Distributed database security verification method based on block chain

Abstract

The invention relates to the technical field of block chains, and discloses a block chain-based distributed database security verification method, which comprises the following steps of: 1, establishing a data security monitoring system, and obtaining a data security data set; 2, establishing a network consensus monitoring system, and obtaining a network security data set; 3, establishing an application management monitoring system, and obtaining an application management data set; 4, integrating the obtained data, and calculating a data security index, a network security index and an application management index by using an algorithm formula; and 5, performing database security verification according to the calculated values of the data security index, the network security index and the application management index. According to the method, security conditions of the block chain distributed database in different aspects are comprehensively reflected, security vulnerabilities of the block chain distributed database are dynamically captured, the security performance of the database is visually known, and the security protection efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain, and in particular to a security verification method for a distributed database based on blockchain. Background Art

[0002] Blockchain is a chain data structure composed of multiple data blocks (i.e., blocks). It combines cryptographic principles and technologies such as timestamps to ensure the immutability and security of data. Each block contains a certain amount of transaction information and is linked to the previous block through a hash algorithm to form a continuously growing data chain. A blockchain network usually consists of a large number of nodes that jointly maintain the data of the entire network. There is no single central authority to control the entire system. This decentralized feature makes blockchain more democratic, transparent, and fair, reducing the trust cost. Once data is recorded on the blockchain, it cannot be easily tampered with. Because modifying the data of a block requires modifying all the blocks after that block, which is actually very difficult. Therefore, the data in blockchain has extremely high authenticity and reliability. The transaction data in the blockchain system is publicly transparent to all participants, and anyone can view the transaction records on the blockchain. As an innovative technical model, blockchain shows great application potential in many fields with its unique features and working principles. With the continuous development and improvement of technology, blockchain is expected to bring more changes and opportunities to all walks of life in the future, promoting society to develop in a more efficient, transparent, and trustworthy direction.

[0003] Although the distributed database of blockchain emphasizes decentralization, immutability, and transparency in design, there are still some inherent defects and potential risks in security verification. Many verification methods fail to fully consider the changes in the dynamic topological structure of the blockchain network and are difficult to discover potential dynamic vulnerabilities, thus unable to accurately evaluate the security in all situations, resulting in a decline in system performance. Summary of the Invention

[0004] (1) Technical Problems to be Solved

[0005] Aiming at the deficiencies of the prior art, the present invention provides a security verification method for a distributed database based on blockchain, which has the advantages of constructing an evaluation system from three different levels of data security, network security, and application security respectively, comprehensively reflecting the security status of the blockchain distributed database in different aspects, dynamically capturing the security vulnerabilities of the blockchain distributed database, intuitively understanding the security performance of the database, and improving the efficiency of security protection.

[0006] (2) Technical Solutions

[0007] To achieve the above object, the present invention provides the following technical solutions: A blockchain-based distributed database security verification method, comprising the following steps:

[0008] Step 1, establish a data security monitoring system and obtain a data security data set;

[0009] Step 2, establish a network consensus monitoring system and obtain a network security data set;

[0010] Step 3, establish an application management monitoring system and obtain an application management data set;

[0011] Step 4, integrate the obtained data and calculate the data security index, network security index, and application management index using an algorithm formula;

[0012] Step 5, perform database security verification based on the calculated values of the data security index, network security index, and application management index.

[0013] Preferably, the data security data set includes multiple data security data obtained through system logs, and the expression of the data security data set Jsj is: Wherein, represents the first to the nth obtained data security data in the data security data set, and the superscript z represents the specific parameters of the data security data.

[0014] Preferably, the network security data set obtains multiple network security data through network protocol analysis, and the expression of the network security data set Wsj is: Wherein, represents the first to the nth obtained network security data in the network security data set, and the superscript x represents the specific parameters of the network security data.

[0015] Preferably, the application management data set obtains multiple application management data through an application performance monitoring tool, and the expression of the application management data set Ysj is: Wherein, represents the first to the nth obtained application management data in the application management data set, and the superscript v represents the specific parameters of the application management data.

