From Network Intrusion Detection to Blockchain-Backed Endpoint Detection and Response: Mapping the Landscape of Decentralized Detection-and-Response Architectures
This work proposes a three-axis taxonomy to systematically classify research on blockchain-assisted intrusion detection and response systems. It addresses existing literature gaps by separating detection classes (like EDR/XDR) and functional roles of blockchain (like logging or trust), moving beyond monolithic categorization to better understand current research limitations.