Blockchain attack tracing system and method

Abstract

The invention relates to the technical field of information security, provides a blockchain attack tracing system and method, and aims to solve the technical problem that an attacker cannot be tracedback when an attack threat is detected in a blockchain. According to the main scheme, the system comprises: a data acquisition module for capturing corresponding data in a full synchronization processto obtain transactions and transaction information thereof; a transaction database construction module which is used for establishing an external transaction information table, an internal transaction information table and a contract creation information table according to the obtained transaction and transaction information thereof and providing an API for data query, wherein the data mainly comprises two transaction parties, a transaction block height, a transaction amount and consumed gas; a data flow tree construction module which is used for acquiring transaction data through the API ofthe database to construct a data relationship tree; and an attacker tracing module which is used for carrying out stain marking on the basis of the established data flow tree and finally positioning an attacker according to the depth of stain marking.

Description

technical field [0001] The present invention belongs to the field of block chain security. When the smart contract is attacked, the source of the attack on the contract can be found by tracing the source according to the method. This method intuitively shows the connection between contracts and users by establishing a data relationship tree, and deepens the influence structure of the blockchain network. Invoking security mechanism processing after tracing to the source of the attack can greatly enhance the security of the blockchain. Background technique [0002] Blockchain is one of the hottest technologies at present, and its applications such as Bitcoin and Ethereum also have high economic value. Therefore, attacks on these blockchain applications using smart contracts emerge in endlessly. Many people are currently devoting themselves to research on how to prevent these attacks and protect assets on the chain. But the difficulty is that the code of the smart contract is...

AI Technical Summary

Problems solved by technology

But this method does not cover all reentrancy attacks

[0008] Although the detection technology based on dynamic analysis can detect more threats and vulnerabilities, it often requires a lot of resources, and the resources on the chain are also limited

At the same time, with the complexity of smart contract code functions, there are more and more execution paths for dynamic analysis, and the time spent is also increasing

Images