Blockchain Papers

Wenjuan Li, Jiao Tan, Yu Wang

No abstract is available for this record.

Clement Guo Xiang Pang

In recent years, Internet-of-Things (IoT) has been rising in trend, converting all traditional appliance into smart connected appliance. The amount of IoT devices present not only in household, but also offices and in public are increasingly fast. As for software, blockchain technology is also on the rise, with the innovative decentralized cryptocurrency that derives from such technology, has a value in the market. Users could earn cryptocurrency by using their hardware to perform cryptocurrency mining but to stay in the competition against people with better resources requires more money. In view of the increasing number of IoT devices being used, it could tempt users to utilize the IoT devices that are not owned by them to perform the mining on behalf, this is known as cryptojacking.
\nIn this report, we experiment on the feasibility of implementing cryptocurrency mining software on an embedded system in IoT devices and to form a botnet to perform cryptocurrency mining. We also respond to the feasibility with countermeasures by measuring the overhead imposed on the devices such as resource utilization on CPU and memory usage as well as the network traffic.

Meizhu Chen, Xiangyan Tang, Jieren Cheng, Naixue Xiong · 6 authors

No abstract is available for this record.

Le Su, Dinil Mon Divakaran, Sze Ling Yeo, Jiqiang Lu · 5 authors

With the rapid deployment of IoT devices, there is an increasing concern on the security and privacy of the devices. We are now witnessing newer and higher intensity attacks that exploit IoT devices. Although security-by-design is important and necessary, the effectiveness and sustainability of the buildin security defense may still be questionable. This has created new opportunities for third-party security service providers to enter the market. In this work, we leverage the distributed ledger technology (DLT) to propose a solution for distributing IoT security functions. We design the system architecture and describe the different types of operations to be executed. Our system also allows for reputation scoring that further adds credibility to the security functions distributed in the network.

Kelly Click, Amritraj Singh, Reza M. Parizi, Gautam Srivastava · 5 authors

No abstract is available for this record.

Mohammad Tayyab, Bahari Belaton, Mohammed Anbar

Although the launch of Internet Protocol version six (IPv6) addressed the issue of IPv4's address depletion, but also mandated the use of Internet Control Message Protocol version six (ICMPv6) messages in newly introduced features such as the Neighbor Discovery Protocol (NDP). This has exacerbated existing network attacks including ICMPv6-based Denial of Service (DoS) attacks and its variant form Distributed Denial of Service (DDoS) attack. Intrusion Detection Systems (IDS) aimed at tackling security issues raised by ICMPv6-based DoS and DDoS attacks have been reviewed by researchers and a general classification of existing IDSs was proposed as anomaly-based and signature-based. However, it is incredibly hard to see the overall picture of IDSs based on Machine Learning (ML) techniques with such a classification, as there is a lack of a more detailed view of the ML approach, classifiers, feature selection techniques, datasets, and different evaluation metrics. Nevertheless, recent developments in this relatively new field have not been covered such as ML-based IDSs using flow-based traffic representation. Therefore, this article specifically reviews and classifies IDSs based on ML techniques to detect ICMPv6-based DoS and DDoS attacks as single and hybrid classifiers. In addition, blockchain applicability in Collaborative IDS (CIDS) architecture based on the ensemble framework has been proposed as a solution to one of the open challenges for ICMPv6-based DoS and DDoS attacks detection problem. Moreover, this review also provides a classification of ICMPv6 vulnerabilities to DoS and DDoS attacks which would provide a reference resource for future researchers in this domain. To the best of the author's knowledge, this is the first review paper specifically focusing on IDSs based on ML techniques in this domain, as well as blockchain applicability as a possible research direction has been proposed to attract researcher's focus on building ensemble learning-based IDS models.

Yinan Pei, Kazumasa Oida

The Onion Router (Tor) is one of the major network systems that provide anonymous communication and censorship circumvention. Tor enables its users to surf the Internet, chat, and send messages anonymously; however, cyber attackers also exploit the system for circumventing criminal activity detection. Recently, various approaches that prevent or mitigate abuse of Tor have been proposed in the literature. This paper, which presents one of the approaches, addresses an IP traceback problem. In our model, onion routers that voluntarily participate in attacker tracing detect attack packets (packets carrying an attacker's code or data) recorded in the log files by sharing necessary information with an attacked server over an Ethereum blockchain network. The detection algorithm in this paper uses the statistics of packet travel and relay times and outputs attack-packet candidates. The proposed method attaches a reliability degree to each candidate, which is based on the upper bounds of its Type I and II error rates. A smart contract running on the blockchain network ranks the detection results from onion routers according to the reliability degrees.

