首页 > 最新文献

IET Blockchain最新文献

英文 中文
Towards CRISP-BC: 3TIC specification framework for Blockchain use-cases 走向CRISP-BC:3TIC区块链用例规范框架
Pub Date : 2023-07-29 DOI: 10.1049/blc2.12038
Pouyan Jahanbin, Ravi S. Sharma, Stephen T. Wingreen, Nir Kshetri, Kim-Kwang Raymond Choo

The application of Blockchain and augmented technologies such as IoT, AI, and Big Data platforms present a feasible approach for resolving the implementation challenges of trusted, decentralized platforms. This article proposes a DevOps framework for the specification of Blockchain use-cases that enables evaluation, replication, and benchmarking. Specifically, it could be applied to specify the requirements and design characteristics of Blockchain applications in terms of key attributes such as: (i) transparency; (ii) traceability; (iii) tamper-resistance; (iv) immutability; and (v) compliance. The article first introduces the design characteristics of Blockchain as a Platform and then examines successful use-cases for its implementation using the above attributes. It may be conjectured that the 3TIC framework would serve as the basis of a cross industry process for Blockchain. The intended contribution is that such a standard process will support industry-academia collaboration in the development of Blockchain platforms and services of relevance and utility as it can be applied by firms to structure their requirements and design specifications.

区块链和物联网、人工智能和大数据平台等增强技术的应用为解决可信、去中心化平台的实施挑战提供了一种可行的方法。本文提出了一个用于区块链用例规范的DevOps框架,该框架支持评估、复制和基准测试。具体而言,它可以用于规定区块链应用程序在关键属性方面的要求和设计特征,如:(i)透明度;(ii)可追溯性;(iii)抗篡改性;(iv)不变性;以及(v)遵守。本文首先介绍了区块链作为一个平台的设计特点,然后考察了利用上述属性实现区块链的成功用例。可以推测,3TIC框架将成为区块链跨行业流程的基础。预期的贡献是,这样一个标准流程将支持业界和学术界在开发区块链平台和相关实用服务方面的合作,因为企业可以将其应用于构建其需求和设计规范。
{"title":"Towards CRISP-BC: 3TIC specification framework for Blockchain use-cases","authors":"Pouyan Jahanbin,&nbsp;Ravi S. Sharma,&nbsp;Stephen T. Wingreen,&nbsp;Nir Kshetri,&nbsp;Kim-Kwang Raymond Choo","doi":"10.1049/blc2.12038","DOIUrl":"https://doi.org/10.1049/blc2.12038","url":null,"abstract":"<p>The application of Blockchain and augmented technologies such as IoT, AI, and Big Data platforms present a feasible approach for resolving the implementation challenges of trusted, decentralized platforms. This article proposes a DevOps framework for the specification of Blockchain use-cases that enables evaluation, replication, and benchmarking. Specifically, it could be applied to specify the requirements and design characteristics of Blockchain applications in terms of key attributes such as: (i) transparency; (ii) traceability; (iii) tamper-resistance; (iv) immutability; and (v) compliance. The article first introduces the design characteristics of Blockchain as a Platform and then examines successful use-cases for its implementation using the above attributes. It may be conjectured that the 3TIC framework would serve as the basis of a cross industry process for Blockchain. The intended contribution is that such a standard process will support industry-academia collaboration in the development of Blockchain platforms and services of relevance and utility as it can be applied by firms to structure their requirements and design specifications.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 3","pages":"159-168"},"PeriodicalIF":0.0,"publicationDate":"2023-07-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12038","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50155512","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
SPRA: Scalable policy-based regulatory architecture for blockchain transactions SPRA:可扩展的基于策略的区块链交易监管架构
Pub Date : 2023-07-25 DOI: 10.1049/blc2.12037
Chuntang Yu, Yongzhao Zhan, Pujie Jing, Xiangmei Song

