A blockchain security vulnerability-based detection method and system

Abstract

The application discloses a kind of based on blockchain security vulnerability detection method and system, it is related to blockchain technical field, method includes the authenticity of each part in the data transmission process of to-be-measured blockchain, network connection condition and interference request condition are detected, whether current environment meets data transmission condition is judged, if it is in line with then output transmission environment verification success result;According to the transaction data in the starting node of to-be-measured blockchain, create first feature code;Real-time monitoring network traffic in data transmission process and judge whether there is abnormal situation, if there is no abnormal situation then output network environment verification success result;When receiving target node verification success result and network environment verification success result, transaction data in starting node is transmitted to target node, after data transmission success, second feature code is created based on the transaction data received by target node.The application has the effect of improving the detection accuracy of blockchain security vulnerability.

Description

TECHNICAL FIELD

[0001] The application relates to the technical field of blockchains, in particular to a blockchain security vulnerability detection method and system. BACKGROUND

[0002] At present, a blockchain is a block chain storage, non-tamperable, secure and trusted decentralized distributed ledger, which combines distributed storage, peer-to-peer transmission, consensus mechanism, cryptography and other technologies, and records transactions and information through a growing data block chain to ensure data security and transparency. While the blockchain technology brings decentralization, transparency and security, it also faces a series of security challenges. The transaction data in the blockchain is attacked and tampered with by attackers, which threatens important human property, and therefore, the detection of blockchain security vulnerabilities is important.

[0003] The existing blockchain security vulnerability detection method refers to obtaining the relevant blocks or transaction data of each node in the blockchain network, calculating the hash value thereof, and comparing it with the hash value of the original record or other trusted nodes. If the hash values are inconsistent, the data may be tampered with. However, the existing blockchain security vulnerability detection method does not consider that the attacker attacks the communication link in the blockchain network to obtain the transaction data in each node but does not tamper with the data, so the hash value does not change, but the transaction data in each node of the blockchain has been leaked. The security of the transaction data stored in the blockchain is low, the detection accuracy of the blockchain security vulnerability is low, and there is room for improvement. SUMMARY

[0004] In order to improve the detection accuracy of the blockchain security vulnerability, the application provides a blockchain security vulnerability detection method and system.

[0005] In a first aspect, the application provides a blockchain security vulnerability detection method, which adopts the following technical solution:

[0006] A blockchain security vulnerability detection method comprises the following steps:

[0007] S1, detecting the authenticity of each part of the to-be-tested blockchain data transmission process, the network connection condition and the interference request condition, and judging whether the current environment of the to-be-tested blockchain meets the data transmission condition. If yes, a transmission environment verification success result is outputted;

[0008] S2, before data transmission, creating a first feature code according to the transaction data in the starting node of the to-be-tested blockchain;

[0009] S3, monitoring network traffic in real time during data transmission and determining whether there is an abnormal situation, if there is no abnormal situation, it is determined that the network environment meets the data transmission condition, and the network environment verification success result is output;

[0010] S4, when receiving the target node verification success result and receiving the network environment verification success result, transmitting the transaction data in the starting node to the target node, after the data transmission is successful, creating a second feature code based on the transaction data received by the target node;

[0011] S5, analyzing the matching degree between the first feature code and the second feature code to obtain the matching degree before and after transmission, and determining whether there is an attacker attacking the target node based on the matching degree before and after transmission, if attacked, outputting the data attack result.

[0012] Preferably, the to-be-tested blockchain is classified based on the nodes and links in the to-be-tested blockchain to obtain a blockchain classification result;

[0013] Based on the blockchain classification result, each part of the to-be-tested blockchain is labeled to obtain a feature label, and each part is labeled to obtain a feature label;

[0014] According to the feature label, it is judged whether each node and link appearing in the to-be-tested blockchain is an external node or link, if it is an external node or link, a false feature result is output, if it is not an external node or link, a true feature result is output.

