In 2008, Satoshi Nakamoto brought the concept of Bitcoin. Today, the commercial network built by the blockchain technology developed from Bitcoin has begun to dawn. As the blockchain technology continues to penetrate into industries and scenarios, it will inevitably trigger an industrial revolution after the Internet.
With the rapid development of blockchain technology, information security technology is becoming more and more important. Without the foundation of information security technology, blockchain technology will also have great risks and uncontrollable. For the blockchain ecology, information security technology It is already an indispensable component.
Various digital currency crimes such as hacking, self-stealing, illegal transactions on the dark web, fraud, and running away have emerged one after another, causing blockchain participants to wander between "accident" and "no accident". It not only affects the experience of participants and the security of digital assets, but also prevents many high-quality talents from entering the industry. To this end, many people with lofty ideals have offered good security strategies. On September 21, 2019, at the "ToolChain Day-Chengdu Station" community meeting hosted by Vechain and co-organized by Chengdu Lianan, Chengdu Lianan Technology Information Security Products was responsible for Owen delivered a keynote speech on "Public Chain Security, Exploring the Way for the Healthy Development of Blockchain". From the perspective of security system, he sorted out the development of blockchain security, smart contracts and public chain security issues, and the current public chain security. What threats are being encountered and what security companies are doing to prevent them.
Blockchain Security: The Urgent Need
At the beginning of the sharing session, Owen introduced to everyone that with the rapid development of blockchain technology in 2019, security incidents are also showing a high incidence, especially when it comes to digital asset transactions, there will often be "one line of code, knocking down an asset".
The risks faced by the blockchain industry not only come from external hacker attacks, but also may be caused by low-quality employees. From the perspective of crime types, they include intrusion attacks, financial fraud, illegal transactions on the dark web, running away, and integer overflow attacks. According to Beosin Chengdu Chain Security statistics, from January to August 2019, the losses caused by blockchain security vulnerabilities reached 3.3 billion US dollars, and the cumulative security losses from 2011 to 2019 reached more than 8 billion US dollars. Blockchain security has become an urgent task.
Vulnerabilities come in various forms, arrows hit the heart
From the perspective of vulnerable points, blockchain security attack incidents can be roughly divided into four types of security incidents: consensus mechanisms, smart contracts, trading platforms, and users themselves. The public chain has always been a key area of hacker attacks. In recent years, DApps on mainstream underlying chain platforms have encountered hundreds of hacker attacks, affecting thousands of DApps, and the project party has suffered losses of hundreds of millions of yuan.
From the perspective of attack methods, there are also various forms, from the "overflow attack" at the beginning of the year to the "contract RAM swallowing" problem, to the "fake EOS attack", "replay attack", and "fake notification attack" in the second half of the year. It is a series of "random number attacks" and "transaction rollback attacks". If hackers are likened to bullets, the bullets will never fail, and the arrows will never leave the bull's-eye, and the attacks will become more frequent.
Owen concluded to the guests present that although the current underlying chain platform has greater throughput, lower transaction costs, and faster processing speed, the security vulnerabilities caused by seemingly low-level errors are much less than before, but due to the Business logic is much more complicated than a simple digital currency smart contract, and hackers can still find opportunities to do evil from business logic and launch attacks.
Public chain security solution architecture:
Strengthen security capabilities and improve personnel quality
From the perspective of the long-term development of the blockchain, hacking incidents may not be a bad thing, enough to attract more attention and thinking from the industry and developers.
Facing the characteristics and defects of blockchain technology, Owen emphasized that we need to think from the perspective of the entire industry chain of the blockchain system, and add security design considerations from the life cycle of the system. Build a blockchain security system from the aspects of physics, data, application systems, encryption, risk control, etc. At the same time, the project party should also pay attention to information security and improve the quality of the participants.
· In terms of the underlying technology of the blockchain, the data layer is mainly improved from the dimensions of data storage and encryption algorithms, and the network layer is improved from the perspective of P2P network security and network verification mechanisms.
· At the business layer of the blockchain system, improve the stability and effectiveness of the code through security audits.
· Look for third-party security companies to improve their own security with their security products and services.
As the leading enterprise in the domestic blockchain security industry, Chengdu Lianan attaches great importance to the ecological security of public chains and blockchains, and has established a "one-stop" blockchain security service platform to promote the Blockchain technology empowers financial technology.
The security service level in the blockchain ecological field has reached the international leading standard, providing customers with comprehensive blockchain security services such as security consulting, security audit, threat intelligence, security protection, etc., has released smart contract development tools, based on formalization Verified "one-click" smart contract security detection platform, situational awareness platform, firewall, on-chain asset traceability and tracking system, threat intelligence system and other security products.
Actively respond to new challenges of blockchain security
It is true that the security of the blockchain is a complex project, and it cannot be solved overnight, but with the continuous development of blockchain technology, Chengdu Lianan will continue to protect the ecological security of the public chain and blockchain .
Company Media Matrix
official website
https://www.lianantech.com
GitHub URL
https://github.com/Lianantech/VCA
Facebook URL
https://www.facebook.com/BeosinChengdu/
twitter URL
https://twitter.com/Beosin_com
Telegram Chinese group
https://t.me/LiananTech_cn
Telegram English group
https://t.me/LiananTech_en
https://weibo.com/u/6566884467
CSDN blog
https://blog.csdn.net/CDLianan
Mars
Chengdu Chain Security Technology
Official phone number: 028-83262585
Official email: [email protected]
Official address:
Chengdu Headquarters: Century City South Road, Chengdu
Room 504, Building D7, Tianfu Software Park, No. 599
Beijing Branch: Guangshun North Street, Chaoyang District, Beijing
Room 305, Dream Plus Space, No. 36