Blockchain Papers

중앙대학교 융합보안학과 박사과정, SeHee Jung, Chang-Moo Lee

최근 가상자산의 투기열풍과 코로나 19로 인한 비대면 사회의 메타버스 활성화 등으로 인해 NFT(Non-Fungible Token)에 대한 관심이 높아지고 있다. NFT는 가상자산과 콘텐츠의 성격을 가지고 있으며 콘텐츠의 소유권과 가치를 보존할뿐더러 데이터의 위변조가 불가하다는 특성으 로 인해 많은 인기를 끌고 있다. 시장 규모가 폭발적으로 증가하고 사용자들이 늘고 있어 관련 범죄 또한 증가하고 있다. 실제로 사용자 계정 탈취사건이나 NFT 도난과 같은 보안사고가 발생 하고 있다. 이처럼 현재 발생할 범죄와 앞으로 발생할 가능성이 있는 NFT 관련 범죄로부터 NFT 생태계와 여러 이해관계자들을 보호하기 위한 대책은 미흡한 상황이다. 이에 보안의 필요성을 느껴 NFT 거래의 보안 위협요소를 파악하고자 한다. NFT에 대한 정의 후 실제 거래가 이뤄지는 NFT 마켓플레이스를 대상으로 관련 보안 위협요소를 도출하고자 했다. 직접 사용, 인터뷰, 블록체인 기록 확인 등을 통해 실제 NFT 거래 흐름을 파악했다. 이후 거래 내 위협을 파악하기 위해 STRIDE 위협 모델링 기법을 사용했고 거래 외 위협은 관련 사고, 웨비나 자료 등 사례 연구를 통해 식별했다. 도출된 위협을 10개의 기준으로 분류하고 포커스 그룹 인터뷰를 통해 타당성 검증을 실시했다. 검증 결과 대부분의 항목에서 타당성 기준 점수 이상을 받았고 기준 점수 미만의 항목에 대해서는 추가 인터뷰 및 기각된 이유를 분석했다. 본 연구는 NFT의 안전한 거래를 위해 신종 사이버범죄를 막을 수 있도록 보안이 필요하며 보 안 대책 마련에 앞서 관련 보안 위협을 도출했다. 향후 NFT 마켓플레이스의 보안 대책 마련에 초석이 되리라 생각된다. 최종적으로 향후 NFT 생태계 내 다양한 이해관계자가 안전한 거래를 할 수 있도록 보호하고 산업의 연속성을 영위하는데 기여하고자 한다.

Hong-Bae Kim, Dae-Sung Jung

본 연구는 GARCH류 모형(GARCH, EGARCH, TGARCH, APARCH, CGARCH, 및 ACGARCH)을 활용하여 2017년부터 9월 25일부터 2021년 7월 25일까지 Coindesk와 Upbit의 비트코인 가격변화의 특성을 분석하였다. 본 연구의 연구결과는 다음과 같다. 첫째, 제약조건을 위배하지 않으면서 Coindesk와 Upbit의 비트코인 가격변화를 설명하는 공통된 GARCH류 모형은 존재하지 않았다. Coindesk 시장에서는 EGARCH모형이 비트코인 가격변동성을 잘 설명하는 모형으로 제시되었으며, Upbit 시장에서는 CGARCH모형이 비트코인 가격변동성을 잘 설명하는 모형으로 나타났다. 그리고 글로벌 규제가 상대적으로 없었던 2017년 이전 Coindesk의 비트코인 가격에 대해서는 CGARCH모형이 설명력이 높고 적합하였으나, 글로벌 규제가 2차례 있었던 2017년 이후는 장단기 변동성을 구분하는 CGARCH모형이 적합한 것으로 나타났다. 둘째, 비트코인 수익률의 변동성은 규제 등 시장뉴스의 충격에 따른 비대칭성은 나타나지 않았다. 반면 Charles, Darne(2019)의 지적처럼 거래소 공격 및 해킹, 도난, 파산 등 기술적 문제와 시장 내에서의 가격조정에 따른 비트코인 가격의 급등락이 발생하는 특징이 관찰되었다. 이상의 연구결과를 바탕으로 비트코인 가격변화를 분석하는데 있어 전통적인 GARCH모형은 충분하지 않으며 각 시장별로 적합한 모형을 확인하였다. 이를 기반으로 왜도, 두터운 꼬리, 점프, 장기의존성, 체제변동성, 다중프랙탈 등을 고려한 모형으로 발전되어야 할 것으로 기대된다.