[0015] Preferably, it is detected whether the network connection of each node in the to-be-tested blockchain during data transmission is faulty, if the network connection is faulty, a connection fault feature result is output, if there is no fault, a connection normal feature result is output;

[0016] Detecting whether there is an interference request in the use process of the to-be-tested blockchain, if there is an interference request, counting the number of interference requests, and determining whether there is an attacker according to the number of interference requests, if there is, outputting a request paralysis feature result, if there is not, outputting a request normal feature result;

[0017] When receiving the true feature result, and receiving the connection normal feature result, and receiving the request normal feature result, it is judged that the current environment of the target node in the to-be-tested blockchain meets the data transmission condition, and a transmission environment verification success result is output.

[0018] Preferably, before data transmission, a first data feature code is created based on the transaction data stored in the starting node of the to-be-tested blockchain;

[0019] A first time feature code is created based on the storage time of the transaction data stored in the starting node of the to-be-tested blockchain;

[0020] The first data feature code and the first time feature code are combined to form a first feature code.

[0021] Preferably, the traffic of the to-be-tested blockchain network is captured to obtain traffic capture parameter information.

[0022] According to the traffic capture parameter information, it is determined whether the network traffic of the to-be-tested blockchain is abnormal. If there is an abnormal situation, it is determined that the network environment of the to-be-tested blockchain does not meet the data transmission condition, and a network environment verification failure result is output. If there is no abnormal situation, it is determined that the network environment of the to-be-tested blockchain meets the data transmission condition, and a network environment verification success result is output.

[0023] Preferably, when the target node verification success result is received and the network environment verification success result is received, it is determined that the transaction data in the starting node has the right to be transmitted to the target node, and a transmission authorization result is output.

[0024] When the transmission authorization result is received, the link between the starting node and the target node is marked as a target link.

[0025] The transaction data in the starting node is transmitted to the target node through the target link. If a network environment verification failure result is received during the transmission process, the data transmission is interrupted. When a network environment verification success result is received again, the data transmission is continued.

[0026] Preferably, after the transaction data in the starting node is completely transmitted to the target node, a data transmission success result is output.

[0027] When the data transmission success result is received, a second data feature code is created according to the transaction data received by the target node.

[0028] A second time feature code is created according to the receiving time of the transaction data received by the target node.

[0029] The second data feature code and the second time feature code are combined to form a first feature code.

[0030] Preferably, the first data feature code in the first feature code is matched with the second data feature code in the second feature code, and a data matching degree before and after transmission is obtained by analyzing the matching degree of the two.

[0031] The first time feature code in the first feature code is compared with the second time feature code in the second feature code, and a time difference value is calculated to obtain a transmission time length.

[0032] The transmission time length threshold is pre-set according to the content of the transaction data in the starting node.

[0033] The transmission duration is compared with a transmission duration threshold to obtain a transmission duration matching degree;

[0034] Based on the data matching degree before and after transmission and the transmission duration matching degree, it is determined whether an attacker attacks the to-be-tested blockchain, and if so, a data attack result is outputted;

[0035] The data matching degree before and after transmission and the transmission duration matching degree are combined to form a matching degree before and after transmission.

[0036] In a second aspect, the application provides a blockchain security vulnerability detection system, which adopts the following technical solution:

[0037] A blockchain security vulnerability detection system comprises:

[0038] A transmission environment verification analysis module is configured to detect the authenticity, network connection and interference request of each part in the data transmission process of the to-be-tested blockchain, determine whether the current environment of the to-be-tested blockchain meets the data transmission condition, and output a transmission environment verification success result if it does.

[0039] A first node data analysis module is configured to create a first feature code based on the transaction data in the starting node of the to-be-tested blockchain before data transmission.

[0040] A network environment detection module is configured to monitor the network traffic in the data transmission process in real time and determine whether there is an abnormal situation, and if not, determine that the network environment meets the data transmission condition and output a network environment verification success result.

[0041] A second node data analysis module is configured to transmit the transaction data in the starting node to the target node after receiving the target node verification success result and the network environment verification success result, and create a second feature code based on the transaction data received by the target node after the data transmission is successful.