Zhong Yu, Dong Juan Xue, Jiulun Fan, Chang Guo

The inseparable internet requirements and the endless stream of cyber-attacks have led to strong demand for trusted IP addresses. However, the existing collaborative DNS security schemes have the defects of low credibility and imperfect incentive mechanism. Enlightened by the Consortium blockchain technology, we propose a novel DNS Cache Resources Trusted Sharing Model, which can improve the credibility of DNS resolution results by establishing a complete chain of trust. Firstly, the consortium blockchain is introduced as the carrier of the peer-to-peer network to reduce the impact of illegal access and complicity tampering on the DNS cache credibility; Secondly, the evaluation index of the node credibility in the DNS cache sharing model is proposed, and the trust-based incentive mechanism is designed to reduce the impact of free-riding behavior and on the trusted performance of the system. The two indicators of node abnormal behavior similarity and roundtrip time between nodes are used to comprehensively evaluate the degree of recommendation of the node and serve as the basis for dynamic scheduling; Finally, we use the stochastic distributed decentralized storage mechanism to solve the problem of low efficiency in the consortium blockchain. The simulation results show that the model has certain advantages in ensuring the credibility of domain name resolution results, and maintains the ideal efficiency while ensuring trust.

Guorui Yu, Guangliang Yang, Tongxin Li, Xinhui Han · 7 authors

Abstract Web-based cryptocurrency mining attacks, also known as cryptojacking, become increasingly popular. A large number of diverse platforms (e.g., Windows, Linux, Android, and iOS) and devices (e.g., PC, smartphones, tablets, and even critical infrastructures) are widely impacted. Although a variety of detection approaches were recently proposed, it is challenging to apply these approaches to attack prevention directly. Instead, in this paper, we present a novel generic and accurate defense solution, called “MinerGate”, against cryptojacking attacks. To achieve the goal, MinerGate is designed as an extension of network gateways or proxies to protect all devices behind it. When attacks are identified, MinerGate can enforce security rules on victim devices, such as stopping the execution of related JavaScript code and alerting victims. Compared to prior approaches, MinerGate does not require any modification of browsers or apps to collect the runtime features. Instead, MinerGate focuses on the semantics of mining payloads (usually written in WebAssembly/asm.js), and semantic-based features. In our evaluation, we first verify the correctness of MinerGate by testing MinerGate in a real environment. Then, we check MinerGate’s performance and confirm MinerGate introduces relatively low overhead. Last, we verify the accuracy of MinerGate. For this purpose, we collect the largest WebAssembly/asm.js related code with ground truth to build our experiment dataset. By comparing prior approaches and MinerGate on the dataset, we find MinerGate achieves better accuracy and coverage (i.e., 99% accuracy and 98% recall). Our dataset will be available online, which should be helpful for more solid understanding of cryptojacking attacks.

Vikram Kanth, Ashley McaAbee, Murali Tummala, John McEachen

As the threat of cyber attack grows ever larger, new approaches to security are required. While there are several different types of intrusion detection systems (IDS), collaborative IDS (CIDS) offers particular promise in identifying distributed, coordinated attacks that might otherwise elude detection. Even for CIDS, there are unresolved issues associated with trusting participants and aggregating data. Blockchain technology appears capable of addressing those issues if practical implementation strategies can be developed. To that end, we implement an Ethereum blockchain-based CIDS leveraging pluggable authentication modules. Our system is specifically crafted to detect doorknob rattling attacks by immutably recording login activity in a blockchain-protected ledger.

Zhijie Zhang, Lejun Zhang, Waqas Rasheed, Zilong Jin · 7 authors

No abstract is available for this record.

Jing Tian, Gaopeng Gou, Chang Liu, Yige Chen · 6 authors

No abstract is available for this record.

Zhangrong Huang, Ji Huang, Tianning Zang

No abstract is available for this record.