Chungwon Woo, Jaeheung Yoo

Researchers are highly interested in research data management to derive excellent research results. This study analyzes the determinants affecting the acceptance of blockchain-based electronic lab notebooks service as research data management service. A research model was established based on the technology acceptance model. The sample is collected by 585 researchers from universities and research institutes in Korea. The main research results showed that the usefulness and ease of use lowered the perceived risk and increased the intention to use. Social norms also decreased perceived risk factors and increased intention to use. Research implications are that managers should seek ways to lower the technical risks of blockchain when developing blockchain-based services. In addition, they have to allow users to easily use blockchain-based services and recommend them to other users around them.

Yangsun Lee

The hyperledger fabric is a modular blockchain framework used by private companies to develop blockchain-based products, solutions, and applications using plug-and-play components. The smart contracts operating in this framework is created by implementing a chaincode. When implementing a chaincode, there may be a security weakness inside the code, which is the root cause of the security vulnerability. However, when the contract is completed and the block is created, the chaincode cannot be arbitrarily modified, so the security weakness must be analyzed before execution. This paper conducted a study on chaincode intermediate code generation for security weakness analysis of chaincode operating in hyperledger fabric blockchain framework. Analysis of security weaknesses at the source code level is not easy because the code logic is not clear and the complexity is high. On the other hand, security weakness analysis at the intermediate code level is easy to analyze because the code logic of the source code is clearly represented and the complexity is lower than that of the source code.

Authors unavailable

Industry 4.0 comprises of some disruptive technologies which are creating a significant impact in every fields. Recent development in these technologies has created a huge impact in the conventional supply chain model which forces the companies to evolve new models to face the upcoming challenges. One such promising technology which will disrupt and change the entire view of supply chain transparency is Blockchain. Blockchain is basically a chain of blocks that contain information that is nearly impossible to tamper. Blockchain is defined as stack of information linked with each other in blocks and highly resistant to changes. It is a distributed ledger completely open to everyone. Once we enter data in Blockchain it becomes nearly impossible to change it which will give us the authenticity of the data. Based on the literature study, we found that integrating Blockchain in the supply chain will improve the efficiency of the supply chain exponentially. Every transaction that happens in a supply chain can be integrated and recorded in the blocks of a decentralized Blockchain (Distributed ledger) which will be shared will many computers thus increasing the transparency. As each block is connected with each other it becomes nearly impossible to change the entered record as tampering a single block may result in complete loss of data. This will improve the transparency of the supply chain in every stage and improve the supply chain security and efficiency.

Sanghoon Jeon

공식 표준화 기구인 ISO, ITU-T와 민간/산업계 컨소시엄 단체인 IEEE, W3C 등과 같은 사실 표준화 기구에서 기술 표준화를 진행하고 있다. FG-DLT(The Focus Group on Application of Distributed Ledger Technology), FG-DFC(The Focus Group on Digital Currency including Digital Fiat Currency) 연구반에서 연구를 마치고, ITU-T SG17 연구반에서 개발 중인 블록체인 및 분산원장 기술 표준화 진행 상황과 ISO/TC307에서 ISO/IEC JTC1/SC27 정보보호 기술 분과와 공동 작업 중인 표준화 진행 과정 그리고 IEEE와 같은 민간/산업계 컨소시엄 단체 표준화 동향을 소개하고자 한다. 그리고 본문에서, 필자가 국내 대표 전문위원으로 ISO 및 ITU-T 기구에서 블록체인 및 분산원장 기술 국제 표준화 활동 수행하며, 현 시점의 표준화에 대한 의견을 제시하고자 한다.

