Bijack: Breaking Bitcoin Network with TCP Vulnerabilities
Bijack: Breaking Bitcoin Network with TCP Vulnerabilities
复制标题
DOI：
10.1007/978-3-031-51479-1_16
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Shaoyu Li;Shanghao Shi;Yang Xiao;Chaoyu Zhang;Y. T. Hou;W. Lou
中科院分区：
文献类型：
--
作者：
Shaoyu Li;Shanghao Shi;Yang Xiao;Chaoyu Zhang;Y. T. Hou;W. Lou
最近的研究表明，破坏比特币的点对点网络是扰乱比特币服务的有效方式。虽然已经发现了许多攻击载体，如网络层的BGP劫持和应用层的ECLIPSE攻击，但位于传输层的一个重要攻击载体在很大程度上被忽视了。在本文中，我们研究了比特币系统的TCP漏洞及其后果。我们提出了Bijack，这是一种对比特币网络的非路径TCP劫持攻击，它能够终止比特币连接或向连接中注入恶意数据，只需几个事先要求和有限的知识。我们测量了真实的比特币网络，发现超过1700个(27%)的可达比特币节点容易受到我们的攻击，这些节点的物理位置分布在世界各地。我们在真实环境中对Bijack攻击的效率和影响进行了评估，结果表明Bijack在没有太大努力的情况下成功实现了几次致命的比特币攻击。
Recent studies have shown that compromising Bitcoin’s peer-to-peer network is an effective way to disrupt the Bitcoin service. While many attack vectors have been uncovered such as BGP hijacking in the network layer and eclipse attack in the application layer, one significant attack vector that resides in the transport layer is largely overlooked. In this paper, we investigate the TCP vulnerabilities of the Bitcoin system and their consequences. We present Bijack, an off-path TCP hijacking attack on the Bitcoin network that is able to terminate Bitcoin connections or inject malicious data into the connections with only a few prior requirements and a limited amount of knowledge. This results in the Bitcoin network topology leakage, and the Bitcoin nodes isolation.We measured the real Bitcoin network and discovered that more than 1700 (27%) of the reachable Bitcoin nodes are vulnerable to our attack whose physical locations are spread across the world. We evaluated the efficiency and impacts of the Bijack attack in real-world settings, and the results show that Bijack successfully realizes several fatal Bitcoin attacks without too much effort.