블록체인 시스템의 보안성 분석: 암호 화폐에서의 사례 연구
Security Analysis of Blockchain Systems: Case Study of Cryptocurrencies
0
조회
0
다운로드
11
인용
0
참고문헌
키워드
초록
최근 4차 산업혁명으로 인해 사물인터넷 기반의 다양한 기술들이 활발하게 연구되고 있다. 사물인터넷 시대에는 기존 서버-클라이언트 구조의 중앙 집중형 운영보다는 서버에 부하를 줄이고 자율적인 사물간 데이터 통신에 적합한 피어-피어 구조의 분산형 운영방식이 요구 되고 있다. 본 논문에서는 데이터에 대한 무결성과 영속성을 지원하는 새로운 형태의 분산형 데이터베이스 기술인 블록체인에 대해 설명하고, 보안성을 분석한다. 이를 위해 블록체인의 주요한 동작을 합의 과정, 네트워크 통신 과정, 키 관리 과정으로 구분하여 각 과정에서의 가능한 공격과 대응책을 설명한다. 또한 대표적인 암호화폐 플랫폼인 비트코인과 이더리움에서 발생했던 공격들에 대해 기술한다.
Abstract
With the advance of the 4th industrial revolution, Internet of Things (IoT) technology is actively being studied. In the era of the IoT, a decentralized operation is required to reduce load on servers and enable autonomous IoT data communicationrather than focusing on centralized operation of being server client structures. This paper analyzes the security of ablockchain, a new form of distributed database platform that supports integrity and permanence of data. To achieve this, wedivide the blockchain’s major operations into a consensus process, network communication process, and key managementprocess, and then describe possible attacks and countermeasures in each process. We also describe the attack occurred intypical cryptocurrency platforms such as Bitcoin and Ethereum.
참고문헌 (26)
- World Future Report 2050, "Jerome Glenn", Kyobo Book, ~ (2016)
- Block Chain Technology Application Areas and Case Studies, "Korea Institute of Finance and Information Technology", KISA, ~ (2016)
- B. Lee, "Blockchain based secure firmware update for embedded devices in an Internet of Things environment", Journal of Supercomputing, 73(3), pp.1152~1167 (2017)[DOI]
- Satoshi Nakamoto, "Bitcoin:A peer-topeer electronic cash system" (2008)
- B. Lee, "Consensus algorithms in block-chain platforms", Proceedings of Symposium of the Korean Institute of communications and Information Sciences, pp.386~387 (2017)
- "bitcoin wiki page"[URL]
- SoHee Kim, "A Study on the Selfish Mining of Block Chain", Proceedings of Symposium of the Korean Institute of communications and Information Sciences, pp.422~423 (2015)
- I. Eyal, "Majority is not Enough: Bitcoin Mining is Vulnerable, In Financial Cryptography", pp.436~454 (2014)
- Bahack Lear, "Theoretical Bitcoin Attacks with less than Half of the Computational Power (draft)", arXiv preprint arXiv:1312.7013, ~ (2013)
- HEILMAN, Ethan, "One weird trick to stop selfish miners: Fresh bitcoins, a solution for the honest miner", International Conference on Financial Cryptography and Data Security, pp.161~162 (2014)
- Gervais, A., "On the security and performance of proof of work blockchains", Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pp.3~16 (2016), ACM
- HEILMAN, E, "Eclipse Attacks on Bitcoin's Peer-to-Peer Network", 24th USENIX Security Symposium, pp.129~144 (2015)
- Sung Bok Jeon, "Analysis of BGP Routing Protocol's Vulnerability and it's improvement measures", master, pp.2008
- Apostolaki, Maria, "Hijacking bitcoin: Routing attacks on cryptocurrencies", Security and Privacy (SP), 2017 IEEE Symposium on. IEEE (2017)
- S. Eskandari, "A first look at the usability of bitcoin key management", Workshop on Usable Security (USEC) (2015)
- Gentilal, Miraje, "TrustZone-backed bitcoin wallet", Proceedings of the Fourth Workshop on Cryptography and Security in Computing Systems (2017), ACM
- "Reason of Ethereum Hardfork"[URL]
- "Notification of Ethereum Hardfork"[URL]
- "BGP Hijacking"[URL]
- "Bitfinex Coin Exchange Hacking"[URL]
- "Yapizon Coin Exchange Hacking"[URL]
- "BTMINE bitcoin malware"[URL]
- "BitCoinMiner bitcoin malware"[URL]
- "ethereum price"[URL]
- "bitcoin exchange manipulation"[URL]
- Kroll, Joshua A., "The economics of Bitcoin mining, or Bitcoin in the presence of adversaries", Proc. of WEIS (2013)