Seong-Kyu Kim

In this study, future cars are attempting self-driving around the world. However, hacking, such as ECUs in automobiles, creates problems that are directly connected to human life. Therefore, this study wrote a paper that detects anomalies in such cars by field. As a related study, the study investigated the vulnerabilities of the automobile security committee and automobile security standards and investigated the detection of abnormalities in the hacking of geo-train cars using artificial intelligence’s LSTM and blockchain consensus algorithm. In addition, in automobile security, an algorithm was studied to predict normal and abnormal values using LSTM-based anomaly detection techniques on the premise that automobile communication networks are largely divided into internal and external networks. In the methodology, LSTM’s pure propagation malicious code detection technique was used, and it worked with an artificial intelligence consensus algorithm to increase security. In addition, Unity ML conducted an experiment by constructing a virtual environment using the Beta version. The LSTM blockchain consensus node network was composed of 50,000 processes to compare performance. For the first time, 100 Grouped Tx, 500 Channels were tested for performance. For the first time, the malicious code detection rate of the existing system was verified. Accelerator, Multichannel, Sharding, Raiden, Plasma, and Trubit values were verified, and values of approximately 15,000 to 50,000 were obtained. In this paper, we studied to become a paper of great significance on hacking that threatens human life with the development of self-driving cars in the future.

Johann Stockinger

Durch die steigende Popularität von Bitcoin steigen auch die Anforderungen von Benutzern nach effektiven Techniken zur Wahrung ihrer Privatsphäre. Zwei häufig empfohlene Dienste sind Wasabi Wallet und Samourai Wallet, welche durch CoinJoins das robuste und sichere Vermischen von Bitcoins versprechen. Diese Arbeit untersucht die Rolle dieser beiden Dienste im Bitcoin Ökosystem, wie sich diese Rolle im Laufe der Zeit entwickelt hat und ob es möglich ist, Benutzer dieser Dienste zu deanonymisieren. Um die Rolle beider Dienste zu analysieren werden Heuristiken entwickelt, welche die CoinJoin Transaktionen von Wasabi Wallet und Samourai Wallet erkennen. Auf Basis der so entdeckten Transaktionen wird sichtbar, dass sowohl die Anzahl der Transaktionen als auch die Anzahl der vermischten Bitcoins stetig wächst, was auf eine wachsende Nutzerbasis hinweist. Darüber hinaus wurden Adressen von Entitäten, welche in Verbindung zu kriminellen Aktivitäten wie Ransomware und Service-Hacks stehen, in der Nähe von CoinJoin Transaktionen beider Dienste identifiziert. Schlussendlich wird das zugrundeliegende System beider Dienste in Hinblick auf Diebstahl, Denial-of-Service sowie Deanonymisierung von Benutzern analysiert. Es wird gezeigt, dass ein bösartiger CoinJoin-Koordinator theoretisch Nutzer deanonymisieren kann, dies jedoch nur in einer eher offensichtlichen Art, welche zu nachträglichem Misstrauen führen kann. Des Weiteren sind sowohl Wasabi Wallet als auch Samourai Wallet robust gegenüber Diebstahl und verfügen über Maßnahmen gegen Denial-of-Service Angriffe.

Mengjian Cai, Zhanli Sun, Xin Deng

Technologies such as distributed ledger and its utilization of blockchain have higher network security, promote the balance between security and efficiency, and new technical measures are being taken to enhance its security. However, blockchain technology and utilization are not secure. The security architecture of blockchain should be constructed from the concept of “zero-trust security”, and the security utilization of the blockchain should be highly valued from the network security strategy to promote international cooperation in blockchain security.

Sanya Dod

No abstract is available for this record.

Tri Wahyuningsih, Gunawan Gunawan, Fitra Putri Oganda, Mey Anggraeni

With the approaching of the digital age, digital education resources bring convenience to folks as a result of they're liable to duplicate and spread, however there are some disadvantages in on-line education service transactions. The safety problems with digital education resources and also the development of smuggled distribution seriously harm the rights and interests of the house owners of digital education resources. supported this, during this paper, we have a tendency to planned a blockchain-based digital education resources authentication system that uses the decentralized, tamper-resistant options of blockchain technology to store the digital education resources info within the style of a secret text. Within the system, there is no have to be compelled to need the participation of any third-party institution. The system planned during this study can greatly defend the rights and interests of the owner of digital education resources.

