Exploring the Attack Surface of Blockchain: A Systematic Overview
arXiv:1904.03487
Abstract
In this paper, we systematically explore the attack surface of the Blockchain technology, with an emphasis on public Blockchains. Towards this goal, we attribute attack viability in the attack surface to 1) the Blockchain cryptographic constructs, 2) the distributed architecture of the systems using Blockchain, and 3) the Blockchain application context. To each of those contributing factors, we outline several attacks, including selfish mining, the 51% attack, Domain Name System (DNS) attacks, distributed denial-of-service (DDoS) attacks, consensus delay (due to selfish behavior or distributed denial-of-service attacks), Blockchain forks, orphaned and stale blocks, block ingestion, wallet thefts, smart contract attacks, and privacy attacks. We also explore the causal relationships between these attacks to demonstrate how various attack vectors are connected to one another. A secondary contribution of this work is outlining effective defense measures taken by the Blockchain technology or proposed by researchers to mitigate the effects of these attacks and patch associated vulnerabilities
References in corpus (22)
- A Survey on Security and Privacy Issues of Bitcoin
- Security Services Using Blockchains: A State of the Art Survey
- Analysis of Bitcoin Pooled Mining Reward Systems
- Analysis of Hashrate-Based Double Spending
- On Subversive Miner Strategies and Block Withholding Attack in Bitcoin Digital Currency
- Consensus in the Age of Blockchains
- Bitcoin Transaction Graph Analysis
- The Impact of Uncle Rewards on Selfish Mining in Ethereum
- A Survey on the Security of Blockchain Systems
- New kids on the block: an analysis of modern blockchains
- Merging supply chain and blockchain technologies
- ZeroBlock: Timestamp-Free Prevention of Block-Withholding Attack in Bitcoin
- Anonymity Properties of the Bitcoin P2P Network
- End-to-End Analysis of In-Browser Cryptojacking
- LinBFT: Linear-Communication Byzantine Fault Tolerance for Public Blockchains
- An Analysis of Attacks on Blockchain Consensus
- Pricing ASICs for Cryptocurrency Mining
- Domain Name System Security and Privacy: Old Problems and New Challenges
- On the Preliminary Investigation of Selfish Mining Strategy with Multiple Selfish Miners
- Optimizing Governed Blockchains for Financial Process Authentications
- A Memo on the Proof-of-Stake Mechanism
- Towards Blockchain-Driven, Secure and Transparent Audit Logs
Cited by in corpus (9)
- Blockchain for Future Smart Grid: A Comprehensive Survey
- SoK: Decentralized Exchanges (DEX) with Automated Market Maker (AMM) Protocols
- A Survey on Ethereum Systems Security: Vulnerabilities, Attacks and Defenses
- Automated Test Generation for REST APIs: No Time to Rest Yet
- A Survey of Security Vulnerabilities in Ethereum Smart Contracts
- Statistical Model Checking of Common Attack Scenarios on Blockchain
- CeFi vs. DeFi -- Comparing Centralized to Decentralized Finance
- Towards Blockchain-enabled Searchable Encryption
- Modelling Attacks in Blockchain Systems using Petri Nets