A blockchain security range system

Abstract

Embodiments of the present invention disclose a blockchain security range system. The method includes an environment setup module and a competition module. The environment setup module is configured to provide at least one blockchain node and deploy competition information associated with the competition module on the blockchain. The environment setup module is also configured to obtain the blockchain environment created by the contestant and display competition information based on the blockchain environment, allowing the contestant to enter the competition process. The competition module is configured to display the competition question and the competition contract to the contestant and determine the competition result based on the contestant's answer to the question in accordance with the competition contract. This system can establish a security range based on blockchain security issues, addressing the technical deficiencies of existing blockchain security range technologies and reducing the maintenance costs of blockchain data security.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of computer security technology, and in particular to a blockchain security range system. Background Art

[0002] As computer networks expand in size and their topologies become increasingly complex, network security planning and design can no longer rely solely on experience and theory. Conducting single network security experiments or attack and defense drills directly in actual production environments fails to cover a wide range of attack and defense scenarios. Repeated experiments require constant adjustments to physical equipment and nodes, increasing costs and easily leading to physical equipment failures and system crashes, resulting in unnecessary losses. Therefore, network security testing ranges have emerged.

[0003] The Cyber ​​Security Target Range uses cyber security simulation technology to quickly and cost-effectively build a simulated network environment, supporting users to conduct real large-scale network attack and defense drills, emergency drills, training and education in this environment, test and evaluate the weak links of network environment security and network facilities, help users prevent unknown threats and attacks, and improve security protection capabilities.

[0004] However, as blockchain technology becomes increasingly mature and popular, its security issues have attracted people's attention. There is an urgent need to develop a security target range for blockchain, simulate the blockchain environment, and ensure data security. Summary of the Invention

[0005] The embodiments of the present invention provide a blockchain security range system, which can make up for the technical deficiencies of the existing technology in the blockchain security range and reduce the maintenance cost of blockchain data security.

[0006] An embodiment of the present invention provides a blockchain security range system, which includes: an environment construction module and a competition module; wherein:

[0007] An environment building module, which is used to provide at least one blockchain node and deploy the competition information associated with the competition module on the blockchain;

[0008] The environment building module is also used to obtain the blockchain environment built by the contestants and display the competition information based on the blockchain environment so that the contestants can enter the competition process;

[0009] The competition module is used to present the competition questions and the competition contract to the contestants, and determine the competition results based on the contestants' answers to the competition questions in accordance with the competition contract.

[0010] Optionally, the competition module includes: a blockchain target competition unit, and / or a blockchain attack and defense competition unit; wherein:

[0011] The blockchain shooting competition unit is used to present the blockchain capture the flag competition problem and competition contract to the contestants, and determine the competition results based on the contestants' answers to the competition problems triggered by the competition contract function call;

[0012] The blockchain attack and defense competition unit is used to show the attack and defense contracts of the blockchain attack and defense competition to the contestants, and determine the results of the competition based on the contestants triggering function calls on the attack and defense contracts according to the competition contracts.

[0013] Optionally, the blockchain target competition unit includes: a competition topic setting subunit;

[0014] The competition question setting subunit is used to set the competition questions according to the competition question dependency tree; wherein, there is a network dependency relationship between the competition questions in the competition question dependency tree, and the competition questions of the subsequent nodes can only be unlocked when the competition questions of the previous node are successfully solved.

[0015] Optional, the competition topic setting subunit is used to:

[0016] The competition questions are set up in a network dependency relationship according to the difficulty and score of the competition questions preset in the competition question dependency tree.

[0017] Optional, blockchain attack and defense competition unit, including: competition contract update sub-unit;

[0018] The competition contract update sub-unit is used to synchronously update its own defense contract address when it detects that the contestant has updated his or her defense contract.

[0019] Optionally, the system further includes: a competition contract setting module;

[0020] The competition contract setting module is used to set the competition contract in the blockchain's secure shooting range system as an interface function.

[0021] Optionally, the environment building module is set up in an intranet environment.

[0022] Optionally, the blockchain security range system includes at least one of the following blockchain types: Ethereum, EOS, and TRON;

[0023] Among them, the blockchain type is determined by the blockchain environment obtained by the environment construction module.

[0024] Optionally, the environment building module is also used to:

[0025] Provide virtual resource accounts that match the contestants; the virtual resource accounts are used to allocate and record virtual resources to the contestants based on their answers to the competition questions provided by the competition module.