[0042] An attack tampering judgment module is configured to analyze the matching degree between the first feature code and the second feature code to obtain a matching degree before and after transmission, determine whether an attacker attacks the target node based on the matching degree before and after transmission, and output a data attack result if it is attacked.

[0043] In summary, the application has at least one of the following beneficial technical effects:

[0044] The authenticity of each part of the to-be-tested blockchain in data transmission, the network connection condition and the interference request condition are detected to determine whether the current environment of the to-be-tested blockchain meets the transmission condition, thereby greatly reducing the occurrence of situations such as the attack of attackers on network traffic by means of a large number of fake nodes, the malicious control of network connection of target nodes and the paralysis of the blockchain network by a large number of requests, and improving the detection accuracy of the blockchain security vulnerability. Before data transmission, a first feature code is created according to transaction data in a starting node to provide data support for subsequent detection, network traffic in the data transmission process is monitored in real time to determine whether the network environment meets the data transmission condition, and when the network environment is not attacked by attackers, a network environment verification success result is output, thereby further improving the detection accuracy of the blockchain security vulnerability. When a target node verification success result is received and the network environment verification success result is received, data transmission is performed, and a second feature code is created based on transaction data received by the target node. The first feature code and the second feature code are compared, and the matching degree before and after transmission is obtained by analyzing the matching degree, so as to determine whether the data transmission is attacked by attackers on the target node, resulting in the transaction data in the target node being attacked and tampered with, thereby further improving the detection accuracy of the blockchain security vulnerability. BRIEF DESCRIPTION OF DRAWINGS

[0045] Figure 1 The flowchart of the detection method based on the blockchain security vulnerability is mainly embodied in the embodiment.

[0046] Figure 2 The module diagram of the detection system based on the blockchain security vulnerability is mainly embodied in the embodiment.

[0047] Reference signs: 1, transmission environment verification analysis module; 2, first node data analysis module; 3, network environment detection module; 4, second node data analysis module; 5, attack tampering judgment module. DETAILED DESCRIPTION

[0048] The application will be further described in detail below with reference to the accompanying drawings.

[0049] The embodiment of the application discloses a detection method based on a blockchain security vulnerability.

[0050] A detection method based on a blockchain security vulnerability, comprising the following steps:

[0051] Reference Figure 1 Step S1, detecting the authenticity of each part of the to-be-tested blockchain data transmission process, the network connection condition and the interference request condition, determining whether the current environment of the to-be-tested blockchain meets the data transmission condition, and outputting a transmission environment verification success result if it meets. Step S1 specifically includes:

[0052] In step S11, the to-be-tested blockchain is classified according to the nodes and links in the to-be-tested blockchain to obtain a blockchain classification result. The blockchain classification result includes node types and link types.

[0053] In step S12, each part of the to-be-tested blockchain is labeled based on the blockchain classification result to obtain a feature label, and each part is labeled with a feature label.

[0054] Specifically, each node in the node types is labeled based on the data transmission sequence of the to-be-tested blockchain to obtain a feature node label, and a feature node label for each node is created according to the feature node label and the position of the node in the blockchain, and the feature node label is attached to each node.

[0055] Each link in the link types is labeled based on the data transmission sequence of the to-be-tested blockchain to obtain a feature link label, and a feature link label for each link is created according to the feature link label and the position of the node connected to the link in the blockchain, and the feature link label is attached to each link.

[0056] The feature node label and the feature link label are combined to form a feature label, and the feature node label and the feature link label are combined to form a feature label.

[0057] In step S13, it is determined whether each node and link appearing in the to-be-tested blockchain is an external node or link according to the feature label. If it is an external node or link, a false feature result is output, and if it is not an external node or link, a true feature result is output.

[0058] Specifically, it is determined whether each node appearing in the to-be-tested blockchain currently has a label attached, and if there is no label, it is determined to be a false node, and a first false node determination result is output.

[0059] If there is a label, the label currently existing in the node is matched with the feature label to determine whether there is a label that matches the label currently existing in the node. If there is, it is determined that the node is a node originally existing in the to-be-tested blockchain, a true node determination result is output, and if there is not, it is determined that the node is an external node, and a second false node determination result is output.

