为了顺应当前形势和更好的发展,黑基网已于9月19日正式更名为【安基网】,域名更换为www.safebase.cn,请卸载旧的APP并安装新的APP,给您带来不便,敬请理解!谢谢

黑基Web安全攻防班
安基网 首页 资讯 安全报 查看内容

以太坊网络爆出“日食攻击”

2018-3-6 07:28| 投稿: xiaotiger |来自: 互联网

摘要: 日食攻击是其他节点实施的网络层面攻击,其攻击手段是,囤积和霸占受害者的点对点连接时隙(slot),将该节点保留在一个隔离的网络中。这种类型的攻击旨在阻止最新的区块链信息进入到日食节点,从而隔离节点。文章来 ...

日食攻击是其他节点实施的网络层面攻击,其攻击手段是,囤积和霸占受害者的点对点连接时隙(slot),将该节点保留在一个隔离的网络中。这种类型的攻击旨在阻止最新的区块链信息进入到日食节点,从而隔离节点。文章来源:云头条(ID:YunTouTiao)

以太坊网络的维护人员近日发布了其网络底层代码库的更新版,以修复本周发表的一篇研究论文中描述的漏洞。

这篇研究论文由波士顿大学和匹兹堡大学的研究人员共同撰写,描述了一个名为“日食攻击”(eclipse attack)的安全漏洞。

这种类型的攻击旨在阻止最新的区块链信息进入到日食节点,从而隔离节点。比特币网络也很容易受到日食攻击(https://eprint.iacr.org/2015/263.pdf)。

两个坏的节点就足以对以太坊发动日食攻击

现在研究人员发现,以太坊也很容易受到日食攻击。以太坊是节点组成的网络,它是以太币这种加密货币及众多智能合约的基础,而智能合约支持其他许多数字货币和首次代币发行(ICO)。

但是,虽然对比特币网络上的节点实施日食攻击需要成千上万个恶意节点才能搞垮一个受害者的节点,但攻击者只需要两个恶意的以太坊节点就能隔离和影响另一个节点。

日食攻击能搞什么破坏?

一次得逞的日食攻击让不法分子得以“征用受害者的挖掘能力,并用它来攻击区块链的一致性算法”或用于“重复支付和私自挖矿”。

此外,研究人员解释道,日食攻击可以诱骗受害者查看不正确的以太网交易细节,诱骗卖家在交易其实还没有完成的情况下将产品发布给攻击者。

最后但并非最不重要的一点是,日食攻击还可以攻击以太坊合约,方法就是让日食节点无法看清楚区块链,从而延迟节点看清楚智能合约的内部计算可能用到的各个参数,导致不正确的智能合约输出,因而攻击者可以大捞一笔。

针对以太坊节点的补丁

撰写该论文的研究团队并不是冷不防突然发布研究结果。他们表示,自己与以太坊基金会合作,悄悄给这些问题打上补丁。

研究人员表示,他们建议了诸多对策,开发人员已将它们添加到两周前发布的geth 1.8.0中,这是在以太坊节点上运行的软件。

这些对策无法完全防止日食攻击,而是只是将实施这种攻击所需的恶意节点数量从两个增加到了几千个。

想了解更进一步的细节,请参阅尤瓦尔�6�1马库斯(Yuval Marcus)等研究人员共同撰写的《针对以太坊的点对点网络发动的低资源日食攻击》(http://www.cs.bu.edu/~goldbe/projects/eclipseEth.pdf)。