Min Youn A, Lim Dong Kyun

AbstractFor learner's self-directed distance education, the need for Problem Recommendation learning guidesreflecting accurate learning patterns based on learner data is increasing. In this paper, based onblockchain based smart contract technology, various learner data generated in the distance educationenvironment were collected and accurately managed to analyze Problem Recommendation patternsfor individual learners and gave weights for each learning situation. It is possible to present the optimalProblem Recommendation path when individual learners solve problems based on the assigned weightsfor each learning situation. To evaluate the performance of this study, the learning satisfaction with theexisting similar learning environment, the usefulness of the Problem Recommendation guide, and theprocessing speed of learner data were analyzed. As a result, compared to the existing learningenvironment, the proposed learning environment improved learning satisfaction by 19% or more, and itwas confirmed that the learning data processing speed was improved by more than 20%.

강형구, 천경훈, 문정빈

본 논문은 사회적 경제 활성화와 특히 사회적 가치의 과학적인 합의에 기초한 거래를 위하여 사회적가치거래소(SOVEX: Social Value Exchange)의 설립과 운영 가능성을 고찰한다. SOVEX는 사회적 가치에 초점을 두고 인터넷을 이용한 상거래와 투자를 할 수 있는 플랫폼이다. SOVEX는 거래비용을 줄이고 참여자들의 이해를 극대화하기 위하여 개인간 직접거래(peer to peer)를 지원한다. SOVEX는 탈중앙화된 블록체인 기반의 플랫폼에 주요 거래기록을 저장하고 암호자산을 이용한 탈중앙금융(DeFi: decentralized finance)을 기반으로 사회적 경제를 지원하기 때문에 사회적디파이(Social DeFi)라고 볼 수 있다. SOVEX에서 발행하는 암호자산은 생태계의 사회적 자본(social capital)의 가치에 연동되게 디자인할 수 있다. 그래서 생태계 발전의 외부효과가 이해관계자 유인구조(incentive structure)에 연관되어 도덕적 해이를 줄이고 블록체인의 투명성을 활용하여 정보의 비대칭성을 완화하도록 노력해야 한다. SOVEX가 성공하기 위해서는 플랫폼 전략이 필요하다. 따라서 플랫폼 운영자로서의 비시장역량이 매우 필요하다. 특히 모호한 관련 법률 해석과 개정, 그리고 이해관계자들과의 소통이 매우 중요하다. SOVEX를 통하여 블록체인을 통한 사회적 경제 활동의 성공을 이루어 낸다면 이는 다시 국내의 블록체인 경제 활동에도 정당성과 자신감을 부여하고, 업계와 규제기관은 이를 바탕으로 선순환 혁신 구조를 만들 것으로 기대한다. In this paper, we outline the possibility of a social value exchange (SOVEX) that can engage in trading that is of social value, and which can stimulate growth in the social economy sector. SOVEX is an envisaged online platform that could engage in trading and investments that are of social value. In order to reduce the transaction costs and enhance the understanding of participants, SOVEX would operate on the basis of a peer to peer (P2P) system. It could also be called a system of social decentralized finance (DeFi) because it would use decentralized blockchain to store transaction data. It is possible to design the cryptoasset that would be issued by SOVEX so that it could reflect the value of social capital in the social economy ecosystem. Then, moral hazard could be minimized through the incentive structure created by the exchange, while information asymmetry would be mitigated through the transparent nature of blockchain technology. This paper concludes by emphasizing the non-market capability of the exchange operator, since new legislation and communi- cation on the part of SOVEX with various stakeholders to ensure productive regulations come about would be essential.

In-Seong Jeon, Joonseon Ahn

이더리움은 대표적인 블록체인 기반 암호화폐 플랫폼으로, 튜링 완전 언어인 솔리디티를 제공하여 다양한 응용을 위한 스마트 컨트랙트를 개발하는데 활용될 수 있다. 본 논문은 콘콜릭 테스팅 기법을 사용하여 스마트 컨트랙트 내의 보안약점을 사전에 찾아내는 분석기를 제시한다. 심볼릭 수행과 테스팅 기법이 합쳐진 콘콜릭 테스팅은 일반적인 정적 분석과 비교하여 오탐이 없는 심볼릭 수행의 장점을 유지하면서, 심볼릭 수행보다 성능 면에서 효율적인 장점이 있다. 또한, 개발된 분석기는 이더리움의 실행 환경인 게스 테스트넷을 사용하여 실제적인 수행상황을 최대한 반영하여 동작한다. 분석기는 정수 넘침과 처리되지 않은 예외 보안약점의 검출을 지원하며, 구현 결과에 대하여 기존 분석기와의 비교를 통해 개발된 분석기의 성능을 분석하였다.