Implementing effective regulation of blockchain transactions has become a research hotspot in recent years. However, most of the current regulatory schemes are customized for specific blockchain applications and lack versatility and scalability. Meanwhile, these schemes cannot guarantee fairness due to the non-disclosure of regulatory policies and regulatory processes. To address these issues, a scalable policy-based regulatory architecture (SPRA) is proposed for blockchain transactions that separates regulation and application to provide sufficient scalability. SPRA is a four-layer model (permission layer, regulation layer, bridge layer, and business layer). A regulatory policy description language (XRPL) is designed to define the regulatory rules and specifications for interoperability between the layers. A decentralized jury mechanism (JuryBC) based on the Shamir threshold secret sharing algorithm and Pedersen commitment is proposed at the regulation layer to avoid regulatory arbitrariness and unfairness. We also construct a secure and efficient regulatory data sharing scheme (RDShare) at the business layer using an attribute-based encryption algorithm. The key parameters in both JuryBC and RDShare can be specified in the regulatory policy to suit different application scenarios. Finally, the security of the architecture is analyzed and the feasibility and scalability of the architecture through simulation experiments are demonstrated.

对区块链交易实施有效监管已成为近年来的研究热点。然而,目前大多数监管方案都是针对特定的区块链应用程序定制的,缺乏通用性和可扩展性。同时,由于监管政策和监管流程的不公开,这些方案无法保证公平性。为了解决这些问题,提出了一种可扩展的基于策略的监管架构(SPRA),用于区块链交易,将监管和应用分开,以提供足够的可扩展性。SPRA是一个四层模型(权限层、监管层、桥接层和业务层)。监管策略描述语言(XRPL)用于定义各层之间互操作性的监管规则和规范。在监管层提出了一种基于Shamir阈值秘密共享算法和Pedersen承诺的去中心化陪审团机制(JuryBC),以避免监管的随随性和不公平性。我们还使用基于属性的加密算法在业务层构建了一个安全高效的监管数据共享方案(RDShare)。JuryBC和RDShare中的关键参数都可以在监管策略中指定,以适应不同的应用场景。最后,对该体系结构的安全性进行了分析,并通过仿真实验验证了该体系结构的可行性和可扩展性。
{"title":"SPRA: Scalable policy-based regulatory architecture for blockchain transactions","authors":"Chuntang Yu,&nbsp;Yongzhao Zhan,&nbsp;Pujie Jing,&nbsp;Xiangmei Song","doi":"10.1049/blc2.12037","DOIUrl":"10.1049/blc2.12037","url":null,"abstract":"<p>Implementing effective regulation of blockchain transactions has become a research hotspot in recent years. However, most of the current regulatory schemes are customized for specific blockchain applications and lack versatility and scalability. Meanwhile, these schemes cannot guarantee fairness due to the non-disclosure of regulatory policies and regulatory processes. To address these issues, a scalable policy-based regulatory architecture (SPRA) is proposed for blockchain transactions that separates regulation and application to provide sufficient scalability. SPRA is a four-layer model (permission layer, regulation layer, bridge layer, and business layer). A regulatory policy description language (XRPL) is designed to define the regulatory rules and specifications for interoperability between the layers. A decentralized jury mechanism (JuryBC) based on the Shamir threshold secret sharing algorithm and Pedersen commitment is proposed at the regulation layer to avoid regulatory arbitrariness and unfairness. We also construct a secure and efficient regulatory data sharing scheme (RDShare) at the business layer using an attribute-based encryption algorithm. The key parameters in both JuryBC and RDShare can be specified in the regulatory policy to suit different application scenarios. Finally, the security of the architecture is analyzed and the feasibility and scalability of the architecture through simulation experiments are demonstrated.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 4","pages":"265-282"},"PeriodicalIF":0.0,"publicationDate":"2023-07-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ietresearch.onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12037","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"87572493","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A blockchain database system for a rail transit equipment system 用于轨道交通设备系统的区块链数据库系统
Pub Date : 2023-07-14 DOI: 10.1049/blc2.12035
Junfeng An, Yuanguang Jing, Mengmeng Lu, Lei Zheng, Yuting Li, Ti Zhang, Jiwei Zhang

As of today, blockchain technology is virtually absent from rail transit applications, however, it has promising potential. For cloud-based systems or conventional systems, there is too much information at the centre, resulting in a high level of data processing. However, if the data processing capability can be provided at the edge station or at the edge equipment, it greatly reduces the operation and maintenance pressure, at the same time, if the edge device takes the form of a blockchain, it is possible to increase the safety protection capability. It is important to reduce operating and maintenance risks for metro equipment systems by installing fault diagnosis and health management capabilities. This paper presents a blockchain-based platform for subway applications. The assistance includes design, construction, operation, and maintenance assistance, energy saving assistance, manpower reduction assistance, fire protection linkage assistance at transfer stations, federal learning analysis and artificial intelligence analysis, as well as specific implementation plans for implementing vent valve equipment as examples.

