<![CDATA[The rising frequency of cyber threats increases the need for incident reporting that is transparent, efficient, and privacy-preserving. This study designs and implements a hybrid Web2-Web3 cyber incident reporting prototype that anchors report references on a blockchain while storing full incident details off-chain, and explores non-fungible token (NFT) recognition incentives for reporters. Using an SDLC-based iterative prototyping approach, we built a React single-page application integrated with a Laravel REST API and MySQL for off-chain storage, and deployed Solidity smart contract modules on the Arbitrum Sepolia testnet to record report identifiers and UUID pointers (dataPointer) and to mint NFTs after administrative validation. We conducted black-box functional testing across core scenarios (submission, storage, pointer anchoring, validation, and minting) and a user acceptance study with 25 participants (15 cybersecurity students and 10 IT practitioners) using a 5-point Likert questionnaire. All tested scenarios executed as expected in the test environment, and on-chain events were traceable to corresponding backend records via transaction receipts and logged identifiers. The acceptance evaluation yielded an overall mean score of 3.4/5 (about 68%), indicating moderate acceptance and supporting the work as a prototype feasibility study rather than organizational-level generalization. The prototype demonstrates a practical workflow for hybrid incident reporting with transaction-level traceability and recognition incentives; future work should strengthen cryptographic binding (e.g., content hashing) and validate the approach with CSIRT stakeholders in operational settings.]]>
Copyrights © 2026