[0060] The first false node determination result and the second false node determination result are combined to form a false node determination result.

[0061] It is determined whether each link appearing in the to-be-tested blockchain currently has a label attached, and if there is no label, it is determined to be a false link, and a first false link determination result is output.

[0062] If the label exists, the label currently existing in the link is matched with the characteristic label to determine whether there is a label matching the label currently existing in the link, and if there is, it is determined that the link is a link originally existing in the to-be-tested block chain, and a real link determination result is output, and if not, it is determined that the link is an alien link, and a second false link determination result is output.

[0063] The first false link determination result and the second false link determination result are combined to form a false link determination result.

[0064] The false node determination result and the false link determination result are combined to form a false characteristic result, and the real node determination result and the real link determination result are combined to form a real characteristic result.

[0065] Step S1 specifically includes:

[0066] Step S14, detecting whether the network connection of each node in the to-be-tested block chain for data transmission fails, if the network connection fails, outputting a connection failure characteristic result, if not, outputting a connection normal characteristic result.

[0067] Step S15, detecting whether there is an interference request in the use process of the to-be-tested block chain, if there is an interference request, counting the number of interference requests, determining whether there is an attacker according to the number of interference requests, and paralyzing the node through a large number of garbage interference requests, if there is, outputting a request paralysis characteristic result, if not, outputting a request normal characteristic result.

[0068] Specifically, the number of interference requests is compared with a preset interference request quantity threshold, if the number of interference requests is greater than or equal to the preset interference request quantity threshold, it is determined that there is an attacker, and the request paralysis characteristic result is output, if the number of interference requests is less than the preset interference request quantity threshold, it is determined that there is no attacker, and the request normal characteristic result is output.

[0069] Step S16, when receiving the real characteristic result, and receiving the connection normal characteristic result, and receiving the request normal characteristic result, it is determined that the current environment of the target node in the to-be-tested block chain meets the data transmission condition, and a transmission environment verification success result is output.

[0070] In addition, when receiving the false characteristic result, or receiving the connection failure characteristic result, or receiving the request paralysis characteristic result, it is determined that the current environment of the to-be-tested block chain does not meet the data transmission condition, and a transmission environment verification failure result is output.

[0071] Reference Figure 1 Step S2, before data transmission, creating a first characteristic code according to the transaction data in the starting node of the to-be-tested block chain. Step S2 specifically includes:

[0072] Step S21, before data transmission, a first data feature code is created according to the transaction data stored in the starting node of the to-be-tested blockchain.

[0073] Step S22, a first time feature code is created according to the storage time of the transaction data stored in the starting node of the to-be-tested blockchain.

[0074] Step S23, wherein the first data feature code and the first time feature code are combined to form a first feature code.

[0075] Referring to Figure 1 Step S3, the network traffic during data transmission is monitored in real time to determine whether there is an abnormal situation, and if there is no abnormal situation, it is determined that the network environment meets the data transmission condition, and a network environment verification success result is output. Step S3 specifically includes:

[0076] Step S31, the traffic of the to-be-tested blockchain network is captured to obtain traffic capture parameter information.

[0077] Specifically, the traffic capture parameter information includes traffic source, traffic destination, and data volume.

[0078] Step S32, according to the traffic capture parameter information, it is determined whether the network traffic of the to-be-tested blockchain exists an abnormal situation, if the abnormal situation exists, it is determined that the network environment of the to-be-tested blockchain does not meet the data transmission condition, a network environment verification failure result is output, if the abnormal situation does not exist, it is determined that the network environment of the to-be-tested blockchain meets the data transmission condition, a network environment verification success result is output.

[0079] Specifically, according to the traffic source and the traffic destination, the connection state information of the nodes is obtained by judging the connection state between the nodes.

[0080] According to the traffic source, the traffic destination, and the data volume, the inter-node communication frequency information is obtained by judging the communication frequency between the nodes in the connection state.

[0081] According to the node connection state information and the inter-node communication frequency information, it is determined whether there is a situation that a node suddenly sends a large number of data packets or frequently communicates with multiple nodes.