[0016] Preferably, the calculation formula of the data security index Jz is:

[0017]

[0018] In the calculation formula, Jz represents the data security index, represents the sum of the contribution values of three negative indicators affecting the data security index, 3 represents three negative indicators, specifically the hash verification failure rate, the abnormal state ratio of backup nodes, and the resource occupancy rate, represents the value of the i-th negative indicator, a i represents the weight of the i-th negative indicator;

[0019] represents the sum of the contribution values of the three positive indicators affecting the data security index. 3 represents the three positive indicators, specifically the online rate of backup nodes, the encryption storage coverage rate, and the storage redundancy rate, represents the value of the j-th negative indicator, β j represents the weight of the j-th negative indicator;

[0020] z wg represents the number of permission violations, γ represents the weight, z gc represents the number of tampering attempts, δ represents the weight;

[0021] a i +β j +γ + δ = 1.

[0022] Preferably, the calculation formula for the network security index Wz is:

[0023]

[0024] In the formula, Wz represents the network security index, represents the sum of the contribution values of the three negative indicators affecting the network security index. 3 represents the three negative indicators, specifically the network delay rate, the block verification time interval, and the abnormal traffic ratio, a i represents the weight of the i negative indicators, represents the i negative indicators;

[0025] represents the sum of the contribution values of the five positive indicators affecting the network security index. 5 represents the three negative indicators, specifically the encrypted communication ratio, the consensus success rate, the node online rate, the node authentication pass rate, and the transaction throughput, represents the j-th positive indicator, β j represents the weight of the j-th positive indicator;

[0026] a i +β i = 1.

[0027] Preferably, the calculation formula for the application management index Yz is:

[0028]

[0029] In the formula, v yc represents the number of high-frequency abnormal requests, v hc represents the number of contract execution failures, v lxRepresents the contract vulnerability repair rate, v hg Represents the API compliance rate, v wl Represents the permission violation interception rate;

[0030] ω, τ, σ, ρ respectively represent the weights of each part;

[0031]

[0032] Preferably, the database security verification includes setting a data security index threshold Jzyz, a network security index threshold Wzyz, and an application management index threshold Yzyz inside the database system, and performing security verification by comparing the data security index, the network security index, and the application management index with the data security index threshold Jzyz, the network security index threshold Wzyz, and the application management index threshold Yzyz.

[0033] Preferably, when the data security index is lower than the data security index threshold Jzyz, it represents that the current data security level is low;

[0034] When the network security index is lower than the network security index threshold Wzyz, it represents that the current network security level is low;

[0035] When the application management index is lower than the application management index threshold Yzyz, it represents that the current application management security level is low.

[0036] Preferably, when the security level is low, a warning signal is sent for warning.

[0037] Compared with the prior art, the present invention provides a blockchain-based distributed database security verification method, which has the following beneficial effects:

[0038] 1. The present invention constructs an evaluation system from three different levels of data security, network security, and application security respectively. The multi-dimensional consideration can comprehensively reflect the security status of the blockchain distributed database in different aspects, enabling objective comparison between different blockchain distributed databases, intuitively understanding the performance of the database in terms of data security, and improving the efficiency of security protection.

[0039] 2. The present invention compares the data security index, network security index, and application management index with the data security index threshold Jzyz, network security index threshold Wzyz, and application management index threshold Yzyz to perform security verification on the distributed database of the blockchain. It can present complex security situations through simple numerical and threshold comparisons, quickly obtain the overall security situation of the blockchain distributed database at the data, network, and application levels, quickly detect potential security hazards, dynamically capture vulnerabilities in the blockchain distributed database, and thus conduct in-depth investigations targeted. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 It is a flowchart of the method steps of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0041] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0042] Please refer to Figure 1 , a method for security verification of a distributed database based on a blockchain, including the following steps:

[0043] Step 1: Establish a data security monitoring system and obtain a data security data set;

[0044] The data security data set includes multiple data security data obtained through system logs. The expression of the data security data set Jsj is: Wherein, represents the first to the nth obtained data security data in the data security data set, and the superscript z represents the specific parameters of the data security data;

[0045] Step 2: Establish a network consensus monitoring system and obtain a network security data set;

[0046] The network security data set obtains multiple network security data through network protocol analysis. The expression of the network security data set Wsj is: Wherein, represents the first to the nth obtained network security data in the network security data set, and the superscript x represents the specific parameters of the network security data;

[0047] Step 3: Establish an application management monitoring system and obtain an application management data set;

[0048] The application management data set obtains multiple application management data through an application performance monitoring tool. The expression of the application management data set Ysj is: Among them, represents the first to the nth obtained application management data in the application management data set, and the superscript v represents the specific parameters of the application management data;

