论文标题
基于区块链物联网的设备识别
Device Identification in Blockchain-Based Internet of Things
论文作者
论文摘要
近年来,区块链技术受到了极大的关注。区块链用户是由可更改的公钥(PK)知道的,该公共密钥(PK)引入了匿名级别,但是,研究表明,匿名交易可以链接到用户脱名单。但是,大多数有关用户去匿名化的研究都集中在货币应用上,但是,区块链在物联网等非货币应用程序中都受到了广泛的关注。在本文中,我们研究了匿名化对基于IoT的区块链的影响。我们使用智能家居设备的数据填充了一个区块链,然后应用机器学习算法,以将交易分类为特定设备,从而又冒着用户隐私的风险。定义了两种类型的攻击模型:(i)知情攻击:攻击者知道安装在智能家居中的设备的类型,以及(ii)盲目攻击:攻击者没有此信息。我们表明,机器学习算法可以成功地以90%的准确性对交易进行分类。为了增强用户的匿名性,我们介绍了多种混淆方法,其中包括将多个数据包组合到交易中,合并多个设备的分类帐并延迟交易。实施结果表明,这些混淆方法将攻击成功率显着降低到20%至30%,从而增强了用户隐私。
In recent years blockchain technology has received tremendous attention. Blockchain users are known by a changeable Public Key (PK) that introduces a level of anonymity, however, studies have shown that anonymized transactions can be linked to deanonymize the users. Most of the existing studies on user de-anonymization focus on monetary applications, however, blockchain has received extensive attention in non-monetary applications like IoT. In this paper we study the impact of de-anonymization on IoT-based blockchain. We populate a blockchain with data of smart home devices and then apply machine learning algorithms in an attempt to classify transactions to a particular device that in turn risks the privacy of the users. Two types of attack models are defined: (i) informed attacks: where attackers know the type of devices installed in a smart home, and (ii) blind attacks: where attackers do not have this information. We show that machine learning algorithms can successfully classify the transactions with 90% accuracy. To enhance the anonymity of the users, we introduce multiple obfuscation methods which include combining multiple packets into a transaction, merging ledgers of multiple devices, and delaying transactions. The implementation results show that these obfuscation methods significantly reduce the attack success rates to 20% to 30% and thus enhance user privacy.