[0082] If such a situation exists, it is determined that the network traffic of the to-be-tested blockchain exists an abnormal situation, an attacker attempts to tamper with data or attack, it is determined that the network environment of the to-be-tested blockchain does not meet the data transmission condition at this time, and a network environment verification failure result is output.

[0083] If the case does not exist, it is determined that the network traffic of the to-be-tested blockchain does not have an abnormal case, an attacker does not tamper with data or attack the network environment, and it is determined that the network environment of the to-be-tested blockchain meets the data transmission condition at this time, and a network environment verification success result is output.

[0084] With reference to Figure 1 , step S4, when receiving the target node verification success result and receiving the network environment verification success result, the transaction data in the starting node is transmitted to the target node, and after the data transmission is successful, the second feature code is created based on the transaction data received by the target node. Step S4 specifically includes:

[0085] Step S41, when receiving the target node verification success result and receiving the network environment verification success result, it is determined that the transaction data in the starting node has the right to be transmitted to the target node, and a transmission authorization result is output.

[0086] Step S42, when receiving the transmission authorization result, the link between the starting node and the target node is marked as a target link.

[0087] Step S43, taking the target link as the transmission path, the transaction data in the starting node is transmitted to the target node, and if the network environment verification failure result is received during the transmission process, the data transmission is interrupted, and when the network environment verification success result is received again, the data transmission is continued.

[0088] Step S4 further includes:

[0089] Step S44, after the transaction data in the starting node is completely transmitted to the target node, a data transmission success result is output.

[0090] Step S45, when receiving the data transmission success result, a second data feature code is created according to the transaction data received by the target node.

[0091] Step S46, a second time feature code is created according to the receiving time of the transaction data received by the target node.

[0092] Step S47, the second data feature code and the second time feature code are combined to form a first feature code.

[0093] With reference to Figure 1 , step S5, the matching degree before and after transmission is obtained by analyzing the matching degree between the first feature code and the second feature code, and whether there is an attacker attacking the target node is determined based on the matching degree before and after transmission, and if attacked, a data attack result is output. Step S5 specifically includes:

[0094] Step S51, match the first data feature code in the first feature code with the second data feature code in the second feature code, and analyze the matching degree to obtain the data matching degree before and after transmission.

[0095] Specifically, it is judged whether the first data feature code and the second data feature code are consistent. If they are consistent, it is obtained that the data before and after transmission are consistent, and the data matching degree before and after transmission is output. At this time, the data matching degree before and after transmission is 100%. If they are not consistent, it is judged that the difference between the first data feature code in the first feature code and the second data feature code in the second feature code is determined. The higher the difference is, the lower the data matching degree before and after transmission is.

[0096] Step S52, compare the first time feature code in the first feature code with the second time feature code in the second feature code, and calculate the time difference to obtain the transmission time length.

[0097] Step S53, the transmission time length threshold is pre-set according to the content of the transaction data in the starting node. The more the content of the transaction data in the starting node is, the larger the transmission time length threshold is. The more complex the content of the transaction data in the starting node is, the larger the transmission time length threshold is.

[0098] Step S54, compare the transmission time length with the transmission time length threshold to obtain the transmission time length matching degree.

[0099] Specifically, if the transmission time length is within the transmission time length threshold range, it is determined that the transmission time length is reasonable, and the transmission time length matching degree is obtained. At this time, the transmission time length matching degree is 100%. If the transmission time length is not within the transmission time length threshold range, it is determined that the transmission time length is unreasonable, the minimum difference between the transmission time length and the transmission time length threshold is calculated to obtain the transmission time length difference, and the transmission time length matching degree is obtained based on the transmission time length difference. The larger the transmission time length difference is, the lower the transmission time length matching degree is.

[0100] Step S55, based on the data matching degree before and after transmission and the transmission time length matching degree, it is judged whether there is an attacker attacking the to-be-tested blockchain. If there is, the data attack result is output.

[0101] Step S56, wherein the data matching degree before and after transmission and the transmission time length matching degree are combined to form the matching degree before and after transmission.