本文来自猎云网,如若转载,请注明出处:http://www.lieyunwang.com/archives/417033

, groupId: 6528693584261022212, itemId: 6528693584261022212, type: 2, subInfo: { isOriginal: false, source: 猎云网, time: 2018-03-03 20:25:14 }, tagInfo: { tags: [{"name":"日食"},{"name":"数字货币"},{"name":"比特币"},{"name":"软件"},{"name":"Eclipse"}], groupId: 6528693584261022212, itemId: 6528693584261022212, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6528693584261022212, itemId: 6528693584261022212, comments_count: 35, ban_comment: 0 }, mediaInfo: { uid: 3624705480, name: 猎云网, avatar: //p3.pstatp.com/large/6cb0008bbbe5570775e, openUrl: /c/user/3624705480/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/3624705480/","avatar_url":"https://p3.pstatp.com/large/6cb0008bbbe5570775e","media_id":3235353567,"name":"猎云网","user_verified":false},"articles":[{"item_id":"6529470357009596942","url":"/item/6529470357009596942","title":"等到“救命钱”的ofo告诉你,为了融资可以多没底线"},{"item_id":"6529466541950370317","url":"/item/6529466541950370317","title":"北大硕士诈骗韭菜1000万后跑路?币圈诈骗防不胜防"},{"item_id":"6529463890546262532","url":"/item/6529463890546262532","title":"量子链创始人帅初谈区块链12个趋势:未来99%的token会归零"},{"item_id":"6529438157056770574","url":"/item/6529438157056770574","title":"用户超一亿,天眼查正式从商业调查工具升级为商业安全工具"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":90,"media_avatar_url":"//p9.pstatp.com/large/39b90002ed81f50bba6f","is_feed_ad":false,"is_diversion_page":false,"title":"关于区块链,了解这十点就够了!","single_mode":true,"gallary_image_count":5,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6517794023166444036/","source":"锌财经","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":12,"image_url":"//p3.pstatp.com/list/190x124/5e8100039e1af77e6d9f","group_id":"6517794023166444036","is_related":true,"media_url":"/c/user/59722363136/"},{"comments_count":2,"media_avatar_url":"//p10.pstatp.com/large/658a004e1c7caecbccf9","is_feed_ad":false,"is_diversion_page":false,"title":"比特币交易资金正在有序抽离,你还要进场吗?","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529428993156841998/","source":"大鲸","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/6c2e00020179ca4a139a","group_id":"6529428993156841998","is_related":true,"media_url":"/c/user/93338105341/"},{"comments_count":20,"media_avatar_url":"//p2.pstatp.com/large/65920000dc1ee1d9a3a0","is_feed_ad":false,"is_diversion_page":false,"title":"深度解析EOS,币圈明星项目是不是值得拥有","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6514628865111884295/","source":"币纪","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":14,"image_url":"//p3.pstatp.com/list/190x124/5b4f0001dbd2b076577a","group_id":"6514628865111884295","is_related":true,"media_url":"/c/user/79516826583/"},{"comments_count":0,"media_avatar_url":"//p5a.pstatp.com/large/5408001ae5221f6ef943","is_feed_ad":false,"is_diversion_page":false,"title":"币圈重磅,比特币11600美元,BATJ招聘区块链人才月薪高达100k","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529373845160198669/","source":"币圈重磅内参君","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/6c2c000256aa5dcf69d9","group_id":"6529373845160198669","is_related":true,"media_url":"/c/user/15226814571/"},{"comments_count":0,"media_avatar_url":"//p10.pstatp.com/large/5693000099179881dfdb","is_feed_ad":false,"is_diversion_page":false,"title":"【比特酒吧|Btc98】以太坊的扩展性问题现将考虑其他平台","single_mode":true,"gallary_image_count":2,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529386705336664583/","source":"数字区块链","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/6c3000012ccf262153b5","group_id":"6529386705336664583","is_related":true,"media_url":"/c/user/55433126271/"},{"comments_count":1,"media_avatar_url":"//p9.pstatp.com/large/39fb00014ceccf67ea84","is_feed_ad":false,"is_diversion_page":false,"title":"区块链理性的尽头才是信仰!","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529247879154893319/","source":"区块未来","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/66c60005aac0c21cfa76","group_id":"6529247879154893319","is_related":true,"media_url":"/c/user/68796605675/"},{"comments_count":39,"media_avatar_url":"//p1.pstatp.com/large/4b0100026274e1b075d9","is_feed_ad":false,"is_diversion_page":false,"title":"十分钟学会Redis,就这么简单","single_mode":true,"gallary_image_count":81,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6507370633981067780/","source":"我是一只燃烧的火鸟","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/56780003fae790f8bd22","group_id":"6507370633981067780","is_related":true,"media_url":"/c/user/5544662271/"},{"comments_count":7,"media_avatar_url":"//p1.pstatp.com/large/3f260004118ffd05aade","is_feed_ad":false,"is_diversion_page":false,"title":"互联网上赚钱,日入1W块,只是在开窍的一瞬间,捅破了只是一张纸","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6497081512033255949/","source":"王东东讲","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4af300054bf56f233414","group_id":"6497081512033255949","is_related":true,"media_url":"/c/user/69377231574/"},{"media_avatar_url":"//p2.pstatp.com/large/3721/575971115","is_feed_ad":false,"is_diversion_page":false,"title":"octoin,2018最具投资价值数字货币,octoincn.net中国站","single_mode":false,"gallary_image_count":0,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6510909791886377479/","source":"人民之声","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":1,"comments_count":24,"group_id":"6510909791886377479","is_related":true,"media_