[0049] Step 4: Integrate the obtained data and use an algorithm formula to calculate the data security index, network security index, and application management index;

[0050] The calculation formula for the data security index Jz is:

[0051]

[0052] In the calculation formula, Jz represents the data security index, represents the sum of the contribution values of three negative indicators affecting the data security index. 3 represents three negative indicators, specifically the hash verification failure rate, the abnormal state ratio of backup nodes, and the resource occupancy rate, represents the value of the i-th negative indicator, a i represents the weight of the i-th negative indicator;

[0053] represents the sum of the contribution values of three positive indicators affecting the data security index. 3 represents three positive indicators, specifically the online rate of backup nodes, the encryption storage coverage rate, and the storage redundancy, represents the value of the j-th negative indicator, β j represents the weight of the j-th negative indicator;

[0054] z wg represents the number of permission violations, γ represents the weight, z gc represents the number of tampering attempts, δ represents the weight;

[0055] a i +β j +γ + δ = 1;

[0056] It comprehensively considers multiple factors affecting data security and adjusts the weights so that different factors have different contribution degrees to the final data security index, and can more accurately evaluate the data security status of a blockchain-based distributed database;

[0057] The calculation formula for the network security index Wz is:

[0058]

[0059] In the formula, Wz represents the network security index, represents the sum of the contribution values of three negative indicators affecting the network security index. 3 represents the three negative indicators, specifically the network latency rate, the block verification time interval, and the abnormal traffic ratio, a i represents the weight of the i-th negative indicator, represents the i-th negative indicator;

[0060] represents the sum of the contribution values of five positive indicators affecting the network security index. 5 represents the three negative indicators, specifically the encrypted communication ratio, the consensus success rate, the node online rate, the node authentication pass rate, and the transaction throughput, represents the j-th positive indicator, β j represents the weight of the j-th positive indicator;

[0061] a i +β i = 1;

[0062] Comprehensively considers various factors affecting network security, enabling the calculated network security index to comprehensively and objectively reflect the security status of the distributed database network of the blockchain;

[0063] The calculation formula for the application management index Yz is:

[0064]

[0065] In the formula, v yc represents the number of high-frequency abnormal requests, v hc represents the number of contract execution failures, v lx represents the contract vulnerability repair rate, v hg represents the API compliance rate, v wl represents the permission violation interception rate;

[0066] ω, τ, σ, ρ respectively represent the weights of each part;

[0067]

[0068] Can evaluate the application management status from multiple dimensions, rather than relying solely on a single indicator, thus more comprehensively reflecting the overall security and management of the distributed database application of the blockchain. The formula avoids evaluation biases caused by the one-sidedness of a single type of indicator and improves the accuracy of the calculation results;

[0069] An evaluation system is constructed from three different levels of data security, network security, and application security. The multi-dimensional consideration can comprehensively reflect the security status of the blockchain distributed database in different aspects, enabling objective comparison between different blockchain distributed databases, intuitively understanding the performance of the database in terms of data security, and improving the efficiency of security protection;

[0070] Step Five: Perform database security verification based on the calculated values of the data security index, network security index, and application management index;

[0071] Performing database security verification includes setting data security index threshold Jzyz, network security index threshold Wzyz, and application management index threshold Yzyz within the database system, and performing security verification by comparing the data security index, network security index, and application management index with the data security index threshold Jzyz, network security index threshold Wzyz, and application management index threshold Yzyz;

[0072] When the data security index is lower than the data security index threshold Jzyz, it represents that the current data security level is low;

[0073] When the network security index is lower than the network security index threshold Wzyz, it represents that the current network security level is low;

[0074] When the application management index is lower than the application management index threshold Yzyz, it represents that the current application management security level is low;

[0075] When the security level is low, send a warning signal for warning;

[0076] By comparing the data security index, network security index, and application management index with the data security index threshold Jzyz, network security index threshold Wzyz, and application management index threshold Yzyz, performing security verification on the distributed database of the blockchain can present the complex security situation in a simple comparison of numerical values and thresholds, quickly obtain the overall security situation of the blockchain distributed database at the three levels of data, network, and application, quickly detect potential security hazards, dynamically capture vulnerabilities in the distributed database of the blockchain, and thus conduct targeted in-depth investigation.