截至目前,区块链技术在轨道交通应用中几乎还未出现,但其潜力巨大。对于基于云的系统或传统系统而言,中心信息太多,导致数据处理量大。但如果能在边缘站或边缘设备上提供数据处理能力,就能大大减轻运维压力,同时,如果边缘设备采用区块链的形式,就有可能提高安全保护能力。通过安装故障诊断和健康管理功能来降低地铁设备系统的运维风险非常重要。本文介绍了一种基于区块链的地铁应用平台。辅助内容包括设计、施工、运营、维护辅助,节能辅助,减少人力辅助,换乘站消防联动辅助,联邦学习分析和人工智能分析,并以排气阀设备为例,提出了具体的实施方案。
{"title":"A blockchain database system for a rail transit equipment system","authors":"Junfeng An,&nbsp;Yuanguang Jing,&nbsp;Mengmeng Lu,&nbsp;Lei Zheng,&nbsp;Yuting Li,&nbsp;Ti Zhang,&nbsp;Jiwei Zhang","doi":"10.1049/blc2.12035","DOIUrl":"10.1049/blc2.12035","url":null,"abstract":"<p>As of today, blockchain technology is virtually absent from rail transit applications, however, it has promising potential. For cloud-based systems or conventional systems, there is too much information at the centre, resulting in a high level of data processing. However, if the data processing capability can be provided at the edge station or at the edge equipment, it greatly reduces the operation and maintenance pressure, at the same time, if the edge device takes the form of a blockchain, it is possible to increase the safety protection capability. It is important to reduce operating and maintenance risks for metro equipment systems by installing fault diagnosis and health management capabilities. This paper presents a blockchain-based platform for subway applications. The assistance includes design, construction, operation, and maintenance assistance, energy saving assistance, manpower reduction assistance, fire protection linkage assistance at transfer stations, federal learning analysis and artificial intelligence analysis, as well as specific implementation plans for implementing vent valve equipment as examples.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"4 1","pages":"83-100"},"PeriodicalIF":0.0,"publicationDate":"2023-07-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12035","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"78842252","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Enhancing the blockchain interoperability through federated learning with directed acyclic graph 通过有向无环图的联合学习增强区块链互操作性
Pub Date : 2023-06-09 DOI: 10.1049/blc2.12033
Feng Xia, Li Kaiye, Wu Songze, Xin yan

The use of federated learning to achieve blockchain interoperability has become a hot topic in research, because it enables data exchange without revealing any private information. However, the previous work, such as ScaleSFL (Asia-CCS, 2022), that has implemented federated learning for blockchain interoperability, the throughput of the framework still cannot support the practical applications. Therefore, a federated learning framework based on Directed Acyclic Graph (DAG) is proposed which utilizes sharding mechanism to enhance the blockchain interoperability. By constructing a weighted context graph based on data correlation, reasonable sharding of the dataset is achieved, thereby improving the efficiency of blockchain interoperability. The experimental results show that the federated framework reduces global computation in federated learning by 30% compared with other schemes, while increasing blockchain throughput by nearly 40%.

