PulseExploreJournal ClubTrendingResearchersJournals
Instagram
HomeExploreJournal ClubTrending
Synapse
⌘+K
Synapse
August 8, 2026Distributed Ledger Technologies Research and PracticeOpen Access

GuixChain: Enforcing Reproducible Builds and Provenance Integrity for Secure Automotive OTA Pipelines

View Full Paper
Ask AI
Bookmark
Share

Authors

IAIwinosa AideyanMPMert D. PeséRBRichard R. Brooks

Discussion

Loading...

Member takes

Overview

Randomized trial demonstrates enhanced integrity of automotive software supply chains, indicating critical security improvements.

Key Points

  • The aim is to enhance the integrity of automotive software updates through a verifiable supply chain framework.
  • Developed GuixChain, a blockchain-backed reproducible build layer for automotive OTA pipelines.
  • Integrated deterministic GNU Guix builds, cryptographic SBOM binding, and Hyperledger Fabric smart contracts.
  • Evaluated across a consortium involving OEMs, suppliers, and auditors over 30 build cycles.
  • Reliable reproducibility achieved over 30 build cycles with low latency detection of fault injection (1.8–2.4 seconds).
  • System maintained modest overheads: 15–19% CPU, 1.4–3.5 GB memory, and 41–60 MB disk usage.
  • Consensus-based reproducibility increased build verification time by only 2–3 seconds, yielding 30–38 seconds total per validator.

Cite This Study

Aideyan et al. (2026) studied this question.

synapsesocial.com/papers/6a76db2df12abadc798163bdhttps://doi.org/10.1145/3834755
View Full Paper
Ask AI
Bookmark
Share