본문 바로가기
KERD
논문KCI 등재

블록체인 이더리움 기반 스마트 거래 시 거래내역 보호를 위한 위협요소 탐지 및 대응방법 연구 = 안드로이드 OS 기반 -

A Study on Privilege Elevation Attack Management for Smart Transaction Security on BlockChain Etherium Based System

0

조회

0

다운로드

0

인용

0

참고문헌

키워드

주제분류컴퓨터학

초록

IAs smart device penetration rate is more than 90%, mobile transaction ratio using smart device is increasing. Smart contracts are used in various areas of real life including smart trading. By applying smart contracts to the platform for smart transactions through block-chain technology, the threat of hacking or forgery can be reduced. However, various threats to devices in smart transactions can pose a threat to the use of block chain Etherium, an important element in privilege and personal information management. Smart contract used in block chain Ethereum includes important information or transaction details of users. Therefore, in case of an attack of privilege elevation, it is very likely to exploit transaction details or forge or tamper with personal information inquiry. In this paper, we propose a detection and countermeasure method for privilege escalation attack, which is especially important for block chain for secure smart transaction using block chain Ethereum. When comparing the results of this study with the results of similar applications and researches, we showed about 12~13% improvement in performance and suggested the future countermeasures through packet analysis.

Abstract

IAs smart device penetration rate is more than 90%, mobile transaction ratio using smart device is increasing. Smart contracts are used in various areas of real life including smart trading. By applying smart contracts to the platform for smart transactions through block-chain technology, the threat of hacking or forgery can be reduced. However, various threats to devices in smart transactions can pose a threat to the use of block chain Etherium, an important element in privilege and personal information management. Smart contract used in block chain Ethereum includes important information or transaction details of users. Therefore, in case of an attack of privilege elevation, it is very likely to exploit transaction details or forge or tamper with personal information inquiry. In this paper, we propose a detection and countermeasure method for privilege escalation attack, which is especially important for block chain for secure smart transaction using block chain Ethereum. When comparing the results of this study with the results of similar applications and researches, we showed about 12~13% improvement in performance and suggested the future countermeasures through packet analysis.

참고문헌 (16)

  1. Online shopping trend survey, "Min.K.S", National Statistical Office, ~ (2019)
  2. Device Authentication for Smart Grid System Using Block Chain, "Lee.S.H", KAIST, ~ (2016)
  3. "A Brief History of Ethereum From Vitalik Buterin’s Idea to Release"[URL]
  4. Information and Communication Policy Institute, "Online marketing trend" (2018)
  5. Impacts and Implications of Block Chain Technology, "Lim. M. H", Information and Communication Technology Promotion Center, ~ (2017)
  6. Understanding and Development Status of Block Chain Technology and Implications, "Kang. S. J", Information and Communication Industry Promotion Agency, ~, pp.No.13 (2018)
  7. "smart finance"[URL]
  8. "Ernst & Young Global Limited"[URL]
  9. "5Miles"[URL]
  10. "Block Chain-Fancy or Innovative"[URL]
  11. "Gartner"[URL]
  12. "Mcafee"[URL]
  13. Zhou,Y., "Dissecting android malware:Charac terizationand evolution.In Securityand Privacy", 2012IEEE Symposium, pp.95~109 (2012)
  14. JIANG. X, "Gingermaster: First andorid malware utilzing a root exploit on android 2.3", pp.2011
  15. William Enck, "TaintDroid : aninformation-flow trackingsystem forrealtimeprivacy monitoring on smartphones", Proceeding sof the 9th USENIX conference on Operating systems design and implementation, pp.1~6 (2014)
  16. Xu. R., "Aurasium : Practical policy enforcement for android applications", Proceeding sof the 21st USENIX conferenceon Security symposium, pp.27~27 (2012)

관련 논문AI추천

이 간행물의 다른 논문 (24건)