使用联邦学习来实现区块链互操作性已经成为研究中的热门话题,因为它可以在不泄露任何私人信息的情况下进行数据交换。然而,之前的工作,如ScaleSFL (Asia-CCS, 2022),已经实现了区块链互操作性的联邦学习,框架的吞吐量仍然无法支持实际应用。为此,提出了一种基于有向无环图(DAG)的联邦学习框架,利用分片机制增强区块链的互操作性。通过构建基于数据相关性的加权上下文图,实现对数据集的合理分片,从而提高区块链互操作的效率。实验结果表明,与其他方案相比,联邦框架在联邦学习中的全局计算减少了30%,而区块链吞吐量提高了近40%。
{"title":"Enhancing the blockchain interoperability through federated learning with directed acyclic graph","authors":"Feng Xia,&nbsp;Li Kaiye,&nbsp;Wu Songze,&nbsp;Xin yan","doi":"10.1049/blc2.12033","DOIUrl":"10.1049/blc2.12033","url":null,"abstract":"<p>The use of federated learning to achieve blockchain interoperability has become a hot topic in research, because it enables data exchange without revealing any private information. However, the previous work, such as ScaleSFL (Asia-CCS, 2022), that has implemented federated learning for blockchain interoperability, the throughput of the framework still cannot support the practical applications. Therefore, a federated learning framework based on Directed Acyclic Graph (DAG) is proposed which utilizes sharding mechanism to enhance the blockchain interoperability. By constructing a weighted context graph based on data correlation, reasonable sharding of the dataset is achieved, thereby improving the efficiency of blockchain interoperability. The experimental results show that the federated framework reduces global computation in federated learning by 30% compared with other schemes, while increasing blockchain throughput by nearly 40%.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 4","pages":"238-248"},"PeriodicalIF":0.0,"publicationDate":"2023-06-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ietresearch.onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12033","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89998234","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Ethereum phishing detection based on graph neural networks 基于图神经网络的以太坊网络钓鱼检测
Pub Date : 2023-05-31 DOI: 10.1049/blc2.12031
Ao Xiong, Yuanzheng Tong, Chengling Jiang, Shaoyong Guo, Sujie Shao, Jing Huang, Wei Wang, Baozhen Qi

With the development of blockchain, cryptocurrencies are also showing a boom. However, due to the decentralized and anonymous nature of blockchain, cryptocurrencies have inevitably become a hotbed for fraudulent crimes. For example, phishing scams are frequent, which not only jeopardize the financial security of blockchain, but also hinder the promotion of blockchain technology. To solve this problem, this paper proposes a graph neural network-based phishing detection method for Ethereum, and validates it using Ethereum datasets. Specifically, this paper proposes a feature learning algorithm named TransWalk, which consists of a random walk strategy for transaction networks and a multi-scale feature extraction method for Ethereum. Then, an Ethereum phishing fraud detection framework is built based on TransWalk, and conduct extensive experiments on the Ethereum dataset to verify the effectiveness of this scheme in identifying Ethereum phishing detection.

随着区块链的发展,加密货币也呈现出蓬勃发展的态势。然而,由于区块链的去中心化和匿名性,加密货币也不可避免地成为了诈骗犯罪的温床。例如,网络钓鱼诈骗频发,不仅危害了区块链的金融安全,也阻碍了区块链技术的推广。为解决这一问题,本文提出了一种基于图神经网络的以太坊网络钓鱼检测方法,并利用以太坊数据集进行了验证。具体来说,本文提出了一种名为 "TransWalk "的特征学习算法,该算法由交易网络随机行走策略和以太坊多尺度特征提取方法组成。然后,基于TransWalk构建了以太坊钓鱼欺诈检测框架,并在以太坊数据集上进行了大量实验,验证了该方案在识别以太坊钓鱼检测方面的有效性。
{"title":"Ethereum phishing detection based on graph neural networks","authors":"Ao Xiong,&nbsp;Yuanzheng Tong,&nbsp;Chengling Jiang,&nbsp;Shaoyong Guo,&nbsp;Sujie Shao,&nbsp;Jing Huang,&nbsp;Wei Wang,&nbsp;Baozhen Qi","doi":"10.1049/blc2.12031","DOIUrl":"10.1049/blc2.12031","url":null,"abstract":"<p>With the development of blockchain, cryptocurrencies are also showing a boom. However, due to the decentralized and anonymous nature of blockchain, cryptocurrencies have inevitably become a hotbed for fraudulent crimes. For example, phishing scams are frequent, which not only jeopardize the financial security of blockchain, but also hinder the promotion of blockchain technology. To solve this problem, this paper proposes a graph neural network-based phishing detection method for Ethereum, and validates it using Ethereum datasets. Specifically, this paper proposes a feature learning algorithm named TransWalk, which consists of a random walk strategy for transaction networks and a multi-scale feature extraction method for Ethereum. Then, an Ethereum phishing fraud detection framework is built based on TransWalk, and conduct extensive experiments on the Ethereum dataset to verify the effectiveness of this scheme in identifying Ethereum phishing detection.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"4 3","pages":"226-234"},"PeriodicalIF":0.0,"publicationDate":"2023-05-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12031","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89028785","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A review of blockchain cross-chain technology 区块链跨链技术综述
Pub Date : 2023-05-31 DOI: 10.1049/blc2.12032
Li Li, Jiahao Wu, Wei Cui