[0026] Optionally, the interface function includes at least one of the following:

[0027] Functions for starting the game, stopping the game, adding contestants, updating the virtual resource allocation of contestants, and updating the contestant's own defense contract address.

[0028] The technical solution of the embodiment of the present invention forms a blockchain security range system by deploying an environment construction module and a competition module, wherein: the environment construction module is used to provide at least one blockchain node and deploy the competition information associated with the competition module on the blockchain; the environment construction module is also used to obtain the blockchain environment built by the contestant and display the competition information according to the blockchain environment to enable the contestant to enter the competition program; the competition module is used to display the competition questions and the competition contract to the contestant, and determine the competition results based on the contestant's answer to the competition questions according to the competition contract. This solves the security simulation problem of the blockchain, makes up for the technical deficiencies of the existing technology in the blockchain security range, and achieves the effect of reducing the maintenance cost of blockchain data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 This is a schematic diagram of the structure of a blockchain security range system provided by an embodiment of the present invention;

[0030] Figure 2 This is a schematic diagram of the system architecture of a secure range blockchain node provided by an embodiment of the present invention;

[0031] Figure 3 This is a schematic diagram of the structure of a competition question dependency tree provided by an embodiment of the present invention;

[0032] Figure 4 This is a schematic diagram of an attack and defense contract provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0033] The present invention will be further described in detail below with reference to the accompanying drawings and examples. It will be understood that the specific embodiments described herein are intended only to illustrate the present invention and are not intended to limit the present invention. It should also be noted that, for ease of description, the accompanying drawings only illustrate portions relevant to the present invention, not all structures.

[0034] Figure 1 This is a schematic diagram of the structure of a blockchain security range system provided by an embodiment of the present invention. This embodiment can be applied to establish a security range for blockchain, conduct blockchain environment simulation, and implement blockchain flag capture and attack and defense drills, such as Figure 1 As shown, the system specifically includes: an environment building module 110 and a competition module 120; wherein:

[0035] The environment construction module 110 is used to provide at least one blockchain node and deploy the competition information associated with the competition module on the blockchain. The environment construction module 110 is also used to obtain the blockchain environment built by the contestant and display the competition information based on the blockchain environment to enable the contestant to enter the competition program. The competition module 120 is used to display the competition questions and the competition contract to the contestant and determine the competition results based on the contestant's answer to the competition questions based on the competition contract.

[0036] Specifically, the Cybersecurity Range can meet the needs of enterprises, institutions, scientific research organizations, and large groups for building cybersecurity simulation environments, providing a centralized cybersecurity testing platform that approximates actual combat. The platform has the ability to build large-scale, complex training environments. By combining physical construction with software virtualization, it can orchestrate a hybrid network of simulated network devices, actual equipment, virtual networks, and virtual nodes. It can manage and control a large number of hardware devices and virtual computing resources in the training environment, creating a large-scale, highly realistic simulation environment. The Cybersecurity Range can provide unified environment construction management capabilities, supporting the rapid construction of new training environments, dynamic adjustment of current training environments, and restoration and reconstruction of historical training environments. It can also implement centralized configuration management capabilities, manage and control various virtual computing resources, network resources, hardware resources, and security devices, and can simultaneously run multiple homogeneous or heterogeneous training scenarios, supporting secure isolation of multiple scenarios.

[0037] The technical solution of this embodiment of the present invention applies a secure testing range to the blockchain, transforming the centralized server model into a distributed blockchain model. By processing the questions and attack and defense on-chain, deployment on a public test chain is avoided. This is more consistent with blockchain scenarios and real-world attack and defense environments, thereby preventing cheating caused by external influences in the competition. Furthermore, the distributed deployment eliminates the need for expensive servers and ensures data security.

[0038] In the embodiment of the present invention, different from the browser / server (B / S) or server / client (C / S) architecture of traditional games, in the blockchain security range system, the Figure 1 The illustrated environment setup module 110 builds several blockchain nodes and deploys competition information associated with the competition module on the blockchain. This competition information may include the competition question and contract. It may also include documentation for setting up blockchain nodes. This documentation may include detailed instructions for setting up blockchain nodes and serve as a prerequisite for accessing the blockchain to conduct security simulations.

[0039] In the embodiment of the present invention, Figure 1 The environment building module 110 shown is also used to obtain the blockchain environment built by the contestant and display the competition information based on the blockchain environment so that the contestant can enter the competition program. Specifically, the contestant can use the environment building module 110 to build the blockchain node, blockchain client and corresponding blockchain browser to form the blockchain environment. In other words, in the blockchain security range system of the embodiment of the present invention, the specific construction environment of the blockchain environment is left to the contestant to build, rather than building the blockchain environment and directly displaying the competition questions to the user. The advantage of this setting is that it can train the contestants to start the blockchain node, which is more in line with the interaction process with the blockchain in the actual environment.