url":"/c/user/4396911384/"},{"comments_count":17,"media_avatar_url":"//p3.pstatp.com/large/18a300117a45280944b0","is_feed_ad":false,"is_diversion_page":false,"title":"揭秘物联网第一币——IOTA币,即将成为下一个比特币?","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6511903182250050055/","source":"36氪创新实验室","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/593b0005f5f1f129264d","group_id":"6511903182250050055","is_related":true,"media_url":"/c/user/58307959153/"},{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/382d00114f449270c1e8","is_feed_ad":false,"is_diversion_page":false,"title":"未来最挣钱的三大行业,有一个你肯定猜不到","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529342381077037571/","source":"青年与中年","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/66c80005b12264570e7d","group_id":"6529342381077037571","is_related":true,"media_url":"/c/user/64731973931/"},{"comments_count":5,"media_avatar_url":"//p3.pstatp.com/large/4b03000388381cd3e8fd","is_feed_ad":false,"is_diversion_page":false,"title":"为什么黑客不能直接修改自己的比特币余额?","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516771816487256583/","source":"插话师","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":1,"image_url":"//p3.pstatp.com/list/190x124/5e740002bbc784b1b34c","group_id":"6516771816487256583","is_related":true,"media_url":"/c/user/73453870841/"},{"comments_count":55,"media_avatar_url":"//p3.pstatp.com/large/2498001d63b5255cfb32","is_feed_ad":false,"is_diversion_page":false,"title":"EOS真的会比以太坊ETH更厉害吗","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515164312552604167/","source":"币谈区块链","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b4f0005f32a0289fc70","group_id":"6515164312552604167","is_related":true,"media_url":"/c/user/61705242047/"},{"comments_count":25,"media_avatar_url":"//p9.pstatp.com/large/53fc0006c3951b3095eb","is_feed_ad":false,"is_diversion_page":false,"title":"区块链钱包入门篇:存币有风险,找好钱包是关键","single_mode":true,"gallary_image_count":17,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6514542129795039748/","source":"挖矿族","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":3,"image_url":"//p3.pstatp.com/list/190x124/5b4c000103850663fa1a","group_id":"6514542129795039748","is_related":true,"media_url":"/c/user/84236133404/"},{"comments_count":1,"media_avatar_url":"//p3.pstatp.com/large/6cb0005190c8a72ea29","is_feed_ad":false,"is_diversion_page":false,"title":"在城市精英们追捧区块链的时候,村镇的乡亲们已经被套路了","single_mode":true,"gallary_image_count":5,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529416445078536711/","source":"游研社","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/6c2d0002291e88e0a2ac","group_id":"6529416445078536711","is_related":true,"media_url":"/c/user/6619511247/"},{"comments_count":53,"media_avatar_url":"//p3.pstatp.com/large/41100164c6fc9ad0d32","is_feed_ad":false,"is_diversion_page":false,"title":"2018全球数字货币最具投资价值排行榜","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6521479879077134855/","source":"区块链逍遥子","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":18,"image_url":"//p9.pstatp.com/list/190x124/614c0024456698b93e3a","group_id":"6521479879077134855","is_related":true,"media_url":"/c/user/6557982067/"},{"comments_count":10,"media_avatar_url":"//p2.pstatp.com/large/6367/22059186","is_feed_ad":false,"is_diversion_page":false,"title":"下一个独角兽:区块链+WiFi的WFee如何再造一个上网时代","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515442041256673799/","source":"比特币之家","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":1,"image_url":"//p1.pstatp.com/list/190x124/5e350010cb249782a165","group_id":"6515442041256673799","is_related":true,"media_url":"/c/user/4711676588/"},{"comments_count":0,"media_avatar_url":"//p5a.pstatp.com/large/3f29000491b2d2447616","is_feed_ad":false,"is_diversion_page":false,"title":"HADAX投票上币,一场血淋淋的绞肉游戏","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529334492660761102/","source":"BABI财经","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/66c9000494c2a75b7a6f","group_id":"6529334492660761102","is_related":true,"media_url":"/c/user/6343276126/"},{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/594a00044aecb9207fbc","is_feed_ad":false,"is_diversion_page":false,"title":"浅谈以太未来价值","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529440018757321220/","source":"币修课","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/6c2e000233344e4dff02","group_id":"6529440018757321220","is_related":true,"media_url":"/c/user/52782497132/"},{"comments_count":25,"media_avatar_url":"//p9.pstatp.com/large/39fb00014ceccf67ea84","is_feed_ad":false,"is_diversion_page":false,"title":"ETH还是EOS:V神亲自给你指出以太坊2018年3个关键词","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6527962557716627975/","source":"区块未来","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/66c0000344aec10360d1","group_id":"6527962557716627975","is_related":true,"media_url":"/c/user/68796605675/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/item/6528693584261022212/, abstract: 猎云注:日食攻击是其他节点实施的网络层面攻击,其攻击手段是,囤积和霸占受害者的点对点连接时隙。这种类型的攻击旨在阻止最新的区块链信息进入到日食节点,从而隔离节点。

小编推荐:欲学习电脑技术、系统维护、网络管理、编程开发和安全攻防等高端IT技术,请 点击这里 注册黑基账号,公开课频道价值万元IT培训教程免费学,让您少走弯路、事半功倍,好工作升职加薪!



免责声明:本文由投稿者转载自互联网,版权归原作者所有,文中所述不代表本站观点,若有侵权或转载等不当之处请联系我们处理,让我们一起为维护良好的互联网秩序而努力!联系方式见网站首页右下角。


鲜花

握手

雷人

路过

鸡蛋

相关阅读

发表评论

最新评论

最新

返回顶部