requirement does not need to be explicit.

Key Evidence

• User Interface
• Reperformance

previous: Validate Allowed Signers | Contents | next: Require Multiple Signers