[0102] Specifically, only when the pre-transmission and post-transmission data matching degree and the transmission duration matching degree are both 100%, there is no case that the attacker attacks the to-be-tested blockchain, otherwise when the pre-transmission and post-transmission data matching degree is not 100% or the transmission duration matching degree is not 100%, it indicates that the to-be-tested blockchain is attacked by the attacker, wherein the lower the pre-transmission and post-transmission data matching degree is, the higher the attack tampering degree of the to-be-tested blockchain attacked by the attacker is, and the lower the transmission duration matching degree is, the higher the attack tampering degree of the to-be-tested blockchain attacked by the attacker is.

[0103] In step S57, the data attack result is sent to the background monitoring system based on the wireless communication module. It should be pointed out that the wireless communication module in the embodiment of the application refers to a wireless communication module based on wireless Bluetooth technology.

[0104] The embodiment of the application also discloses a detection system based on a blockchain security vulnerability.

[0105] Referring to Figure 2 The detection system based on the blockchain security vulnerability comprises:

[0106] The transmission environment verification analysis module is configured to detect the authenticity, network connection condition and interference request condition of each part in the data transmission process of the to-be-tested blockchain, and judge whether the current environment of the to-be-tested blockchain meets the data transmission condition, and output a transmission environment verification success result if the condition is met.

[0107] The first node data analysis module is configured to create a first feature code according to the transaction data in the starting node of the to-be-tested blockchain before data transmission.

[0108] The network environment detection module is configured to monitor the network traffic in the data transmission process in real time and judge whether there is an abnormal condition, and determine that the network environment meets the data transmission condition if there is no abnormal condition, and output a network environment verification success result.

[0109] The second node data analysis module is configured to transmit the transaction data in the starting node to the target node after receiving the target node verification success result and the network environment verification success result, and create a second feature code based on the transaction data received by the target node after the data transmission is successful.

[0110] The attack tampering judgment module is configured to analyze the matching degree between the first feature code and the second feature code to obtain a pre-transmission and post-transmission matching degree, judge whether there is an attacker attacking the target node based on the pre-transmission and post-transmission matching degree, and output a data attack result if the target node is attacked.

[0111] The above are all preferred embodiments of the present application, and do not limit the protection scope of the present application, so that: all equivalent changes made according to the structure, shape, principle of the present application should be covered in the protection scope of the present application.

Claims

1. A method for detecting blockchain security vulnerabilities, characterized in that, Includes the following steps: S1 detects the authenticity of each part, network connection status, and interference request status during the data transmission process of the blockchain under test, and determines whether the current environment of the blockchain under test meets the data transmission conditions. If it does, it outputs the successful verification result of the transmission environment. S2, Before transmitting data, create a first feature code based on the transaction data in the starting node of the blockchain under test; Specifically, it includes: Before data transmission, a first data feature code is created based on the transaction data stored in the starting node of the blockchain under test; A first-time feature code is created based on the storage time of the transaction data stored in the starting node of the blockchain under test; The first data feature code and the first time feature code are combined to form the first feature code; S3 monitors network traffic in real time during data transmission and determines if there are any abnormalities. If there are no abnormalities, it determines that the network environment meets the data transmission conditions and outputs a successful network environment verification result. Specifically, it includes: Traffic capture parameter information is obtained by capturing the traffic of the blockchain network under test; Based on the traffic capture parameter information, determine whether there are any abnormalities in the network traffic of the blockchain under test. If there are abnormalities, determine that the network environment of the blockchain under test does not meet the data transmission conditions and output a network environment verification failure result. If there are no abnormalities, determine that the network environment of the blockchain under test meets the data transmission conditions and output a network environment verification success result. S4. After receiving the successful verification result from the target node and the successful verification result from the network environment, the transaction data in the starting node is transmitted to the target node. After the data transmission is successful, a second feature code is created based on the transaction data received by the target node. Specifically, it includes: Once a successful verification result is received from the target node and a successful network environment verification result is received, it is determined that the transaction data in the starting node has the permission to be transmitted to the target node, and the transmission authorization result is output. Upon receiving the transmission authorization result, the link between the originating node and the target node is marked as the target link; Using the target link as the transmission path, the transaction data in the starting node is transmitted to the target node. If a network environment verification failure result is received during the transmission process, the data transmission is interrupted. Data transmission continues when a network environment verification success result is received again. After all transaction data in the starting node has been transmitted to the target node, a success message for data transmission is output. Upon receiving a successful data transmission result, a second data feature code is created based on the transaction data received by the target node; A second time feature code is created based on the reception time of the transaction data received by the target node; The second data feature code and the second time feature code are combined to form the first feature code; S5, analyze the matching degree between the first feature code and the second feature code to obtain the matching degree before and after transmission, and determine whether there is an attacker attacking the target node based on the matching degree before and after transmission. If attacked, output the data attack result.

