TCST : 신뢰실행환경 내에서 스마트 컨트랙트의 제어 흐름 무결성 검증을 위한 기술
TCST : A Technology for Verifying Control Flow Integrity for Smart Contracts within a Trusted Execution Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
블록체인 기술은 일상생활을 비롯한 여러 산업 분야에서 활용도가 증가하고 있으며, 이는 분산원장 기술을 통하여 네트워크 참여자들 간의 거래 내역에 대한 정보의 무결성과 투명성을 보장한다. 무결성과 투명성을 보장하는데 가장 중요한 요소인 분산원장은 스마트 컨트랙트를 통하여 수정, 관리된다. 그러나, 스마트 컨트랙트 또한 블록체인 네트워크의 구성요소인 만큼 참여자들에게 투명하게 공개되고 있었으며 이로 인해 취약점이 쉽게 노출될 수 있었다. 이러한 단점을 보완하기 위하여 신뢰실행환경을 활용하여 기밀성을 보장하는 연구가 다양하게 진행되었으나, 실행된 스마트 컨트랙트의 무결성을 보장하기에는 어려움이 따른다. 해당 논문에서는 이러한 문제를 해결하기 위하여 신뢰실행환경내에서 실행되는 스마트 컨트랙트의 제어 흐름 무결성을 검증 함으로써 스마트 컨트랙트의 기밀성과 무결성을 동시에 제공하는 것을 목표로 한다.
Abstract
Blockchain technology is widespread in everyday life and various industry fields. It guarantees integrity and transparency between blockchain network participants through a distributed ledger. The smart contract is modifying and managing the distributed ledger, which is the most important component of guaranteeing integrity and transparency of blockchain network. Still, smart contracts are also a component of blockchain networks, it is disclosed to network participants transparently. For this reason, the vulnerability of smart contracts could be revealed easily. To mitigate this, various studies are leveraging TEE to guarantee the confidentiality of smart contracts. In existing studies, TEE provides confidentiality of smart contracts but guaranteeing the integrity of smart contracts is out of their scope. In this study, we provide not only the confidentiality of smart contracts but also their integrity, by guaranteeing the CFI of smart contracts within TEE.
참고문헌 (22)
- R. Li, "SoK : TEE-assisted confidential smart contract", Proceedings on Privacy Enhancing Technologies, 2022(3), pp.711~731 (2022)
- V. Costan, "Intel SGX Explained", IACR Cryptol, EPrint Arch, 1~118 (2016)
- "ARM Security Technology Building a Secure Systemusing TrustZone Technology"[URL]
- Z. Li, "Evil chaincode : Apt attacks based on smart contract", Communications in Computer and Information Science, 1286, pp.178~196 (2020)
- X. Wang, "ContractGuard : Defend ethereum smart contracts with embedded intrusion detection", IEEE Transactions on Services Computing, 13(2), pp.314~328 (2022)
- T. Min, "A Security Case Study for Blockchain Games", 2019IEEE Games, Entertainment, Media Conference(GEM), pp.1~8 (2019)
- E. Androulaki, "Hyperledger fabric : a distributed operating system for permissioned blockchains", Proceedings of the thirteenth EuroSys conference, pp.1~15 (2018)
- "Open Portable Trusted Execution Environment"[URL]
- M. Abadi, "Control-flow integrity principles, implementations, and applications", ACM Transactions on Information and System Security (TISSEC), 13(1), pp.1~40 (2009)
- J. Li, "ABCFI : Fast and lightweight fine-grained hardware-assisted control-flow integrity", IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 39(11), pp.3165~3176 (2020)
- N. Burow, "SoK : Shining light on shadow stacks", 2019 IEEE Symposium on Security and Privacy (SP), pp.985~999 (2019)
- T. Abera, "C-FLAT: control-flow attestation for embedded systems software", Proceedings of the 2016ACM SIGSAC Conference on Computer and Communications Security, pp.743~754 (2016)
- C. Mül er, "TZ4Fabric : Executing Smart Contracts with ARM TrustZone : (Practical Experience Report)", 2020 International Symposium on Reliable Distributed Systems(SRDS), pp.31~40 (2020)
- M. Brandenburger, "Blockchain and trusted computing : Problems, pitfalls, and a solution for hyperledger fabric", arXiv preprint arXiv:1805.08541, ~ (2018)
- "Attestation Services for Intel®Software Guard Extensions"[URL]
- X. Wang, "ContractGuard : Defend ethereum smart contracts with embedded intrusion detection", IEEE Transactions on Services Computing, 13(2), pp.314~328 (2019)
- M. Rodler, "Sereum : Protecting existing smart contracts against re-entrancy attacks", arXiv preprint arXiv:1812.05934, ~ (2018)
- C. Ferreira Torres, "ÆGIS : Smart shielding of smart contracts", Proceedings of the 2019 ACM SIGSAC conference on computer and communications security, pp.2589~2591 (2019)
- T. Chen, "SODA: A Generic Online Detection Framework for Smart Contracts", NDSS (2020)
- "Ethereum Whitepaper"[URL]
- H. Hasanova, "A survey on blockchain cybersecurity vulnerabilities and possible countermeasures", International Journal of Network Management, 29(2), pp.1~36 (2019)
- J. S. Jang, "Secret : Secure channel between rich execution environment and trusted execution environment", NDSS, pp.1~15 (2015)