Moon Kyoung Choi, Chan Yeob Yeun, Poong Hyun Seong

Nuclear Power Plants (NPPs) are physically isolated from external networks and have different operational environments than conventional information technology (IT) systems. Accordingly, NPPs were regarded as safe from external cyber-attacks. However, it was later determined that isolated networks are not safe from cyber-attacks. Malicious data injection attacks on Programmable Logic Controllers (PLCs) deployed in the safety system of NPPs are critical to nuclear facilities, as they were in the Stuxnet attack. It is necessary to monitor the integrity of PLC data and protect the PLCs from cyber threats such as modification of deployed logic or setpoints. To address this problem, this paper proposes a novel system for monitoring data integrity of PLCs using blockchain technologies. Considering the NPP environment, we developed a private blockchain system to monitor the data integrity of PLCs. The new concept that is Proof of Monitoring (PoM) for data integrity of PLCs was proposed to overcome the limitation for applying the private blockchain to the cybersecurity of NPPs. Additionally, we developed an integrity monitoring system for the Reactor Protection System (RPS)-a safety system in NPPs-using the developed blockchain. It can detect cyber-attacks (such as false code injection attacks on PLCs) and monitor which PLC integrity has been compromised in real-time. A validation experiment using a false data injection attack on PLCs was performed on the developed system, and the results confirmed that the developed system successfully monitored the modification of data in the PLCs.

Dmitrij Lagutin, Priit Anton, Francesco Bellesini, Tommaso Bragatto · 18 authors

The Internet of Things (IoT) suffer from lack of interoperability as data, devices, and whole sub-systems are locked in 'silos' because of technical, but mostly business reasons. Many new applications would be enabled and existing ones could be implemented in a more cost-efficient way, if the 'silos' could be bridged in a secure and privacy preserving manner. The SOFIE approach provides an effective way of accomplishing this by using interledger technologies that leverage the distributed trust enabled by distributed ledgers. The federated approach of SOFIE facilitates the creation of cross-organisational applications. This chapter presents the SOFIE approach and details the benefits it provides in four real-world pilots.

Haiying Ma, Guorong Sun

No abstract is available for this record.

Fatemeh Rezaei, Shahrzad Naseri, Ittay Eyal, Amir Houmansadr

No abstract is available for this record.

Dimitri Van Landuyt, Laurens Sion, Emiel Vandeloo, Wouter Joosen

No abstract is available for this record.

Adam Pavlidis, Marinos Dimolianis, Kostas Giotis, Loukas Anagnostou · 9 authors

Abstract Network providers either attempt to handle massive distributed denial-of-service attacks themselves or redirect traffic to third-party scrubbing centers. If providers adopt the first option, it is sensible to counter such attacks in their infancy via provider collaborations deploying distributed security mechanisms across multiple domains in an attack path. This motivated our work presented in this paper. Specifically, we investigate the establishment of trusted federations among adjacent and disjoint network domains, that is, autonomous systems (ASes) that collectively mitigate malicious traffic. Our approach is based on Distributed Ledger Technologies for signaling, coordination, and orchestration of a collaborative mitigation schema via appropriate blockchain-based smart contracts. Reputation scores are used to rank ASes based on their mitigation track record. The allocation of defense resources across multiple collaborators is modeled as a combinatorial optimization problem considering reputation scores and network flow weights. Malicious flows are mitigated using programmable network data paths within the eXpress Data Path (XDP) framework; this enables operators with enhanced packet processing throughput and advanced filtering flexibility. Our schema was implemented in a proof-of-concept prototype and tested under realistic network conditions.