[0040] Once the environment setup module has retrieved the contestant's blockchain environment, the contestant can enter the blockchain environment and view the deployed competition problem and contract, effectively entering the competition process. If the contestant is unable to successfully build and synchronize the blockchain node, the competition process will not begin, meaning they will not be able to view the competition problem, contract, or other content.

[0041] Specifically, Figure 2 This is a schematic diagram of the system architecture of a secure range blockchain node provided by an embodiment of the present invention. Figure 2 As shown, you can use the environment setup module to build a service node blockchain node in advance and deploy the competition problem and contract on the blockchain. Participants can use the environment setup module to build a blockchain environment and implement the node type blockchain node. After the setup is successful, they can enter the blockchain environment and view the competition problem and contract on the blockchain.

[0042] In an optional implementation of an embodiment of the present invention, the environment construction module is set up in an intranet environment. In this embodiment of the present invention, setting the environment construction module in an intranet environment can achieve network security isolation. Specifically, it can support the isolation of the experimental simulation network from the underlying physical environment, the security isolation between experimental networks, and the isolation of the experimental network from the Internet. By setting up an intranet environment, the blockchain security range system can be protected from external interference, preventing the occurrence of cheating.

[0043] In an optional implementation of an embodiment of the present invention, the blockchain security range system includes at least one of the following blockchain types: Ethereum, Enterprise Operating System (EOS), and TRON; wherein the blockchain type is determined by the blockchain environment obtained by the environment building module.

[0044] Among them, in the embodiment of the present invention, the blockchain type can be switched, and it can be specifically implemented by the contestants building different blockchain environments, so that multiple blockchain systems can be supported for competition, achieving the effect of randomly switching the competition scene.

[0045] Specifically, in an embodiment of the present invention, by having contestants build a blockchain environment, it is possible to switch between multiple blockchain types; multiple blockchain scenarios can run simultaneously, and each scenario can be logically isolated and non-interfering with each other; and the depth of the competition can be deepened to achieve customized blockchains, and the contestants' adaptability to new blockchain technologies and the effectiveness of their engineering and technical capabilities can be examined.

[0046] In an optional implementation of an embodiment of the present invention, the environment construction module is further used to: provide virtual resource accounts matching the contestants; wherein the virtual resource accounts are used to allocate and record virtual resources to the contestants based on the contestants' answers to the competition questions provided by the competition module.

[0047] Among them, the environment building module can pre-build matching virtual resource accounts for the contestants. The virtual resource accounts can dynamically record virtual resources based on the user's competition performance in the blockchain environment. For example, the virtual resource account can have a certain initial amount of virtual resources. When the contestant succeeds in the competition, the number of virtual resources can be increased, and when the contestant fails, the number of virtual resources can be reduced. Ultimately, the number of virtual resources can be used to determine the contestant's ranking and the result of the competition. Afterwards, the virtual resources in the contestant's matched virtual resource account can be used for certain business transactions, which are not specifically limited in this embodiment of the present invention. By setting virtual resources, the contestant's competition results can be determined, which can motivate the contestant to actively participate in the competition.

[0048] In the embodiment of the present invention, after the contestants have built the blockchain environment, they can enter the competition program, which can be done by Figure 1 The game module 120 is shown to solve the game questions. In the embodiment of the present invention, the game questions can be multifaceted, for example, they can support multiple business scenarios, for example, they can support business scenarios such as flag capture, attack and defense confrontation drills, and network security risk assessments.

[0049] Specifically, in an optional implementation of an embodiment of the present invention, the competition module includes: a blockchain target game unit, and / or a blockchain attack and defense game unit; wherein: the blockchain target game unit is used to display the game questions and game contracts of the blockchain capture the flag game to the contestants, and determine the game results based on the contestants triggering function calls to answer the game questions according to the game contract; the blockchain attack and defense game unit is used to display the attack and defense contracts of the blockchain attack and defense game to the contestants, and determine the game results based on the contestants triggering function calls to attack and defend the attack and defense contracts according to the game contract.

