Security Threats from Bitcoin Wallet Smartphone Applications: Vulnerabilities, Attacks, and Countermeasures
Security Threats from Bitcoin Wallet Smartphone Applications: Vulnerabilities, Attacks, and Countermeasures
复制标题
比特币钱包智能手机应用程序的安全威胁：漏洞、攻击和对策
DOI：
10.1145/3422337.3447832
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Li, Chi-Yu
中科院分区：
文献类型：
--
作者：
Hu, Yiwen;Wang, Sihan;Tu, Guan-Hua;Xiao, Li;Xie, Tian;Lei, Xinyu;Li, Chi-Yu
如今，比特币是最受欢迎的加密货币。随着智能手机和高速移动互联网的激增，越来越多的用户开始在智能手机上访问他们的比特币钱包。用户可以在智能手机上下载和安装各种比特币钱包应用程序(如Coinbase、Lumo、Bit币Wallet)，随时随地访问他们的比特币钱包。然而，目前还不清楚这些比特币钱包智能手机应用程序是否安全，或者它们是否是对手攻击这些应用程序用户的新攻击面。在这项工作中，我们探索了10款最受欢迎的比特币钱包智能手机应用的安全性，发现了三个安全漏洞。通过利用它们，攻击者可以发起包括比特币去匿名化、反思和放大垃圾邮件以及钱包欺诈攻击在内的各种攻击。为了解决已发现的安全漏洞，我们开发了一个手机端比特币安全整流器来保护比特币钱包智能手机应用程序用户的安全。开发的整流器不需要对当前的钱包应用进行任何修改，并且符合比特币标准。
Nowadays, Bitcoin is the most popular cryptocurrency. With the proliferation of smartphones and the high-speed mobile Internet, more and more users have started accessing their Bitcoin wallets on their smartphones. Users can download and install a variety of Bitcoin wallet applications (e.g., Coinbase, Luno, Bitcoin Wallet) on their smartphones and access their Bitcoin wallets anytime and anywhere. However, it is still unknown whether these Bitcoin wallet smartphone applications are secure or if they are new attack surfaces for adversaries to attack these application users. In this work, we explored the insecurity of the 10 most popular Bitcoin wallet smartphone applications and discovered three security vulnerabilities. By exploiting them, adversaries can launch various attacks including Bitcoin deanonymization, reflection and amplification spamming, and wallet fraud attacks. To address the identified security vulnerabilities, we developed a phone-side Bitcoin Security Rectifier to secure Bitcoin wallet smartphone application users. The developed rectifier does not require any modifications to current wallet applications and is compliant with Bitcoin standards.
运营 Wi-Fi 通话服务的黑暗面
DOI：
--
发表时间：
2018
期刊：
IEEE Conference on Communications and Network Security
影响因子：
--
作者：
Tian Xie;Guan;Chi;Chunyi Peng;Jiawei Li;Mi Zhang
通讯作者：
Mi Zhang
DOI：
10.1007/978-3-662-53357-4_3
发表时间：
2016
期刊：
--
影响因子：
--
作者：
Mathieu Turuani;T. Voegtlin;M. Rusinowitch
通讯作者：
M. Rusinowitch
识别比特币用户密钥泄露
DOI：
--
发表时间：
2018
期刊：
International Symposium on Recent Advances in Intrusion Detection
影响因子：
--
作者：
Michael Brengel;C. Rossow
通讯作者：
C. Rossow