Along with the continuous breakthroughs and innovations in blockchain technology, various blockchain application scenarios are emerging, such as healthcare, e-voting, and Internet of Things. However, in general, these applications need to be supported by blockchain systems with different characteristics. Different blockchain systems have significant differences in architecture, security, efficiency, and so on, which makes the exchange of information between applications have certain barriers. Therefore, the research of blockchain cross-chain technology brings hope for breaking the information barriers between blockchain systems. This paper describes the basic principles and latest research of three mainstream cross-chain technologies; then analyzes three innovative cross-chain solutions of cross-chain routing, smart contracts, and multi-chain consensus; furthermore, discusses the application and security risks of cross-chain technologies, and finally summarizes and outlooks on cross-chain technologies.

随着区块链技术的不断突破和创新,医疗保健、电子投票、物联网等区块链应用场景不断涌现。然而,总的来说,这些应用需要不同特征的区块链系统的支持。不同的区块链系统在架构、安全性、效率等方面存在显著差异,这使得应用程序之间的信息交换存在一定的障碍。因此,区块链跨链技术的研究为打破区块链系统之间的信息壁垒带来了希望。本文介绍了三种主流跨链技术的基本原理和最新研究成果;然后分析了跨链路由、智能合约和多链共识三种创新的跨链解决方案;此外,讨论了跨链技术的应用和安全风险,最后对跨链技术进行了总结和展望。
{"title":"A review of blockchain cross-chain technology","authors":"Li Li,&nbsp;Jiahao Wu,&nbsp;Wei Cui","doi":"10.1049/blc2.12032","DOIUrl":"https://doi.org/10.1049/blc2.12032","url":null,"abstract":"<p>Along with the continuous breakthroughs and innovations in blockchain technology, various blockchain application scenarios are emerging, such as healthcare, e-voting, and Internet of Things. However, in general, these applications need to be supported by blockchain systems with different characteristics. Different blockchain systems have significant differences in architecture, security, efficiency, and so on, which makes the exchange of information between applications have certain barriers. Therefore, the research of blockchain cross-chain technology brings hope for breaking the information barriers between blockchain systems. This paper describes the basic principles and latest research of three mainstream cross-chain technologies; then analyzes three innovative cross-chain solutions of cross-chain routing, smart contracts, and multi-chain consensus; furthermore, discusses the application and security risks of cross-chain technologies, and finally summarizes and outlooks on cross-chain technologies.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 3","pages":"149-158"},"PeriodicalIF":0.0,"publicationDate":"2023-05-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12032","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50126632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
WASMOD: Detecting vulnerabilities in Wasm smart contracts WASMOD:检测Wasm智能合约中的漏洞
Pub Date : 2023-05-15 DOI: 10.1049/blc2.12029
Jianfei Zhou, Ting Chen

Over the past few years, blockchain platforms supporting WebAssembly (Wasm) smart contracts are gaining popularity. However, Wasm smart contracts are often compiled from memory-unsafe languages (e.g. C and C++). And there is a lack of effective defense against integer overflow and stack overflow at the compiler and virtual machine (VM) layers, making Wasm smart contracts even more exploitable than native C and C++ programs. In this paper, the authors propose wasm overflow detector (WASMOD) to address the integer overflow and stack overflow vulnerabilities. The authors’ approach combines bytecode instrumentation, run-time validation, and grey-box fuzzing to detect these vulnerabilities. The authors applied their approach to the popular EOSIO blockchain and evaluated it on 4616 deployed Wasm smart contracts. The authors’ approach detected 13 real-world vulnerable smart contracts.

