《区块链安全白皮书》发布
2018年11月30日，梆梆安全研究院发布《区块链安全白皮书》（以下简称“白皮书”），白皮书结合区块链技术以及整个产业的发展历程和趋势，从基础组件和设施、系统核心设计、应用生态等方面详细解读了区块链所面临的安全威胁和安全挑战，分析了区块链安全体系建设需求，并提出区块链安全保障体系建议，针对安全应用的实际场景给出了最佳实践。作为一种跨行业、跨领域、基础性的创新应用模式，区块链已经在金融证券、物联网、医疗等诸多领域掀起一股应用浪潮。随着区块链技术的发展及相关应用的落地，区块链安全问题日益突出，加之相关安全标准的缺失，这些都给区块链技术的安全性带来了巨大挑战。在区块链技术安全范畴中，既有“传统”互联网世界中面临的网络拒绝服务攻击、代码漏洞等攻击威胁，也包含区块链独有的风险点（如智能合约漏洞）。本白皮书主要概括为以下3大威胁和1大安全挑战：1.其中基础组件和设施对应的安全风险包括网络安全问题、密码学安全问题和数据存储安全问题。其中的数据存储安全问题涉及内容安全层面，面临有害信息上链以及资源滥用等风险。2.数据层和共识层作为区块链系统的必要元素，与合约层一起共同构成了区块链系统的核心，其中共识层主要面临的攻击有女巫攻击、51%攻击、长距离攻击、短距离攻击、币龄累计攻击、预计算攻击；合约层已经成为区块链安全的重灾区，从 The DAO 到 BEC 和 SMT 的整数溢出漏洞、再到EOS 缓冲区溢出越界写漏洞，智能合约的安全漏洞频发；数据层具有不可篡改、去中心化生成和确认的特点，这也就造成了区块链数据的难以监管，使之可被利用进行恶意攻击和恶意内容传播。3.区块链的交易网站面临账户泄露、DDoS、Web 注入等攻击，对于规模较大，用户较多的交易所，还会面临用户被攻击者利用仿冒的钓鱼网站骗取认证信息等威胁；移动数字货币钱包App与其他App一样，会遭受破解、内存篡改攻击等。区块链面对的安全挑战主要有钱包安全管理、智能合约安全、隐私安全三方面，其中钱包安全管理面临的挑战是如何保证私钥的运行安全以及在保证资产安全的前提下进行私钥备份；区块链安全面临的另一大挑战是如何保证智能合约的安全；隐私保护技术面临的一大挑战是如何在保证用户隐私情况下同时兼顾系统性能。区块链技术快速地发展，有着广泛的应用场景，但与此同时各类安全事件频繁发生，给区块链在新模式下的应用管理敲响了警钟。区块链是数据库、密码学、网络技术等多种组合集成的新兴技术，技术开发难度更高，更容易出现安全问题，因此安全防护在考虑传统技术的安全时，更需要注重新兴技术的安全，从不同的维度进行安全体系建设，设置不同的安全基线，以及统一的安全管控。白皮书全文如下：http://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306cf4a.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306cf4b.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d04c.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d04d.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d04e.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d14f.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d150.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d151.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d252.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d253.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d254.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d355.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d356.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d357.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d458.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d459.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d45a.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d55b.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d55c.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d55d.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d65e.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d65f.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d660.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d661.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d762.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d763.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d700.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d701.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d802.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d803.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d804.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d905.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d906.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306d907.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306da08.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306da09.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306da0a.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306db0b.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306db0c.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306db0d.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dc0e.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dc0f.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dc10.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dc11.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dd12.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dd13.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306dd14.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306de15.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306de16.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306de17.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306de18.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306df19.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306df1a.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306df1b.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e01c.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e01d.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e01e.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e01f.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e120.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e121.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e122.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e223.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e224.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e225.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e226.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e327.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e328.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e329.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e32a.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e42b.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e42c.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e42d.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e52e.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e52f.jpghttp://www.cbdio.com/image/attachement/jpg/site2/20181206/bc85563582ca1d7306e530.jpg来源：梆梆安全
页:
[1]