Blockchain security analysis and security protection suggestions for cryptojacking

Abstract

Abstract: At present, many countries around the world attach great importance to blockchain technology and carry out research and application of blockchain actively. With the disclosure of a large number of blockchain vulnerabilities, blockchain security has caused great concern in the industry. The paper carries out the security analysis of blockchain, the security problem of which mainly focuses on blockchain vulnerabilities and the cryptojacking problem using current network maliciously. Besides, concerning to the cryptojacking, the paper introduces and analyzes its concept and attack situation, attack technology and process, detection methods, attack cases and security protection suggestions, etc. Finally, the blockchain application and security recommendations are proposed from the enterprise level.

Key words: blockchain, cryptojacking, blockchain security, security protection

CHENG Yexia, FY Jun, PENG Jin, DU Yuejin. Blockchain security analysis and security protection suggestions for cryptojacking[J]. Information and Communications Technology and Policy, 2019, 45(2): 45-51.

Add to citation manager EndNote|Ris|BibTeX

URL: http://ictp.caict.ac.cn/EN/Y2019/V45/I2/45

References 7

[1]	DARKReading. 7 ways to protect against cryptominingattacks[EB/OL]. (2018-03-22)[2018-12-01]. https://www.darkreading.com/cloud/7-ways-to- protect- against-cryptomining-attacks/d/d-id/1331301?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple&image_number=1.
[2]	CSO. What is cryptojacking? How to prevent, detect, andrecover from it [EB/OL]. (2018- 08- 29) [2018- 12- 01]. https://www.csoonline.com/article/3253572/internet/what- is- cryptojacking-how-to-prevent-detect-and-recover-from-it.html.
[3]	CSO. How to detect and prevent crypto mining malware[EB/OL]. (2018- 04- 04) [2018- 12- 01]. https://www.csoonline.com/article/3267572/encryption/how- to- detect- and- preventcrypto-mining-malware.html.
[4]	FreeBuf. Bondat 蠕虫再度来袭! 控制PC构建挖矿僵尸网络[EB/OL]. (2018- 04- 18) [2018- 12- 01]. https://www.freebuf.com/articles/system/169034.html.
[5]	嘶吼网. 揭秘“加密劫持”的七种防御措施[EB/OL]. (2018-04- 12) [2018- 12- 01]. http://www.4hou.com/info/news/11043.html.
[6]	Solidot 网. 南方周末声称被恶意植入挖矿脚本[EB/OL].(2017-12-17) [2018-12-01]. https://www.solidot.org/story?sid=54885.
[7]	搜狐网. CoffeeMiner:持Wi-Fi 网络接入设备进行“挖矿”的框架[EB/OL]. (2018-01-13)[2018-12-01]. http://www.sohu.com/a/216449081_354899.

[1]	YANG Mingchuan. Big Data and Artificial Intelligence to build the future of digital transformation [J]. Information and Communications Technology and Policy, 2020, 46(4): 1-6.
[2]	SHI Yuxia. Blockchain helps public charity more transparent [J]. Information and Communications Technology and Policy, 2020, 46(4): 77-79.
[3]	LIANG Wei, ZHANG Zheng, FENG Ming, HE Zhiqiang. A new method of trusted data exchange technology and application based on blockchain [J]. Information and Communications Technology and Policy, 2020, 46(4): 91-96.
[4]	WEI Liang, ZHA Xuan. Risk analysis and evaluation of Blockchain infrastructure [J]. Information and Communications Technology and Policy, 2020, 46(2): 10-13.
[5]	FENG Zebing, LU Yue. Analysis on Blockchain technology enhancing the security of UAV swarm system [J]. Information and Communications Technology and Policy, 2020, 46(2): 14-18.
[6]	CHENG Yexia, FU Jun, CHEN Dong, DU Yuejin. Research on threat intelligence sharing and rating technology based on Blockchain [J]. Information and Communications Technology and Policy, 2020, 46(2): 19-25.
[7]	LI Qi, LIU Danni. Research and architecture design of the security protection of Internet of Things based on NB-IoT Network [J]. Information and Communications Technology and Policy, 2020, 46(2): 30-34.
[8]	ZHANG Jian, TANG Hongyu, LIU Wentao. Security vulnerability analysis and protection research of virtualization platform [J]. Information and Communications Technology and Policy, 2020, 46(2): 41-45.
[9]	LI Haihua. The Industrial Internet has achieved remarkable results while accelerating development [J]. Information and Communications Technology and Policy, 2020, 46(10): 6-9.
[10]	DONG Yue, LI Yi, QIN Guoying, LI Shan. Research of data security in Industrial Internet [J]. Information and Communications Technology and Policy, 2020, 46(10): 38-41.
[11]	FAN Yuji, XU Lihang. The use and protection of personal information in public interest [J]. Information and Communications Technology and Policy, 2020, 46(10): 47-54.
[12]	LIU Hongnan, WEI Kai. Consortiumblockchain technology test observation and analysis [J]. Information and Communications Technology and Policy, 2020, 46(1): 35-45.
[13]	ZHANG Rong. Influence of blockchain application in insurance industry [J]. Information and Communications Technology and Policy, 2020, 46(1): 46-51.
[14]	FENG Haoming, CHEN Hang, LIU Yanping. Ablockchain asset trading system based on homomorphic encryption and ring signature [J]. Information and Communications Technology and Policy, 2020, 46(1): 64-68.
[15]	ZENG Xueyun. The development and prospects of financial technology in the securities market and digital payment [J]. Information and Communications Technology and Policy, 2019, 45(7): 6-9.