在过去的几年里,支持WebAssembly (Wasm)智能合约的区块链平台越来越受欢迎。然而,Wasm智能合约通常是用内存不安全的语言(例如C和c++)编译的。而且,在编译器和虚拟机(VM)层缺乏对整数溢出和堆栈溢出的有效防御,这使得Wasm智能合约比本地C和c++程序更容易被利用。在本文中,作者提出了asm溢出检测器(WASMOD)来解决整数溢出和堆栈溢出漏洞。作者的方法结合了字节码检测、运行时验证和灰盒模糊测试来检测这些漏洞。作者将他们的方法应用于流行的EOSIO区块链,并在4616个部署的Wasm智能合约上进行了评估。作者的方法检测了13个现实世界中易受攻击的智能合约。
{"title":"WASMOD: Detecting vulnerabilities in Wasm smart contracts","authors":"Jianfei Zhou,&nbsp;Ting Chen","doi":"10.1049/blc2.12029","DOIUrl":"10.1049/blc2.12029","url":null,"abstract":"<p>Over the past few years, blockchain platforms supporting WebAssembly (Wasm) smart contracts are gaining popularity. However, Wasm smart contracts are often compiled from memory-unsafe languages (e.g. C and C++). And there is a lack of effective defense against integer overflow and stack overflow at the compiler and virtual machine (VM) layers, making Wasm smart contracts even more exploitable than native C and C++ programs. In this paper, the authors propose wasm overflow detector <b>(WASMOD)</b> to address the integer overflow and stack overflow vulnerabilities. The authors’ approach combines bytecode instrumentation, run-time validation, and grey-box fuzzing to detect these vulnerabilities. The authors applied their approach to the popular EOSIO blockchain and evaluated it on 4616 deployed Wasm smart contracts. The authors’ approach detected 13 real-world vulnerable smart contracts.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 4","pages":"172-181"},"PeriodicalIF":0.0,"publicationDate":"2023-05-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ietresearch.onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12029","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"74856433","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
FP-BFT: A fast pipeline Byzantine consensus algorithm FP-BFT:一种快速流水线拜占庭共识算法
Pub Date : 2023-05-14 DOI: 10.1049/blc2.12030
Xinlei Liu, Yang Liu, Xiangyang Li, Haohao Cao, Yaoqi Wang

The Byzantine Fault Tolerant (BFT) consensus algorithms have been widely applied in the blockchain systems because of their fault tolerance capability to determine system consistency in the presence of malicious nodes. However, the BFT consensus algorithms are confronted with low efficiency and scalability problems caused by multiple rounds of handshake communication. In this paper, a pipeline-based Fast Pipeline Byzantine Fault Tolerance consensus algorithm (FP-BFT) is proposed, which adopts a non-leader pipeline framework to process different rounds of transactions in parallel. By means of randomly selecting 2f+1 nodes to form a committee for one round of transactions, consensus agreement can be reached within the committee via nodes broadcasting and voting. Committee nodes participating in the consensus are chosen by chance to avoid the monopoly of which becomes the block producer. Consensus efficiency and the system throughput can be significantly improved with the pipeline framework. Comparison experiments are conducted to verify the superiority of the FP-BFT algorithm, and the theoretical proof is given to guarantee the Byzantine fault-tolerant security. Experimental results show that FP-BFT has improved the consensus efficiency by decreasing communication overhead to make it better applied both in public blockchain and consortium blockchain systems.

