For a long time, security issues have been the core issues to be dealt with in the development of scientific and technological information. With the evolution and complexity of science and technology, the demand for information security issues has become increasingly urgent, and it has also been endowed with new connotations and extensions. In recent years, blockchain technology has been widely used in various industries. As a collection of emerging information technologies, the security problems it faces are also increasing.
Blockchain security is a systematic project that requires comprehensive security system construction around different levels to realize the overall security of the blockchain system in order to ensure the security of blockchain technology application practices. It is enough to see that blockchain security has risen to The height of network security. Since entering 2019, what is the status quo of blockchain security? What are the current problems of blockchain technology? What kind of risks and hidden dangers may arise in the future? What methods should security companies use to effectively ensure the security of the blockchain? This series of questions has become an urgent problem to be solved in the blockchain industry.
On September 16, 2019, at the 2019 Shanghai Blockchain International Week hosted by Wanxiang Blockchain Laboratory, and the 5th Blockchain Global Summit "Blockchain New Economy New Decade and New Beginning", Chengdu Yang Xia, founder & CEO of LianAn Technology, associate professor and postdoctoral fellow at the University of Electronic Science and Technology of China, delivered a keynote speech on "Beosin: One-stop Security Service Platform" .
Relying on continuous exploration in the field of blockchain ecological security, and relying on a large number of actual combat cases and rich experience in security services, Yang Xia and Chengdu Lianan security team launched an internationally leading blockchain security team for the participants at this summit. Ecological security products and services not only have service capabilities covering blockchain infrastructure security, smart contract security, centralized service security, mobile application security, hardware device security, etc. Such typical applications accurately meet the security requirements under the realization of various technologies, and provide suggestions for the security barriers of the blockchain industry.
The serious situation of blockchain security
At the beginning of the speech, Professor Yang Xia first showed the blockchain security status and security risk research data to the summit guests.
According to the statistics of the Chengdu Lianan blockchain security report, from January to August 2019, the losses caused by blockchain security vulnerabilities reached 3.3 billion US dollars, and the cumulative security losses from 2011 to 2019 reached more than 8 billion US dollars.
Among them, from 2017 to 2019, more than 800 million US dollars of digital currency flowed into the dark web trading platform every year in the dark web black market; and in terms of improper use by users, during the period of 2018 to 2019, due to account loss, users being phished, private In terms of money laundering, since 2017, the global money laundering through digital currency has reached 4.5-6.3 billion US dollars every year, and the scale of illegal money laundering in China using digital currency has reached several In terms of cybercrime, there were as many as 538 criminal cases involving digital currency crimes in China from 2014 to 2019, and theft, fraud and cyber extortion caused an annual average global loss of more than US$5 billion; in the recent popular MLM and In terms of funds, since 2018, a total of more than 400 MLM coins have appeared in China. In 2019, the defrauded amount exceeded 6 billion US dollars, an increase of 300% compared with 2018, and the number of victims was more than 480,000.
The cases of illegal digital currency crimes have not only never stopped, but also new methods of crime are emerging in an endless stream, such as hacker attacks, fraud, money laundering, cybercrime, dark web black market transactions, ransomware, and funds running away. The number and the total amount involved in criminal activities are increasing year by year.
Therefore, reliable security system mechanisms, security products, and security services are extremely important to the development and application of the blockchain industry.
Multiple product systems, laying out the blockchain security service ecosystem
In response to the severe security situation of the blockchain, Yang Xia said that Chengdu Lianan has already made a lot of investment and in-depth exploration in the blockchain technology. "One-stop blockchain security service platform" provides the industry's highest quality blockchain security services.
In terms of security products, a complete security system has been established for the blockchain system "security design and development, code automatic security monitoring based on formal verification, and runtime security monitoring and protection", mainly including one-key security based on formal verification. Smart contract security detection platform (Beosin-VaaS), blockchain security situation awareness platform (Beosin-Eagle Eye), firewall (Beosin-Firewall), on-chain asset traceability and tracking system (Beosin-AML), threat intelligence system (Beosin -OSINT), smart contract development tool (Beosin-IDE) six major products:
Beosin Vase：
Beosin-VaaS is the world's first "one-click" smart contract automatic formal verification tool that supports multiple chain platforms such as Ant Blockchain BAAS, BCOS, ETH, EOS, Fabric, ONT, etc., providing smart contracts with "military-grade "Security protection. Precisely locate the location of risk codes and give suggestions for modification. The detection accuracy rate is as high as 97%, leading the world.
Beosin-Eagle Eye：
The Beosin-Eagle Eye situational awareness platform is based on big data and machine learning technology, sorting out a variety of AI threat analysis models for contract risk monitoring on the chain, providing DApp project parties with comprehensive and timely "security + operation" situational awareness, security warnings, Alarm and real-time response capabilities.
Beosin-Firewall：
Beosin-Firewall is a security firewall for blockchain applications, blocking the behavior of malicious users, wool parties and attackers, and providing security protection for smart contracts.
Beosin-OSINT：
The Beosin-OSINT security public opinion system automatically collects and organizes massive blockchain security-related information and intelligence on the Internet through the method of "big data + artificial intelligence", and pushes threat intelligence for users accurately.
