Search

With the continuous and rapid development of cloud-based data services, the total volume of Internet data is experiencing explosive growth. Nevertheless, contemporary centralized cloud storage-oriented data service providers encounter significant challenges in fully satisfying the requirements for user data security, fine-grained access control, and consistently high-performance standards. In this paper, we propose and implement an efficient peer-to-peer data storage and sharing system to address the challenges faced by service providers. Our solution utilizes the modified EOSIO blockchain and the InterPlanetary File System (IPFS) distributed storage as the underlying data storage framework. We employ hybrid encryption to ensure the secrecy of the shared data of the users and also to facilitate multiple uses and persistent storage of the shared data of the users. Moreover, with the expansion of the blockchain component, we provide a flexible transaction information audit solution that helps to trace the source of malicious behavior and reduces the cost of using blockchain information. In system analysis and experimental evaluation, compared to traditional blockchain storage, FIBPRO has theoretically achieved a 98.76% reduction in on-chain storage consumption. In practical concurrency testing, it achieved a comprehensive performance of approximately 1300 TPS (transactions per second), with an average upload efficiency of about 2.31MB/s and a download rate of about 5.29MB/s. These results demonstrate the system's availability and scalability. [ABSTRACT FROM AUTHOR]

As the most successful cryptocurrency, bitcoin has become the primary target of attackers. The security risks existing in bitcoin network (P2P networks) may pose serious threats to itself. It has been proved that network attackers of the autonomous system level could isolate a specific set of bitcoin nodes using prefix hijacking attacks; since this attack achieves bitcoin partition by deleting all data packets of the victim node, it is easy to be discovered by the victim node, and cannot maintain a long-term connection (the partition will disappear after canceling the BGP hijacking) (Apostolaki M et al. (2017)). This paper proposes a new attack scheme—eclipse attack method based on BGP hijacking (BHE). The attack can occupy the network connection of the victim node, and only need to delete part of the TCP handshaking packets of the victim node during the attack, and it makes the attack more hidden and can occupy the network connection of the victim node for a long time. The innovation of the BHE attack is that it can control the peering decision of the victim node by controlling the victim node's internal peer database (new table and tried table) and preventing the victim node from establishing a good connection. It enables the attacker to occupy all network connections of the victim node and become its natural network middleman. We verify the feasibility of the BHE attack through experimental evaluation and demonstrate that an attacker who can launch BGP hijacking may occupy all connections of the victim node within 20 minutes (ignoring the time of traffic diversion). To reduce the attack's impact, the paper provides some countermeasures that can use in practice according to the basic characteristics of the attack. [ABSTRACT FROM AUTHOR]

Public chains represented by Bitcoin and Ethereum do not require users to use their real names, and transaction data are open to the whole network. Analysed based on this, researchers have achieved the deanonymization of blockchain transactions to a certain extent. Based on the existing blockchain transaction privacy protection scheme, the true link relationship between the transaction sender and receiver is hidden, which brings difficulties to regulation. In this paper, we propose a cryptocurrency mixing service RBSmix, which allows users to reestablish their financial privacy in Bitcoin and related cryptocurrencies. RBSmix, through blind signature to prevent attackers from linking input and output addresses, by the threshold secret sharing algorithm, encryption technology, and a regulation team, combined with the idea of voting, tracks the source of funds for illegal addresses. Experiments show that the scheme scales to large numbers of users and can provide users with better privacy protection. [ABSTRACT FROM AUTHOR]