拜占庭容错(BFT)共识算法由于其在存在恶意节点的情况下确定系统一致性的容错能力,已在区块链系统中得到广泛应用。然而,BFT共识算法面临着由于多轮握手通信而导致的低效率和可扩展性问题。本文提出了一种基于流水线的快速流水线拜占庭容错共识算法(FP-BFT),该算法采用非前导流水线框架并行处理不同轮次的事务。通过随机选择2f+1个节点组成委员会进行一轮交易,可以通过节点广播和投票在委员会内部达成共识。参与共识的委员会节点是偶然选择的,以避免其垄断成为区块生产者。流水线框架可以显著提高共识效率和系统吞吐量。通过对比实验验证了FP-BFT算法的优越性,并给出了保证拜占庭容错安全性的理论证明。实验结果表明,FP-BFT通过降低通信开销提高了共识效率,使其更好地应用于公共区块链和联盟区块链系统。
{"title":"FP-BFT: A fast pipeline Byzantine consensus algorithm","authors":"Xinlei Liu,&nbsp;Yang Liu,&nbsp;Xiangyang Li,&nbsp;Haohao Cao,&nbsp;Yaoqi Wang","doi":"10.1049/blc2.12030","DOIUrl":"https://doi.org/10.1049/blc2.12030","url":null,"abstract":"<p>The Byzantine Fault Tolerant (BFT) consensus algorithms have been widely applied in the blockchain systems because of their fault tolerance capability to determine system consistency in the presence of malicious nodes. However, the BFT consensus algorithms are confronted with low efficiency and scalability problems caused by multiple rounds of handshake communication. In this paper, a pipeline-based Fast Pipeline Byzantine Fault Tolerance consensus algorithm (FP-BFT) is proposed, which adopts a non-leader pipeline framework to process different rounds of transactions in parallel. By means of randomly selecting 2<i>f</i>+1 nodes to form a committee for one round of transactions, consensus agreement can be reached within the committee via nodes broadcasting and voting. Committee nodes participating in the consensus are chosen by chance to avoid the monopoly of which becomes the block producer. Consensus efficiency and the system throughput can be significantly improved with the pipeline framework. Comparison experiments are conducted to verify the superiority of the FP-BFT algorithm, and the theoretical proof is given to guarantee the Byzantine fault-tolerant security. Experimental results show that FP-BFT has improved the consensus efficiency by decreasing communication overhead to make it better applied both in public blockchain and consortium blockchain systems.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 3","pages":"123-135"},"PeriodicalIF":0.0,"publicationDate":"2023-05-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12030","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50141719","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Zero-trust-based security model against data breaches in the banking sector: A blockchain consensus algorithm 针对银行业数据泄露的零信任安全模型:区块链共识算法
Pub Date : 2023-03-23 DOI: 10.1049/blc2.12028
Umair B. Chaudhry, Aysha K. M. Hydros

Cyber security in the banking sector is of high importance nowadays. The rate of cyberattacks is spiking every year, and the implementation of strong cybersecurity models is required to ensure the confidentiality and integrity of data. Since protecting a bank requires a wide range of security practices, this paper focuses on protecting the bank resources from malicious actors and securing the transactions using a blockchain consensus mechanism that uses a zero-trust security approach among the participants in the transaction. In addition to the framework, an algorithm for blockchain-based online transactions was designed to make use of practical implementation in the future. The ideas formulated during the research and literature review were integrated to design the framework and the algorithm. The proposed framework ensures that the security of the banking sector can be enhanced by adopting the zero-trust concept and blockchain technology. The consensus algorithms used for the transaction make it immutable and decentralized. Zero-trust principles adopted in the model ensure the confidentiality and integrity of the banking system.

如今,银行业的网络安全具有高度重要性。网络攻击的发生率每年都在飙升,需要实施强有力的网络安全模型来确保数据的机密性和完整性。由于保护银行需要广泛的安全实践,本文侧重于保护银行资源免受恶意行为者的攻击,并使用区块链共识机制保护交易安全,该机制在交易参与者之间使用零信任安全方法。除了该框架外,还设计了一种基于区块链的在线交易算法,以利用未来的实际实施。将研究过程中提出的思想和文献综述相结合,设计了框架和算法。拟议的框架确保通过采用零信任概念和区块链技术来增强银行业的安全性。用于事务的一致性算法使其不可变且去中心化。该模型采用的零信任原则确保了银行系统的机密性和完整性。
{"title":"Zero-trust-based security model against data breaches in the banking sector: A blockchain consensus algorithm","authors":"Umair B. Chaudhry,&nbsp;Aysha K. M. Hydros","doi":"10.1049/blc2.12028","DOIUrl":"https://doi.org/10.1049/blc2.12028","url":null,"abstract":"<p>Cyber security in the banking sector is of high importance nowadays. The rate of cyberattacks is spiking every year, and the implementation of strong cybersecurity models is required to ensure the confidentiality and integrity of data. Since protecting a bank requires a wide range of security practices, this paper focuses on protecting the bank resources from malicious actors and securing the transactions using a blockchain consensus mechanism that uses a zero-trust security approach among the participants in the transaction. In addition to the framework, an algorithm for blockchain-based online transactions was designed to make use of practical implementation in the future. The ideas formulated during the research and literature review were integrated to design the framework and the algorithm. The proposed framework ensures that the security of the banking sector can be enhanced by adopting the zero-trust concept and blockchain technology. The consensus algorithms used for the transaction make it immutable and decentralized. Zero-trust principles adopted in the model ensure the confidentiality and integrity of the banking system.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 2","pages":"98-115"},"PeriodicalIF":0.0,"publicationDate":"2023-03-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12028","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50142222","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
K-Go: An executable formal semantics of Go language in K framework K-Go:K框架下Go语言的可执行形式语义
Pub Date : 2023-03-13 DOI: 10.1049/blc2.12024
Can Zhao, Qin Liu, Zonghua Hu, Ze Yu, Dejun Wang, Bo Meng