[0077] Although the embodiments of the present invention have been shown and described, for those of ordinary skill in the art, it can be understood that various changes, modifications, substitutions, and variations can be made to these embodiments without departing from the principles and spirit of the present invention. The scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A distributed database security verification method based on blockchain, characterized in that It includes the following steps: Step 1: Establish a data security monitoring system and obtain a data security data set; Step 2: Establish a network consensus monitoring system and obtain a network security data set; Step 3: Establish an application management monitoring system and obtain an application management data set; Step 4: Integrate the obtained data and calculate the data security index, network security index, and application management index using algorithm formulas; Step 5: Perform database security verification based on the calculated values of the data security index, network security index, and application management index.

2. The distributed database security verification method based on blockchain according to claim 1, wherein: The data security data set includes multiple data security data obtained through system logs, and the expression of the data security data set Jsj is: Among them, represents the first to the nth obtained data security data in the data security data set, and the superscript z represents the specific parameters of the data security data.

3. The distributed database security verification method based on blockchain according to claim 2, wherein: The network security dataset obtains multiple network security data through network protocol analysis. The expression of the network security dataset Wsj is as follows: Among them, represents the first to the nth obtained network security data in the network security dataset, and the superscript x represents the specific parameters of the network security data.

4. The method for secure verification of a distributed database based on blockchain according to claim 3, characterized in that: The application management data set obtains multiple application management data through an application performance monitoring tool. The expression of the application management data set Ysj is as follows: Among them, represents the first to the nth obtained application management data in the application management data set, and the superscript v represents the specific parameters of the application management data.

5. The distributed database security verification method based on blockchain according to claim 4, characterized in that: The calculation formula for the data security index Jz is: In the calculation formula, Jz represents the data security index, represents the sum of the contribution values of the three negative indicators that affect the data security index. 3 represents the three negative indicators, specifically the hash verification failure rate, the abnormal state ratio of backup nodes, and the resource occupancy rate. represents the value of the i-th negative indicator, a i represents the weight of the i-th negative indicator; represents the sum of the contribution values of the three positive indicators affecting the data security index. 3 represents the three positive indicators, specifically the online rate of backup nodes, the encryption storage coverage rate, and the storage redundancy rate. represents the value of the j-th negative indicator, β j represents the weight of the j-th negative indicator; z wg represents the number of permission violations, γ represents the weight, z gc represents the number of tampering attempts, δ represents the weight; a i +β j +γ + δ = 1.

6. The distributed database security verification method based on blockchain according to claim 5, characterized in that: The calculation formula for the network security index Wz is: In the formula, Wz represents the network security index, represents the sum of the contribution values of three negative indicators affecting the network security index. 3 represents three negative indicators, specifically the network delay rate, the block verification time interval, and the abnormal traffic ratio. a i represents the weight of the i-th negative indicator, represents the i-th negative indicator; Represents the sum of the contribution values of the five positive indicators affecting the network security index, and 5 represents the three negative indicators, specifically the encrypted communication ratio, consensus success rate, node online rate, node authentication passing rate, and transaction throughput. Represents the j-th positive indicator, β j Represents the weight of the j-th positive indicator; a i +β i ＝1。 7. The method for security verification of a distributed database based on blockchain according to claim 6, wherein: The calculation formula for the application management index Yz is: In the formula, v yc represents the number of high-frequency abnormal requests, v hc represents the number of contract execution failures, v lx represents the contract vulnerability repair rate, v hg represents the API compliance rate, v wl represents the permission violation interception rate; ω, τ, σ, and ρ represent the weights of each part respectively; 8. The method for security verification of a distributed database based on blockchain according to claim 7, wherein: The database security verification includes setting data security index thresholds Jzyz, network security index thresholds Wzyz, and application management index thresholds Yzyz inside the database system, and performing security verification by comparing the data security index, network security index, and application management index with the data security index threshold Jzyz, network security index threshold Wzyz, and application management index threshold Yzyz.

9. The method for security verification of a distributed database based on blockchain according to claim 8, wherein: When the data security index is lower than the data security index threshold Jzyz, it represents that the current data security level is low; When the network security index is lower than the network security index threshold Wzyz, it represents that the current network security level is low; When the application management index is lower than the application management index threshold Yzyz, it represents that the current application management security level is low.

10. The distributed database security verification method based on blockchain according to claim 9, characterized in that: When the security level is low, send a warning signal for warning.

Images