[0050] Specifically, the Blockchain Target Competition Unit can be used to implement a blockchain capture-the-flag competition. This competition is achieved by triggering the competition problem and specific functions in the competition contract, and by invoking legal function calls. The competition problem and competition contract in the Blockchain Target Competition Unit are public, allowing any participant to trigger legal function calls to solve the problem. This makes blockchain capture-the-flag competition more competitive than traditional competitions.

[0051] In an optional implementation of an embodiment of the present invention, the blockchain target game unit includes: a game question setting subunit; the game question setting subunit is used to set the game question according to the game question dependency tree; wherein, there is a mesh dependency relationship between the game questions in the game question dependency tree, and the game question of the subsequent node can only be unlocked when the game question of the previous node is successfully solved.

[0052] Among them, the blockchain target competition unit can set the competition topic as a flag-grabbing competition consisting of multiple competition topic dependency trees through the competition topic setting sub-unit. Figure 3 This is a schematic diagram of the structure of a competition question dependency tree provided by an embodiment of the present invention. Figure 3 As shown in the figure, each node in the question dependency tree is a competition question. There is a network dependency relationship between the competition questions. When the competition question of the previous node is solved successfully, the competition question of the subsequent node can be unlocked. The question dependency tree can be specifically implemented by calling the competition contract. In the embodiment of the present invention, it can be realized by Figure 3 The problem dependency tree shown here enhances the competitiveness and entertainment of the competition.

[0053] Specifically, in an optional implementation of the embodiment of the present invention, the competition question setting subunit is specifically used to: set the network dependency relationship of the competition questions according to the difficulty of the competition questions and the competition question scores preset in the competition question dependency tree. Figure 3 Each node in the question dependency tree shown can have a different question score. The question score can be specifically set according to the difficulty of the question. Figure 3In the problem dependency tree shown, the order of each node can be set based on the problem difficulty, specifically generating pre-order nodes and post-order nodes. For example, the problem difficulty of the pre-order node can be lower than that of the post-order node. The more difficult the problem, the higher the corresponding score. By setting different difficulty levels and scores, the performance of each participant can be differentiated.

[0054] In addition to blockchain capture-the-flag competitions, blockchain attack-and-defense competitions can also be implemented in this embodiment of the present invention. Specifically, blockchain attack-and-defense competitions can be implemented using a blockchain attack-and-defense competition unit. The blockchain attack-and-defense competition unit can deploy a defense contract for each participant. The number of defense contracts can be one or more. Figure 4 This is a schematic diagram of an attack and defense contract provided by an embodiment of the present invention. Figure 4 As shown in the figure, the defense contract is open source and shared on the blockchain. Every participant can see all contracts. Except for the defense contract corresponding to their own, all other contracts are attackable contracts. Therefore, these contracts together constitute the attack and defense contracts.

[0055] To improve the skill assessment of participants, each contract contains intentionally exploitable vulnerabilities. In the blockchain attack and defense competition, each participant can identify vulnerabilities in their own defensive contract, strengthen their own defensive contract, and attack the defensive contracts of others. Both remediating vulnerabilities in a specific defensive contract and attacking others' defensive contracts can be achieved by triggering function calls in the pencil case contract. The competition results are determined by determining the participant's success in remediating vulnerabilities in their own defensive contract and attacking others' defensive contracts. The specific competition rules can be set based on actual needs and are not specifically limited in this embodiment of the present invention.

[0056] In an optional implementation of an embodiment of the present invention, the blockchain attack and defense competition unit includes: a competition contract update sub-unit; the competition contract update sub-unit is used to synchronously update its own defense contract address when it detects that a contestant has updated his or her own defense contract.

[0057] Blockchains are tamper-proof, specifically by deploying new contracts to replace old ones. Therefore, in embodiments of the present invention, a mechanism is required to update attack discrimination criteria. Specifically, attack discrimination criteria can be implemented by deploying a competition contract. For example, the competition contract can record each contestant's latest contract address. When a contestant updates their defensive contract, they must also update the defensive contract address associated with their own in the competition contract. The competition contract also locks the old contract, so even if an attack on the old contract is successful, it will not be considered a successful attack. Specifically, in embodiments of the present invention, the defensive contract address can be updated via the competition contract update subunit.

[0058] In an optional implementation of an embodiment of the present invention, the system further includes: a competition contract setting module; the competition contract setting module is used to set the competition contract in the blockchain security shooting range system as an interface function.

[0059] Specifically, participants in the blockchain security competition need to obtain corresponding scores after successfully solving a problem or launching an attack. The judgment criteria and scoring records are achieved by setting up a competition contract, which can take advantage of the fairness and openness of the blockchain to make the competition more transparent and fair.