Go is a relatively new programming language and has become one of the most important programming languages used widely in blockchain. A formal semantics plays an important role in program synthesis, analysis and verification. The existed formal semantics of Go are not executable and do not cover the core features, hence, this paper presents an executable formal semantics for Go, called K-Go, using rewriting logic in K$mathbb{K}$ framework to make sure the semantics is both executable and applicable. K-Go includes syntax, configuration and rules and covers the declaration and definition of basic types, basic expression, concurrency, main statement data reading and writing based on channel. K-Go is validated by test set with 100% semantic coverage based on the official test suite. The evaluation experiment shows that K-Go is correct. Using formal semantics of Go language, building Go program synthesis, analysis and verification tools is easy for analyzing more characteristics of Go programs.

Go是一种相对较新的编程语言,已成为区块链中广泛使用的最重要的编程语言之一。形式语义在程序综合、分析和验证中起着重要作用。由于Go已有的形式语义是不可执行的,并且没有覆盖核心特征,因此,本文在K$mathbb{K}$框架中使用重写逻辑,提出了一种Go的可执行形式语义K-Go,以确保该语义是可执行的和可应用的。K-Go包括语法、配置和规则,涵盖了基本类型的声明和定义、基本表达式、并发性、基于通道的主语句数据读写。K-Go通过基于官方测试套件的100%语义覆盖的测试集进行验证。评价实验表明K-Go是正确的。利用Go语言的形式语义,构建Go程序的综合、分析和验证工具,可以方便地分析Go程序的更多特征。
{"title":"K-Go: An executable formal semantics of Go language in K framework","authors":"Can Zhao,&nbsp;Qin Liu,&nbsp;Zonghua Hu,&nbsp;Ze Yu,&nbsp;Dejun Wang,&nbsp;Bo Meng","doi":"10.1049/blc2.12024","DOIUrl":"https://doi.org/10.1049/blc2.12024","url":null,"abstract":"<p>Go is a relatively new programming language and has become one of the most important programming languages used widely in blockchain. A formal semantics plays an important role in program synthesis, analysis and verification. The existed formal semantics of Go are not executable and do not cover the core features, hence, this paper presents an executable formal semantics for Go, called K-Go, using rewriting logic in <math>\u0000 <semantics>\u0000 <mi>K</mi>\u0000 <annotation>$mathbb{K}$</annotation>\u0000 </semantics></math> framework to make sure the semantics is both executable and applicable. K-Go includes syntax, configuration and rules and covers the declaration and definition of basic types, basic expression, concurrency, main statement data reading and writing based on channel. K-Go is validated by test set with 100% semantic coverage based on the official test suite. The evaluation experiment shows that K-Go is correct. Using formal semantics of Go language, building Go program synthesis, analysis and verification tools is easy for analyzing more characteristics of Go programs.</p>","PeriodicalId":100650,"journal":{"name":"IET Blockchain","volume":"3 2","pages":"61-73"},"PeriodicalIF":0.0,"publicationDate":"2023-03-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/blc2.12024","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50140657","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
IET Blockchain
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1