随着移动互联网与物联网技术的发展,网络空间承载了海量数据,必须保证其安全性和隐私性。基于区块链的网络安全机制具有去中心化、不可篡改、可追溯、高可信和高可用的特性,有利于提升网络安全性。探讨了区块链在网络安全方面的应用方案,分析了基于区块链的网络安全机制的主要技术特点和方法以及未来研究方向。首先探讨了数据管理体系应用区块链进行数据管理的方法,利用区块链不可篡改的特性提高数据的真实性和可靠性。其次分析了物联网应用区块链进行设备管理的方案,通过区块链记录和执行设备控制指令,强化物联网设备权限和通信管理。最后研究了域名系统应用区块链的部署方案,利用区块链的去中心化结构抵抗针对中心节点的分布式拒绝服务攻击。国家自然科学基金资助项目(No.61671396);;东南大学移动通信国家重点实验室开放基金资助项目(No.2018D08);;佛山市科技创新项目(No.2015IT100095)~

肖亮

许冬瑾

陈烨

English

Xiamen University Institutional Repository

 2018135-1 ????????? ?????????????? ????????? ????????????????? ?? 361005? ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ??????????????? ??????TP393        ??????A doi: 10.11959/j.issn.1000−0801.2018135 Survey on network security based on blockchain CHEN Ye, XU Dongjin, XIAO Liang Department of Communication Engineering, Xiamen University, Xiamen 361005, China Abstract: With the development of the mobile internet and IoT (internet of things), mass data are stored in the cy-berspace. The network security and privacy are of great significance. The blockchain-based network security me-chanism has the properties of decentralization, tamper-resistance, traceability, high availability and credibility, and can be applied to improve network security. The application of blockchain in the network security was explored. The main technologies and the future research direction of the blockchain-based network security mechanism were ana-lyzed. Firstly, the blockchain-based data protection scheme was analyzed, which applied the tamper-resistance of the blockchain to improve the authenticity and reliability of data. Secondly, the blockchain-based IoT device management scheme was analyzed, which applied the blockchain to record and execute the device control instruction and improve the authority and communication of the IoT devices. Lastly, the blockchain-based domain name system was analyzed, which applied the decentralization of the blockchain to resist distributed denial of service effectively.  Key words: network security, privacy, blockchain ?????2017−12−01??????2018−03−01 ??????????????????No.61671396??????????????????????????No.2018D08????????????No.2015IT100095? Foundation Items: The National Natural Science Foundation of China (No.61671396), Open Research Fund of National Mobile Com-munications Research Laboratory, Southeast University (No.2018D08), Science and Technology Innovation Project of Foshan City(No.2015IT100095)  ?11?  ????  2018?? 3?   1  ?? ?????????????????????????????????????????????[1]????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????[2-4]??????????????????????????????????????blockchain?????????????????????????????????????????????????????????[5]? ????????Bitcoin??????[6]?2013? 12????????? Vitalik Buterin?????????????????smart contract?????????????????????????????[7]????????????????????????????????????????????????????????????????????????????????????????????????[8]???????????????? 1??????????????????????????????DDoS?distributed denial of service???????????? 3 ???????????????????? ???????????????????????????????????????????????????[9]?????????????????????????????????????????????????????????????????????????????????????????????[18]? ???????????????????????????????????????????????????????????[14,15]?????????????????????????????????????????????????????????????????????????????[16,19]? DDoS????????????????????????????????????????[20,21]???????????????????????????????????????????????????????????? 1  ???????????????? ???? ???? ???? ???? ??????????? ?????????????????????[9] ????????????????????????? ?????????????????????? ???????????????????MedRec[10,11] ?????????????????????????? ????????????????????????????? ?????????????[12,13]  ???????????????????????????? ??????????????????????????????????????? ??????????????????[14,15] ???????????????????????????? ????????????????????????????????????????????[16] ?????????????????????????????? ???????????????????????????? ?? DDoS?? ??????????????? Blockstack?Nebulis?[17] ??????????????????????????? ???????? IP?????????? DDoS??  2018135-2 ??????????? ?12?  ?????????????????????????? DDoS????????[17,22]? 2  ??????????? ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????[23]? ??????????????????????????????????????????