2. The method for detecting blockchain security vulnerabilities according to claim 1, characterized in that, Step S1 specifically includes: The blockchain classification results are obtained by classifying the blockchain under test according to the nodes and links in the blockchain under test; Based on the blockchain classification results, each part of the blockchain under test is labeled to obtain feature labels, and each part is tagged to obtain feature labels. Based on the feature tags, determine whether each node and link in the blockchain under test is an external node or link. If it is an external node or link, output false feature results; if it is not an external node or link, output true feature results.

3. The method for detecting blockchain security vulnerabilities according to claim 2, characterized in that, Step S1 also includes: The system detects whether the network connection of each node in the blockchain under test is faulty when transmitting data. If the network connection is faulty, it outputs the connection fault characteristic result; if no fault is found, it outputs the connection normal characteristic result. The system detects whether there are any interference requests during the use of the blockchain under test. If interference requests are found, the number of interference requests is counted. Based on the number of interference requests, it is determined whether there is an attacker. If there is, the system outputs the result of request paralysis characteristics. If there is no attacker, the system outputs the result of request normal characteristics. When a true characteristic result, a normal connection characteristic result, and a normal request characteristic result are received, it is determined that the current environment of the target node in the blockchain under test meets the data transmission conditions, and a successful transmission environment verification result is output.

4. The method for detecting blockchain security vulnerabilities according to claim 3, characterized in that, Step S5 specifically includes: The first data feature code in the first feature code is matched with the second data feature code in the second feature code, and the matching degree between the two is analyzed to obtain the data matching degree before and after transmission. The transmission duration is obtained by comparing the first time feature code in the first feature code with the second time feature code in the second feature code and calculating the time difference. The transmission duration threshold is preset based on the content of the transaction data in the starting node; The transmission duration is compared with a transmission duration threshold to obtain the transmission duration matching degree; Based on the matching degree of data before and after transmission and the matching degree of transmission time, determine whether there is an attacker attacking the blockchain under test. If so, output the data attack result. The data matching degree before and after transmission is combined with the transmission duration matching degree to form the data matching degree before and after transmission.

5. A blockchain security vulnerability detection system, characterized in that, The blockchain security vulnerability detection system is used to implement the blockchain security vulnerability detection method according to any one of claims 1-4, comprising: The transmission environment verification and analysis module is configured to detect the authenticity of each part, network connection status, and interference request status during the data transmission process of the blockchain under test, and determine whether the current environment of the blockchain under test meets the data transmission conditions. If it does, the module outputs a successful transmission environment verification result. The first node data analysis module is configured to create a first feature code based on the transaction data in the starting node of the blockchain under test before data transmission. The network environment detection module is configured to monitor network traffic in real time during data transmission and determine if there are any abnormalities. If there are no abnormalities, the network environment is determined to meet the data transmission conditions, and a successful network environment verification result is output. The second node data analysis module is configured to transfer the transaction data from the starting node to the target node after receiving the successful verification result from the target node and the successful verification result from the network environment. After the data transfer is successful, a second feature code is created based on the transaction data received by the target node. The attack and tampering judgment module is configured to analyze the matching degree between the first feature code and the second feature code to obtain the matching degree before and after transmission, and to determine whether an attacker has attacked the target node based on the matching degree before and after transmission. If attacked, the data attack result is output.

Images