Research Progress on Blockchain System Security Technology
Blockchain is a new distributed computing paradigm that integrates cryptography,consensus mechanism,distributed network and smart contract technologies with security and trust characteristics.It has been widely used in many fields such as society,production and life,and has a great impact on people's lives.However,with the vigorous development of blockchain technology and applications,various security problems have seriously hindered the application and promotion of blockchain.Different from traditional information systems,blockchain has distributed,decentralized,high value and other characteristics,but also brings the characteristics of a wide range of security protection and many risk links,which brings new challenges to the application of security technology in the blockchain scenario.Because the blockchain technology and framework are still evolving,researchers'core cognition and key feature understanding of the security connotation of blockchain have not been unified,and there are great differences.A consistent blockchain security framework and system has not yet been formed.At present,it is urgent to sort out the development status of the security technology of the blockchain system and provide reference for the research and breakthrough of the key security issues faced by the blockchain system.Based on the technical framework of the blockchain system and the security requirements of the blockchain,this paper constructs the technical framework of the blockchain security.Under this framework,the research status of key technologies of blockchain security is systematically reviewed from three aspects:blockchain cryptographic support technology,blockchain platform security technology,and blockchain risk assessment and security supervision,including the main security mechanisms involved in the blockchain business process and blockchain system technology framework.Blockchain cryptographic support technology is mainly to provide cryptographic tech-nology services and call interfaces for blockchain system components,blockchain system users,and blockchain application services.Blockchain cryptographic support technology is the cornerstone of blockchain system security,which mainly solves the security function components in the operation process of the blockchain system and provides confidentiality,integrity,privacy,authentication,and non-repudiation protection for the relevant functional components of the security management operation.It includes the cryptographic algorithm,cryptographic protocol,and cryptographic infrastructure.In addition,in view of the great security threats and challenges brought by quantum computing to cryptography technology,it is also necessary to consider the use of post-quantum cryptography technology in the blockchain to resist quantum attacks.The blockchain platform security technology provides basic blockchain service support for all types of users of blockchain services and is responsible for the actual operation of blockchain system data storage,calculation,transmission,and access.Blockchain platform security technology is the core of blockchain security,which mainly includes five levels of security:storage security,network security,consensus security,application security,and common security services.The first four levels correspond to the data layer,network layer,consensus layer,and application layer of the blockchain basic framework,while common security services run through each layer,and different security services are taken according to different blockchain system types and security needs.Blockchain risk assessment and security supervision are important guarantees for blockchain security.It is mainly responsible for solving the blockchain system itself,blockchain application service security assessment,supervision,governance,norms.Specifically include security risk assessment,security supervision and governance,technical standards and norms.Finally,it summarizes the core problems and devel-opment trends of blockchain system security technology.
万方数据
维普
