Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications
Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications
复制标题
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Liya Su;Xinyue Shen;Xiangyu Du;Xiaojing Liao;Xiaofeng Wang;Luyi Xing;Baoxu Liu
中科院分区：
文献类型：
--
作者：
Liya Su;Xinyue Shen;Xiangyu Du;Xiaojing Liao;Xiaofeng Wang;Luyi Xing;Baoxu Liu
以太坊去中心化应用（Dapps）的普及也带来了新的安全风险：据报道，这些Dapps受到了网络犯罪分子的各种攻击，以获取利润。据我们所知，到目前为止，对这种新型网络犯罪的了解还很少，包括其范围、犯罪足迹和攻击操作意图，更不用说对这些攻击事件进行大规模自动调查的努力了。在本文中，我们对现实世界的Dapp攻击实例进行了第一次测量研究，以恢复关键威胁情报（例如，杀伤链和攻击模式）。利用这种威胁情报，我们提出了第一个大规模攻击事件自动调查的DE-FIER技术。在104个以太坊链上dapp的230万笔交易中运行DEFIER，我们能够在85个目标dapp上识别出476,342笔利用交易，这些交易与75个0天受害者dapp和17K个以前未知的攻击者eoa有关。据我们所知，这是迄今为止报告的最大的以太坊链上Dapp攻击事件数据集。
The popularity of Ethereum decentralized applications (Dapps) also brings in new security risks: it has been re-ported that these Dapps have been under various kinds of attacks from cybercriminals to gain profit. To the best of our knowledge, little has been done so far to understand this new cybercrime, in terms of its scope, criminal footprints and attack operational intents, not to mention any efforts to investigate these attack incidents automatically on a large scale. In this paper, we performed the first measurement study on real-world Dapp attack instances to recover critical threat intelligence (e.g., kill chain and attack patterns). Utilizing such threat intelligence, we proposed the first technique DE-FIER to automatically investigate attack incidents on a large scale. Running DEFIER on 2.3 million transactions from 104 Ethereum on-chain Dapps, we were able to identify 476,342 exploit transactions on 85 target Dapps, which related to 75 0-day victim Dapps and 17K previously-unknown attacker EOAs. To the best of our knowledge, it is the largest Ethereum on-chain Dapp attack incidents dataset ever reported.