A software tool originally built to measure how decentralised blockchain networks are is now being adapted to assess vulnerabilities in software supply chains, financial systems, and critical national infrastructure. The problem is that many security-critical systems—from power grids to cloud computing platforms—rely on a small number of suppliers, developers, or decision-makers. This concentration creates single points of failure that attackers can exploit. The Edinburgh Decentralisation Index (EDI) provides a structured way to measure that concentration, revealing hidden risks in how software is developed, how updates are governed, and how infrastructure is distributed. If the framework succeeds beyond blockchain, organisations managing mission-critical systems could use it to identify weak links in their software dependencies, reduce the risk of supply chain attacks, and improve resilience in power grids, telecom networks, and financial platforms. The project will refine existing metrics, develop new assessment layers, and test them with industry partners. It does not promise a finished product—but it aims to turn a research tool into a practical risk-assessment method for sectors where failure is not an option.
View original technical description
Edinburgh Decentralisation Index (EDI): Expanding Decentralisation Metrics to Security-Critical Systems Decentralisation is a key factor in ensuring the resilience, security, and trustworthiness of digital ecosystems. The **Edinburgh Decentralisation Index (EDI)** was developed as a robust and transparent framework to measure decentralisation in **layer-one blockchain networks**, offering a structured methodology for assessing governance, consensus, software dependencies, and infrastructure distribution. This project aims to **extend the EDI framework beyond blockchain applications** and apply its methodology to other security-sensitive domains, particularly those where decentralisation is a measure of resilience and risk mitigation. In industries where trust and security are paramount---such as **software supply chains, critical infrastructure, and digital financial systems**---a decentralisation assessment can offer new insights into **single points of failure, power concentration, and systemic risks**. One of the key transferable components of EDI is its **software layer**, which assesses the decentralisation of software development and dependencies in blockchain ecosystems. This layer can be **directly applied to software supply chains**, particularly in industries that rely on **high-value, mission-critical software systems**. By evaluating the distribution of control over software development, the diversity of contributors, and the governance of updates, this approach can help organisations **identify vulnerabilities** in their software ecosystems, improving overall security and reducing the risk of supply chain attacks. In addition to the software layer, other elements of the EDI framework may be adapted or expanded based on specific industry needs. For example: * **Financial Systems & Decentralised Finance (DeFi):** Assessing decentralisation in financial applications to measure resilience against systemic risks. * **Cloud & Network Infrastructure:** Measuring control distribution in cloud computing environments to reduce centralisation risks in critical data services. * **Critical National Infrastructure (CNI):** Applying decentralisation metrics to assess the robustness of **power grids, telecommunication networks, and emergency response systems**. By adapting EDI's framework to these domains, we aim to create an **actionable, data-driven approach to decentralisation measurement** that enhances **resilience, security, and risk assessment methodologies**. The project will involve **refining existing decentralisation metrics, developing new layers where necessary, and engaging with industry partners** to validate its applicability in real-world security-critical environments. This initiative will **bridge the gap between decentralisation research and practical security applications**, offering a novel perspective on resilience assessment in industries beyond blockchain. Through this expansion, we will establish EDI as a **widely applicable framework for assessing systemic risk, fostering transparency, and strengthening security across multiple domains**.
Plain English summaries and category classifications on this site are generated by AI and may not perfectly reflect the original research.
Is something wrong? Let us know