Youn-A Min

Blockchain is a technology that enables trust-based consensus and verification based on a decentralized network. Distributed ID (DID) is based on a decentralized structure, and users have the right to manage their own ID. Recently, interest in self-sovereign identity authentication is increasing. In this paper, as a method for transparent and safe sovereignty management of data, among data pseudonymization techniques for blockchain use, various methods for data encryption processing are examined. The public key technique (homomorphic encryption) has high flexibility and security because different algorithms are applied to the entire sentence for encryption and decryption. As a result, the computational efficiency decreases. The hash function method (MD5) can maintain flexibility and is higher than the security-related two-way encryption method, but there is a threat of collision. Zero-knowledge proof is based on public key encryption based on a mutual proof method, and complex formulas are applied to processes such as personal identification, key distribution, and digital signature. It requires consensus and verification process, so the operation efficiency is lowered to the level of O (logeN) ~ O(N2). In this paper, data encryption processing for blockchain DID, based on zero-knowledge proof, was proposed and a one-way encryption method considering data use range and frequency of use was proposed. Based on the content presented in the thesis, it is possible to process corrected zero-knowledge proof and to process data efficiently.

Hee‐Sung Bae

Firms apply new technology to value creation. In particular, blockchain technology increases transparency and stability of shipping and logistics firms and this is connected with a high level of collaboration with shippers. In this regard, the objective of this study is to verify the interaction effect of information systems of shipping and logistics firms and managers’ support for blockchain technology on cooperation with shippers. To achieve the objective, this study identified variables based on prior research and analyzed the data collected by a survey. The results are as follows. First, information systems as a resource of shipping and logistics firms have a positive effect on cooperation with shippers. To enhance the strategic resource, they increase cooperation with shippers based on learning and logistics process improvement. Therefore, the relationship between the information systems and cooperation with shippers can be explained as a resource-based view. Second, there is the interaction effect of the information systems and managers’ support for blockchain technology on the cooperation and this can be explained as a resource-based view. Information systems are resources of shipping and logistics firms, and managers should encourage and reward staff for using new technology such as blockchains, followed by a high level of cooperation with shippers.

Jeyong Jung

No abstract is available for this record.

Junchao Xia

Bitcoin is an essential component in the cryptocurrency system and plays a vital role in the economic system. This paper uses analytical methods to conduct in-depth research on Bitcoin. I will explain their opinions about its ability to invest and risk diversification, and then we try to verify some conclusions of the MPT model. First, my research shows that based on the modern portfolio theory, the risks of bitcoin could be diversified with some trading assets on the actual market. Second, two essential risks of Bitcoin are the legality and the cyber risk. On the one hand, the research in this article provides a theoretical speech on Bitcoin. On the other hand, it provides theoretical suggestions for the application and development of Bitcoin.

Jinhee Lee, Minjae Kim, Junbeom Hur

No abstract is available for this record.

Byeongtae Ahn

No abstract is available for this record.