Beosin-AML：
Beosin-AML digital currency anti-money laundering system, based on a rich account tag library (20 million+ pieces of data involving fraud, hackers, dark web transactions and other illegal transactions), conducts on-chain tracking, traceability and investigation and analysis of mainstream digital assets , to assist law enforcement and regulatory agencies in the investigation of digital currency money laundering and theft.
Beosin-IDE：
Beosin-IDE is an integrated development environment for smart contracts, supports multiple compiler versions, and supports the deployment and operation of various EOS and BOS nodes such as the main network and test network. The built-in security detection module helps developers improve vulnerability risk awareness.
In terms of security solutions, it includes: security audit, security consulting, threat intelligence, security protection, defense deployment and other services and supporting related security products. In terms of security services, it provides full ecological security audit services, including smart contracts, blockchain underlying chain platforms, wallets, DApps, etc., and provides a full range of security service systems such as fund traceability and anti-money laundering services.
Smart contract and DApp security audit service:
Provide smart contracts and DApp application security audit services covering mainstream public chains such as ETH, EOS, ONT, Fabric, etc., and have audited nearly a thousand smart contracts.
Wallet Security Services:
Detect security issues in accounts, data, components, communication modules, business logic, etc. in the wallet server and app. Help wallet project parties to discover and deal with various security issues in a timely manner. Provide wallet reinforcement services to ensure the security of the wallet system.
Chain platform security services:
Provide white box, gray box, and black box multi-dimensional code security testing for the chain platform to ensure the security of the underlying chain platform. At the same time, it provides chain node security deployment and protection services.
Security Advisory Services:
Provide a full range of security consulting services for blockchain companies, including: security consulting, security planning, architecture design, emergency response, security system construction and other services, and establish a complete security system.
Threat intelligence push service:
Provide users with real-time early warning services for threat events based on user portraits, and accurately push threat intelligence information that is highly relevant to users. Intelligence data is pushed according to international common threat intelligence standards such as STIX, TAXII, and Cybox.
On-chain asset investigation service:
Provide on-chain asset investigation services for law enforcement and regulatory agencies, analyze and track the fund transfer path of the wallet address involved in the case, and provide a complete investigation report.
Security product customization:
Customize relevant security products for enterprise customers, such as VaaS, Hawkeye situational awareness, firewall, threat intelligence system and other products.
At the summit site, the guests listened attentively to Professor Yang Xia's introduction, and showed great interest in the automatic formal verification tool VaaS of smart contracts and the situational awareness platform Hawkeye. At the same time, they also agreed with the comprehensive security service system. Picked up the phone many times to take pictures and record.
Strong technical strength of Chengdu Lianan team
Escort security services for the blockchain industry
Beosin's "one-stop" blockchain security service platform shined at the summit. Many guests asked about Chengdu Lianan's technical team. Professor Yang Xia introduced to everyone confidently:
The core team of Chengdu Lianan has more than 50 people, mainly senior practitioners from well-known security companies such as Alibaba, Huawei, and 360. They have worked in the field of information security for decades, and they are also the first in the world to apply formal verification technology to blockchain The team in the field of chain security has applied for 15 software invention patents and copyrights, forming a unique technical moat in Chengdu chain security. In the technology-driven blockchain industry, patents represent not only authority, but also technical strength The performance of the team and the strong technology of the team will help ensure the security of all parties in the blockchain ecology.
Up to now, the team has provided security audit and defense deployment services for more than 1,000 smart contracts, more than 50 public chains and wallets around the world, and has been highly recognized in the industry:
· It has established cooperative relations with more than 100 domestic and foreign enterprises such as Ant Financial, WeBank, Wanxiang Group, Ontology, Celer, and Bubi.
Exclusive discovery of dozens of security vulnerabilities in the blockchain field.
Selected into the "2018 Blockchain White Paper" by the Ministry of Industry and Information Technology.
· Participate in the writing of multiple national blockchain security standards (or white papers).
· One of the earliest batches selected into the Etherscan smart contract security audit recommendation list.
· The first national "SaaS" application innovation and entrepreneurship competition for small, medium and micro enterprises won the championship.
· "2018 Top 100 Chinese Blockchain Enterprises List", "2018 Most Professional Security Service Agency", "2019 China Blockchain Security Leader", "Best Blockchain Data Security Team".
· Jointly published a blockchain security monograph with CSDN - "Analysis of Blockchain Contract Security Vulnerabilities".
Company Media Matrix
official website
https://www.lianantech.com
GitHub URL
https://github.com/Lianantech/VCA
Facebook URL
https://www.facebook.com/BeosinChengdu/
twitter URL
https://twitter.com/Beosin_com
Telegram Chinese group
https://t.me/LiananTech_cn
Telegram English group
https://t.me/LiananTech_en
https://weibo.com/u/6566884467
CSDN blog
https://blog.csdn.net/CDLianan
Mars
Chengdu Chain Security Technology
Official phone number: 028-83262585
Official email: [email protected]
Official address:
Chengdu Headquarters: Century City South Road, Chengdu
Room 504, Building D7, Tianfu Software Park, No. 599
Beijing Branch: Guangshun North Street, Chaoyang District, Beijing
Room 305, Dream Plus Space, No. 36