[0060] In an optional implementation of an embodiment of the present invention, the interface function includes at least one of the following: a game start function, a game stop function, a contestant addition function, a contestant virtual resource allocation update function, and a contestant's own defense contract address update function.

[0061] Among them, the match start function (startMatch()) can be called through the service node, indicating that other functions can be called. The match stop function (stopMatch()) can be called through the service node, indicating that other functions cannot be called. The add contestant function (addPlayer(player)) can be called through the service node. After the contestant successfully enters the competition venue, the service node can add the contestant to the list of contestants. The update contestant virtual resource allocation function (addMarkToPlayer(player,mark)) can be called through the service node, and can add scores corresponding to the competition situation to the contestant. The update contestant's own defense contract address function (updatePlayContract(player,contract_address)) can be called through the contestant node to update the contestant's defense contract address.

[0062] The technical solution of this embodiment forms a blockchain security range system by deploying an environment construction module and a competition module, wherein: the environment construction module is used to provide at least one blockchain node and deploy the competition information associated with the competition module on the blockchain; the environment construction module is also used to obtain the blockchain environment built by the contestant and display the competition information based on the blockchain environment to enable the contestant to enter the competition program; the competition module is used to display the competition questions and the competition contract to the contestant and determine the competition results based on the contestant's answer to the competition questions according to the competition contract. This solves the security simulation problem of the blockchain, makes up for the technical deficiencies of the existing technology in the blockchain security range, and achieves the effect of reducing the maintenance cost of blockchain data security.

[0063] Note that the above are only preferred embodiments of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments, and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments and may include many other equivalent embodiments without departing from the concept of the present invention. The scope of the present invention is determined by the scope of the appended claims.

Claims

1. A blockchain security range system, characterized by: The system includes: an environment building module and a competition module; wherein: The environment building module is used to provide at least one blockchain node and deploy the competition information associated with the competition module on the blockchain; The environment building module is further used to obtain the blockchain environment built by the contestant and display the competition information according to the blockchain environment to enable the contestant to enter the competition process; The competition module is used to present the competition questions and the competition contract to the contestants, and determine the competition results based on the contestants' answers to the competition questions in accordance with the competition contract; The competition module includes: a blockchain target competition unit and / or a blockchain attack and defense competition unit; wherein: The blockchain shooting competition unit is used to present the blockchain capture the flag competition problem and competition contract to the contestants, and determine the competition result based on the contestants' answers to the competition problem triggered by the competition contract function call; The blockchain attack and defense competition unit is used to display the attack and defense contract of the blockchain attack and defense competition to the contestants, and determine the result of the competition based on the contestants triggering function calls to the attack and defense of the attack and defense contract according to the competition contract.

2. The system according to claim 1, wherein: The blockchain shooting range competition unit includes: a competition topic setting subunit; The competition question setting subunit is used to set the competition questions according to the competition question dependency tree; wherein, there is a network dependency relationship between the competition questions in the competition question dependency tree, and the competition questions of the subsequent nodes can only be unlocked when the competition questions of the previous node are successfully solved.

3. The system according to claim 2, characterized in that The competition topic setting subunit is specifically used to: A network dependency relationship is set for the competition questions according to the difficulty of the competition questions and the competition question scores preset in the competition question dependency tree.

4. The system according to claim 1, wherein: The blockchain attack and defense competition unit includes: a competition contract update subunit; The competition contract update subunit is used to synchronously update its own defense contract address when it is detected that the contestant has updated his or her own defense contract.

5. The system according to any one of claims 1 to 4, characterized in that: Also includes: Competition contract setting module; The competition contract setting module is used to set the competition contract in the secure shooting range system of the blockchain as an interface function.

6. The system according to claim 1, wherein: The environment building module is set up in an intranet environment.

7. The system according to claim 1, wherein: The blockchain security range system includes at least one of the following blockchain types: Ethereum, enterprise operating system EOS, and TRON; The blockchain type is determined by the blockchain environment obtained by the environment building module.

8. The system according to claim 1, wherein: The environment building module is also used to: Provide a virtual resource account that matches the contestant; wherein the virtual resource account is used to allocate and record virtual resources to the contestant based on the contestant's answer to the competition question provided by the competition module.

9. The system according to claim 5, characterized in that The interface function includes at least one of the following: Functions for starting the game, stopping the game, adding contestants, updating the virtual resource allocation of contestants, and updating the contestant's own defense contract address.

Images