Anichur Rahman, Md. Jahidul Islam, Ziaur Rahman, Md. Mahfuz Reza · 8 authors

Condominium network refers to intra-organization networks, where smart buildings or apartments are connected and share resources over the network. Secured communication platform or channel has been highlighted as a key requirement for a reliable condominium which can be ensured by the utilization of the advanced techniques and platforms like Software-Defined Network (SDN), Network Function Virtualization (NFV) and Blockchain (BC). These technologies provide a robust, and secured platform to meet all kinds of challenges, such as safety, confidentiality, flexibility, efficiency, and availability. This work suggests a distributed, scalable IoT-SDN with Blockchain-based NFV framework for a smart condominium (DistB-Condo) that can act as an efficient secured platform for a small community. Moreover, the Blockchain-based IoT-SDN with NFV framework provides the combined benefits of leading technologies. It also presents an optimized Cluster Head Selection (CHS) algorithm for selecting a Cluster Head (CH) among the clusters that efficiently saves energy. Besides, a decentralized and secured Blockchain approach has been introduced that allows more prominent security and privacy to the desired condominium network. Our proposed approach has also the ability to detect attacks in an IoT environment. Eventually, this article evaluates the performance of the proposed architecture using different parameters (e.g., throughput, packet arrival rate, and response time). The proposed approach outperforms the existing OF-Based SDN. DistB-Condo has better throughput on average, and the bandwidth (Mbps) much higher than the OF-Based SDN approach in the presence of attacks. Also, the proposed model has an average response time of 5% less than the core model.

Federico Franzoni, Iván Abellán Álvarez, Vanesa Daza

Over the past twenty years, the number of devices connected to the Internet grew exponentially. Botnets benefited from this rise to increase their size and the magnitude of their attacks. However, they still have a weak point in their Command & Control (C&C) system, which is often based on centralized services or require a complex infrastructure to keep operating without being taken down by authorities. The recent spread of blockchain technologies may give botnets a powerful tool to make them very hard to disrupt. Recent research showed how it is possible to embed C&C messages in Bitcoin transactions, making them nearly impossible to block. Nevertheless, transactions have a cost and allow very limited amounts of data to be transmitted. Because of that, only messages from the botmaster to the bots are sent via Bitcoin, while bots are assumed to communicate through external channels. Furthermore, for the same reason, Bitcoin-based messages are sent in clear. In this paper we show how, using Bitcoin Testnet, it is possible to overcome these limitations and implement a cost-free, bidirectional, and encrypted C&C channel between the botmaster and the bots. We propose a communication protocol and analyze its viability in real life. Our results show that this approach would enable a botmaster to build a robust and hard-to-disrupt C&C system at virtually no cost, thus representing a realistic threat for which countermeasures should be devised.

R.Suvitha N.Shanthi

E-voting is the process of conducting the voting process through online. The voters can cast their votes from different locations and these votes are collected and recorded electronically. Therefore, there is a need for a system to provide control and security to the whole procedure. Blockchain, a distributed ledger technology can be integrated to provide a decentralized system. Blockchain uses distributed ledger technology (DLT) to avoid forged voting option & non-repudiation and one time login of the user is also ensured. By integrating the above techniques, a secure user authentication for e-voting supported blockchain in p2p network is projected. This system would increase the safety by avoiding the forgery of votes. Similarly, the blockchain are often integrated to a spread of voting situations and a few alternative applications.

Anita A. Lahane, Junaid Patel, Talif Pathan, Prathmesh Potdar

Election could be a important event during a trendy democracy however massive sections of society round the world don’t trust their election system that is major concern for the democracy. Even the world’s largest democracies like Republic of India, us, and Japan still suffer from a blemished legal system. Vote rigging, hacking of the EVM (Electronic vote machine), election manipulation, and booth capturing square measure the key problems within the current electoral system. during this system, we tend to square measure work the problems|the problems within the election vote systems and attempting to propose the E-voting model which might resolve these issues. The system can highlight a number of the popular blockchain frameworks that provide blockchain as a service and associated electronic E-voting system that is predicated on blockchain that addresses all limitations severally, it additionally preserve participant’s obscurity whereas still being hospitable public examination. Building Associate in Nursing electronic electoral system that satisfies the legal necessities of legislators has been a challenge for an extended time. Distributed ledger technologies is Associate in Nursing exciting technological advancement within the info technology world. Blockchain technologies supply Associate in Nursing infinite vary of applications cashing in on sharing economies. Blockchain could be a unquiet technology of current era and guarantees to enhance the resilience of e-voting systems. this technique presents a shot to leverage edges of blockchain like cryptological foundations and transparency to attain an efficient theme for e-voting. The projected theme conforms to the elemental necessities for e-voting schemes and achieves end-to-end verifiability. The system presents in-depth analysis of the theme that with success demonstrates its effectiveness to attain Associate in Nursing end-to-end verifiable e-voting theme.

Garima Jain, Nisha Rani

No abstract is available for this record.