[10,11]???????????????????????????????????????????????????????????? 1 ?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ????????????????????????????????????????????????????????????PKI?public key infrastructure???????????PKI ??????????—??????????????????????? CA?certificate authority????????????????[12]?? CA ?????????????????????????????????????????????????????????????????  ? 1  ??????????????[9] 2018135-3?13?  ????  2018?? 3?  ?? KSI?keyless signatures’ infrastructure??????????????????????????????????[13]?KSI ?????????????????????????????????????????????????????????????????????Merkle ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? Merkle???????????????????????????????????????????????????????KSI ??????????????????????????????????? KSI ?????????????????????????? 3  ????????????? ???????????????????????????????????????????????????????????[24,25]?????????????????????????????????????????????????????????????????[14,15]? ? 2 ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? DDoS ???????[26]?????????????????????  ? 2  ???????????????[15] ??????????????????????????????? 50.0%???????? 20.6%???—????????????46.8%???????? 19.2%????????43.5%???????? 14.7%[15]?????????????????????????????????????????????????????????????????????[15]? 4  ?? DDoS?? DDoS??????????????????????????????????????????????????????????[20]?2018135-4??????????? ?14?  ??????????????????????? DDoS ????????????????????????????????????????????????????????????????????? DDoS??[27]? ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? DDoS ????????[27]? ??????? DNS?domain name system? ??????????????????? DDoS????????????[28]?????????????? DNS ? Namecoin?Blockstack ?Nebulis??? Blockstack???? 3? Blockstack????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 5  ??? ????????????????????????????? DDoS ??????????????????????????????????????????????????????????????????????????????????????????????????? KSI ??????????????? CA ????????????????????????????????????????????????????????????????????????????????????????????????????? ? 3  ????????????[17] 2018135-5 ?15?  ????  2018?? 3?  ??????????? DNS?? Blockstack?Nebulis??????????????????? DDoS ?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ????? [1] XIAO L, LI Y, HAN G, et al. A secure mobile crowdsensing game with deep reinforcement learning[J]. IEEE Transactions on Information Forensics & Security, 2017, 136(1): 35-47.  [2] ??, ???, ???. ?????????????[J]. ???????, 2016, 31(3): 464-472. XIAO L, LI Q D, LIU J L. Survey on secure cloud storage[J]. Journal of Data Acquisition & Processing, 2016, 31(3): 464-472. [3] XIAO L, XU D, XIE C, et al. Cloud storage defense against ad-vanced persistent threats: a prospect theoretic study[J]. IEEE Journal on Selected Areas in Communications, 2011, 35(3): 534-544.  [4] ???, ??, ???, ?. ???????????????[J]. ????, 2014, 30(11): 2-8. LIU M H, ZHANG N, ZHANG Y Y, et al. Research on sensi-tive data protection technology on cloud computing [J]. Tele-communications Science, 2014, 30(11): 2-8. [5] ??, ???. ????????????[J]. ?????, 2016, 42(4): 481-494.  YUAN Y, WANG F Y. Blockchain: the state of the art and fu-ture trends[J]. Acta Automatica Sinica, 2016, 42(4): 481-494.  [6] NAKAMOTO S. Bitcoin: a peer-to-peer electronic cash sys-tem[J]. Consulted, 2008.  [7] BUTERIN V A. Next-generation smart contract and decentra-lized application platform[R]. 2014.  [8] ???, ???, ??, ?. ?????: ?????[J]. ?????, 2017: 1-20.  SHAO Q F, JIN C Q, ZHANG Z, et al. Blockchain technology: architecture and progress[J]. Chinese Journal of Computers, 2017: 1-20.  [9] ZYSKIND G, NATHAN O. Decentralizing privacy: Using blockchain to protect personal data[C]//IEEE Security and Pri-vacy Workshops, May 21-22, 2015, San Jose, CA, USA. Pisca-taway: IEEE Press, 2015: 180-184. [10] WOOD G. Ethereum: a secure decentralised generalized trans-action ledger[EB]. 2014.  [11] AZARIA A, EKBLAW A, VIEIRA T, et al. MedRec: using blockchain for medical data access and permission manage-ment[C]//IEEE International Conference on Open and Big Data, Dec 5-8, 2016, Washington, DC, USA. Piscataway: IEEE Press, 2016: 25-30.  [12] BULDAS A, LAANOJA R, TRUU A. Keyless signature infra-structure and PKI: hash-tree signatures in pre- and post-quantum world[J]. International Journal of Services Tech-nology & Management, 2017, 23(1/2): 117.  [13] BULDAS A, LAANOJA R, TRUU A. Efficient quan-tum-immune keyless signatures with identity[J]. IACR Cryp-tology ePrint Archive, 2014: 321.  [14] DORRI A, STEGER M, KANHERE S, et al. Blockchain: a distributed solution to automotive security and privacy[J]. IEEE Communications Magazine, 2017, 55(12):119-125.  [15] DORRI A, KANHERE S, JURDAK R, et al. Blockchain for IoT security and privacy: the case study of a smart home[C]// IEEE International Conference on Pervasive Computing and Communications, March 13-17, 2017, Kona, HI, USA. Pisca-taway: IEEE Press, 2017: 618-623.  [16] BAHGA A, MADISETTI V K. Blockchain platform for indus-trial Internet of things[J]. Journal of Software Engineering and Applications, 2016, 9(10): 533.  [17] ALI M, NELSON J, SHEA R, et al. Blockstack: a global nam-ing and storage system secured by blockchains[C]//USENIX Annual Technical Conference, July 12-14, 2016, Santa Clara, CA, USA. Piscataway: IEEE Press, 2016: 181-194.  [18] AITZHAN N, SVETINOVIC D. Security and privacy in decen-tralized energy trading through multi-signatures, blockchain and anonymous messaging streams[J]. IEEE Transactions on De-pendable & Secure Computing, 2016(99): 1.   [19] ???, ??, ??. ???????????????????[J].????, 2017, 33(10): 19-25.  ZHAO M H, ZHANG L, QI J. A framework of trusted services management based on block chain in social internet of things [J]. Telecommunications Science, 2017, 33(10): 19-25.  [20] WANG B, ZHENG Y, LOU W, et al. DDoS attack protection in the era of cloud computing and software-defined networking[J]. Computer Networks, 2015(81): 308-319.  [21] ???, ???, ???, ?. ?????????DDoS????[J]. ????, 2017, 33(7): 53-65. LI C H, SUN Z J, YUAN X Y, et al. Real-time DDoS attack de-tection based on deep learning [J]. Telecommunications Science, 2017, 33(7): 53-65.  2018135-6 ??????????? ?16?  [22] ??, ???, ???, ?. ???????????????[J]. ????, 2015, 31(7): 145-150. WANG S, WANG L F, JIN H M, et al. Big data application in network security analysis[J]. Telecommunications Science, 2015, 31(7): 145-150. [23] KOSBA A, MILLER A, SHI E, et al. Hawk: the blockchain model of cryptography and privacy-preserving smart con-tracts[C]//IEEE Symposium on Security and Privacy (SP), May 23-25, 2016, San Jose, CA, USA. Piscataway: IEEE Press, 2016: 839-858.  [24] SIVARAMAN V, CHAN D, EARL D, et al. Smart-phones attacking smart-homes[C]//ACM Conference on Security & Privacy in Wireless and Mobile Networks, July 18-20, 2016, Darmstadt, Germany. New York: ACM Press, 2016: 195-200.  [25] HU Q, LV S, SHI Z, et al. Defense Against advanced persistent threats with expert system for internet of things//IEEE/IFIP In-ternational Conference on Wireless Algorithms Systems and Application, June 19-21, 2017, Guilin, China. Piscataway: IEEE Press, 2017. [26] NARAYANAN A, BONNEAU J, FELTEN E, et al. Bitcoin and cryptocurrency technologies: a comprehensive introduction[M]. Princeton: Princeton University Press, 2016. [27] RODRIGUES B, BOCEK T, LAREIDA A, et al. A block-chain-based architecture for collaborative DDoS mitigation with smart contracts[C]//IFIP International Conference on Auto-nomous Infrastructure, Management and Security, July 10-13, 2017, University of Zurich, Zurich, Switzerland. Berlin: Sprin-ger-Verlag, 2017: 16-29.  [28] HU W, AO M, SHI L, et al. Review of blockchain-based DNS alternatives[J]. ?????????, 2017, 3(3): 71-77.  HU W, AO M, SHI L, et al. Review of blockchain-based DNS alternatives[J]. Chinese Journal of Network and Information Security, 2017, 3(3): 71-77.   [????]       ???1995−?????????????????????????????????????? ????1994−??????????????????????????????????????  ???1980−??????????????????????????????????????????? 2018135-7 

基于区块链的网络安全技术综述

https://dspace.xmu.edu.cn/bitstream/handle/2288/173762/%e5%9f%ba%e4%ba%8e%e5%8c%ba%e5%9d%97%e9%93%be%e7%9a%84%e7%bd%91%e7%bb%9c%e5%ae%89%e5%85%a8%e6%8a%80%e6%9c%af%e7%bb%bc%e8%bf%b0.pdf?sequence=1&isAllowed=y

基于区块链的网络安全技术综述

Abstract

Similar works

Full text

Available Versions

Xiamen University Institutional Repository