우청원, 이정우, 손수아

The demand for research data sharing and utilization increases. As digital technology develops, research data production and accumulation speed increases, and as convergence research and joint research increase worldwide, demand for sharing and utilization of research data increases. Although there is a research data platform, it is not well shared and utilized. Attempts to solve existing problems increase by incorporating blockchain into research data platforms. Blockchain has been attracting attention as a key technology of the fourth industrial revolution, and the introduction of blockchain to ensure data transparency and integrity in untacted services, which have recently been drawing attention due to Covid-19. The purpose of this study is to identify the areas where blockchain can contribute to sharing and utilizing research data, and to present a plan to build a blockchain-based research data platform. We propose five methods for building blockchain-based research data platforms. First, operators set the purpose and scope of the demand-based research data platform. Existing research data platforms did not reflect different demands by the research field. 1) Demand discovery, 2) demand clarification and typification, and 3) selection of target research field are necessary for determining Blockchain-based research data platform purpose and scope. Incentive structures must be in place to clearly distinguish the roles of the public from the private sector in the research data platform and to allow the private sector to participate in the public research data platform. Second, considering the characteristics of blockchain, application areas should be selected first and the operating system should be prepared. There are issues related to sharing and utilizing research data that are difficult to solve with blockchain, such as difficulty in collecting research data and lack of standardized research data. The blockchain implementation area should be selected based on 1) the possibility of research data collection, 2) degree of standardization, 3) capacity, and production speed. Blockchain specialized data curation that can manage research data quality is needed. Third, the possibility of implementing blockchain technology should be considered. For sharing and utilizing research data, specific blockchain technologies or services should be identified. It can be used while protecting personal information through DID and zero-knowledge proof. Cloud-based distributed storage technology enables storing and transmitting large amounts of research data. Comparison of hash values can fundamentally prevent the falsification of research data. Smart contracts can reduce sharing costs and support an incentive system. Fourth, social acceptability should be expanded by improving perceived usefulness and perceived ease of use. The social acceptability of blockchain-based research data platforms is low. It is necessary to develop services that are differentiated from existing platforms and continue to develop technologies until the number of users reaches critical mass. UX/UI development is needed to increase usability. Lastly, it is necessary to come up with measures to support the development, distribution, and management of blockchain services. It is difficult for small and medium-sized companies to cover the cost of building blockchain services. Public blockchain infrastructure support services are needed so that companies or institutions can develop, distribute, and manage blockchain services. For example, China Blockchain Service Network (BSN) supports local Internet networks and cloud services so that companies or institutions can develop standardized blockchain services.

Changhyun Kim, KwangSup Shin

Due to the great advances in e-Marketplace and changes in type of items purchased from the online market, it has been dramatically increased the demand of the storage and transportation under the special conditions such as restricted temperature. Especially, the cold chain needs the way to transparently measure and monitor the entire network in realtime because it has a very complicated structure and requires totally different criteria at the every different steps and items. In this research, it has been presented the performance evaluation metrics to make contract using service level agreement (SLA), the way to apply the smart contract based on blockchain, the structure of blocks, service platform and application in order to build cold chain which can prevent the risk factors by measuring and sharing information in realtime using block chain technology. In addition, we have proposed the way to store the measured performance and reputation of each player in the block using smart contract based on SLA. With the presented framework, all players including service providers as well as users can secure the information for making the rational decisions. When the service platform is actually built and operated, it seems possible to secure the information in transparently and realtime. Also, it is possible to prevent the risk factors or prepare the preemptive plans to react on them.

Choong‐koo Chang

In nuclear power plants, plant management systems are not only very important for operation and maintenance of the facilities, but also play a very important role in analyzing and reporting the events to the authorities when a failure or accident occurs in the facility. In addition, it is also important to ensure that event records are managed transparently so as not to cause any attempt to cover up events. Therefore, this paper proposes a tamper free plant operation system by applying blockchain technology to the integrated plant management system of Korea hydro and nuclear power (KHNP). As a result, this paper will contribute to improving public acceptance by eliminating distrust in safe operation of nuclear power plants.

Seong-Kyu Kim, Jun‐Ho Huh

This paper seeks to use artificial intelligence blockchain algorithms to ensure safe verification of medical institution PHR data and accurate verification of medical data as existing vulnerabilities. Artificial intelligence has recently spread and has led to research on many technologies thanks to the Fourth Industrial Revolution. This is a very important factor in healthcare as well as the healthcare industry’s position. Likewise, blockchain is very safe to apply because it encrypts and verifies these medical data in case they are hacked or leaked. These technologies are considered very important. This study raises the problems of these artificial intelligence blockchains and recognizes blockchain, artificial intelligence, neural networks, healthcare, etc.; these problems clearly exist, so systems like EHR are not being used. In the future, ensuring privacy will be made easier when these EHRs are activated and data transmission and data verification between hospitals are completed. To overcome these shortcomings, we define an information security blockchain artificial intelligence framework and verify blockchain systems for accurate extraction, storage, and verification of data. In addition, various verification and performance evaluation indicators are set to obtain the TPS of medical data and for the implementation of standardization work in the future. This paper seeks to maximize the confidentiality of blockchain and the sensitivity and availability of artificial intelligence.