面向POW共识的日蚀攻击动态防御机制

doi:10.3778/j.issn.1002-8331.2112-0552

摘要/Abstract

摘要： 日蚀攻击是区块链系统中一种恶意攻击手段，攻击者通过垄断受害节点网络，达到欺骗、控制目的。从实际区块链应用中得知，目前为止还没有防御日蚀攻击的好方法，因此为了解决该问题，设计了一种针对POW共识区块链系统的日蚀攻击动态防御模型，其基于节点间互相评价机制。具体来说，通过综合客户端之间互相评价的结果，基于kademlia算法和设计的等级值评估机制，为每个节点评估、存储一个等级，节点根据等级值和等级限定值之间的关系选择正常对等节点作为邻居，以避免恶意节点。经过实验证明，该方法可以有效抵御日蚀攻击。该方法改进了先前提出的一系列防御策略，无需对区块链系统协议、网络等进行更改，能够较高概率地成功抵御日蚀攻击，并且模型产生的开销也很小，非常适合实际部署。

关键词: 日蚀攻击, POW共识机制, 动态防御, 等级值, 区块链协议

Abstract: The eclipse attack is a malicious attack method in the blockchain system. Attackers achieve the purpose of deception and control by monopolizing the network of victim nodes. It is known from actual blockchain applications that there is no good way to defend against eclipse attacks. Therefore, in order to solve this problem, a dynamic defense model for solving eclipse attacks based on the POW consensus blockchain system is designed, which is based on mutual evaluation mechanism between nodes. Specifically, based on kademlia algorithm, it evaluates and stores a level for every node on the result of mutual evaluation between clients to design a level evaluation mechanism. The nodes select normal peer nodes as their neighbors and avoid malicious nodes according to the relation between level value and level limitation value. Experiments have proved that this method can effectively resist eclipse attacks. This method improves a series of defense strategies previously proposed. It does not need to change the protocol and network of the blockchain system. It can successfully resist eclipse attacks with a high probability, and the overhead generated by the model is also very small, which is very suitable for actual deployment.

Key words: eclipse attack, POW consensus, dynamic defense, level value, blockchain protocol

卫孜钻, 王鑫, 于丹, 马垚, 陈永乐. 面向POW共识的日蚀攻击动态防御机制[J]. 计算机工程与应用, 2023, 59(8): 280-287.

WEI Zizuan, WANG Xin, YU Dan, MA Yao, CHEN Yongle. Defense Mechanism to Solve Eclipse Attack of POW Consensus[J]. Computer Engineering and Applications, 2023, 59(8): 280-287.

参考文献

[1] NAKAMOTO S.Bitcoin：a peer-to-peer electronic cash system[J].Decentralized Business Review，2008：21260.
[2] YAGA D，MELL P，ROBY N，et al.Blockchain technology overview[J].arXiv：1906.11078，2019.
[3] WOOD G.Ethereum：a secure decentralised generalised transaction ledger[J].Ethereum Project Yellow Paper，2014，151：1-32.
[4] ANDROULAKI E，BARGER A，BORTNIKOV V，et al.Hyperledger fabric：a distributed operating system for permissioned blockchains[C]//Proceedings of the Thirteenth EuroSys Conference，2018：1-15.
[5] KHANFAR A A A，IRANMANESH M，GHOBAKHLOO M，et al.Applications of blockchain technology in sustainable manufacturing and supply chain management：a systematic review[J].Sustainability，2021，13（14）：7870.
[6] TOMESCU A，DEVADAS S.Catena：efficient non-equivocation via bitcoin[C]//2017 IEEE Symposium on Security and Privacy（SP），2017：393-409.
[7] Opentimestamp[EB/OL].[2021-11-25].https：//opentimestamps.org/.
[8] DECKER C，WATTENHOFER R.A fast and scalable payment network with bitcoin duplex micropayment channels[C]//Symposium on Self-Stabilizing Systems.Cham：Springer，2015：3-18.
[9] GERVAIS A，KARAME G O，WüST K，et al.On the security and performance of proof of work blockchains[C]//Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security，2016：3-16.
[10] GERVAIS A，RITZDORF H，KARAME G O，et al.Tampering with the delivery of blocks and transactions in bitcoin[C]//Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security，2015：692-705.
[11] DOUCEUR J R.The sybil attack[C]//Proceedings of 1st International Workshop on Peer-to-Peer Systems.Berlin，German：Springer-Verlag，2002.
[12] HEILMAN E，KENDLER A，ZOHAR A，et al.Eclipse attacks on bitcoin’s peer-to-peer network[C]//24th {USENIX} Security Symposium （{USENIX} Security 15），2015：129-144.
[13] EKPARINYA P，GRAMOLI V，JOURJON G.The attack of the clones against proof-of-authority[J].arXiv：1902.
10244，2019.
[14] GERVAIS A，KARAME G O，WüST K，et al.On the security and performance of proof of work blockchains[C]//Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security，2016：3-16.
[15] NAYAK K，KUMAR S，MILLER A，et al.Stubborn mining：generalizing selfish mining and combining with an eclipse attack[C]//2016 IEEE European Symposium on Security and Privacy（EuroS&P），2016：305-320.
[16] ATZEI N，BARTOLETTI M，CIMOLI T.A survey of attacks on ethereum smart contracts （sok）[C]//International Conference on Principles of Security and Trust.Berlin，Heidelberg：Springer，2017：164-186.
[17] WüST K，GERVAIS A.Ethereum eclipse attacks[R].ETH Zurich，2016.
[18] MARCUS Y，HEILMAN E，GOLDBERG S.Low-resource eclipse attacks on Ethereum’s peer-to-peer network[J].IACR Cryptol ePrint Arch，2018，2018：236.
[19] Bitcoinj security model[EB/OL].[2021-11-25].https：//bitcoinj.github.io/security-model.
[20] XU G，GUO B，SU C，et al.Am I eclipsed? A smart detector of eclipse attacks for Ethereum[J].Computers & Security，2020，88：101604.
[21] ALANGOT B，REIJSBERGEN D，VENUGOPALAN S，et al.Decentralized lightweight detection of eclipse attacks on bitcoin clients[C]//2020 IEEE International Conference on Blockchain（Blockchain），2020：337-342.
[22] 彭冬生，林闯，刘卫东.一种直接评价节点诚信度的分布式信任机制[J].软件学报，2008，19（4）：946-955.
PENG D S，LIN C，LIU W D.A distributed trust mechanism directly evaluating reputation of nodes[J].Journal of Software，2008，19（4）：946-955.
[23] ALUKO O，KOLONIN A.Proof-of-reputation：an alternative consensus mechanism for blockchain systems[J].International Journal of Network Security & Its Applications（IJNSA），2021，13：23-40.