Defining and Preventing Asymmetric Mempool DoS in Ethereum with saferAd

Wanning Ding,Yibo Wang,Yuzhe Tang

2024-05-06

Abstract:This paper presents secure mempool designs under asymmetric DoS attacks. We formulate safety definitions under two abstract DoSes, namely eviction- and locking-based attacks.

Cryptography and Security

What problem does this paper attempt to address?

Asymmetric Mempool DoS Security: Formal Definitions and Provable Secure Designs

Wanning Ding,Yibo Wang,Yuzhe Tang

2024-07-25

Abstract:The mempool plays a crucial role in blockchain systems as a buffer zone for pending transactions before they are executed and included in a block. However, existing works primarily focus on mitigating defenses against already identified real-world attacks. This paper introduces secure blockchain-mempool designs capable of defending against any form of asymmetric eviction DoS attacks. We establish formal security definitions for mempools under the eviction-based attack vector. Our proposed secure transaction admission algorithm, named \textsc{saferAd-CP}, ensures eviction-security by providing a provable lower bound on the cost of executing eviction DoS attacks. Through evaluation with real transaction trace replays, \textsc{saferAd-CP} demonstrates negligible latency and significantly high lower bounds against any eviction attack, highlighting its effectiveness and robustness in securing blockchain mempools.

Cryptography and Security
Understanding Ethereum Mempool Security under Asymmetric DoS by Symbolized Stateful Fuzzing

Yibo Wang,Yuzhe Tang,Kai Li,Wanning Ding,Zhihua Yang

2024-06-21

Abstract:In blockchains, mempool controls transaction flow before consensus, denial of whose service hurts the health and security of blockchain networks. This paper presents MPFUZZ, the first mempool fuzzer to find asymmetric DoS bugs by symbolically exploring mempool state space and optimistically estimating the promisingness an intermediate state is in reaching bug oracles. Compared to the baseline blockchain fuzzers, MPFUZZ achieves a > 100x speedup in finding known DETER exploits. Running MPFUZZ on six major Ethereum clients leads to the discovering of new mempool vulnerabilities, which exhibit a wide variety of sophisticated patterns including stealthy mempool eviction and mempool locking. Rule-based mitigation schemes are proposed against newly discovered vulnerabilities.

Cryptography and Security
Survive and Thrive: A Stochastic Game for DDoS Attacks in Bitcoin Mining Pools

Shuangke Wu,Yanjiao Chen,Minghui Li,Xiangyang Luo,Zhe Liu,Lan Liu

DOI: https://doi.org/10.1109/tnet.2020.2973410

2020-01-01

Abstract:Mining pools have become dominant in today's bitcoin mining network, where miners can pool their powers together for reduced variance of block mining and steadier stream of potential income. Along with the continuous evolvement of mining pools are the increasingly intense competitions among them. Recent empirical studies have shown that the distributed denial-of-service (DDoS) attack is one of the most common ways for competing mining pools to sabotage the rivals and earn illegitimate rewards. Existing efforts have been made on using static game models to analyze the interactions between mining pools, and derive the Nash Equilibrium and optimal attacking strategies in a one-time static context. To better understand the impact of such DDoS attacks, in this paper, we take a starkly different approach, and for the first time address the dynamics in mining pool attacks. Specifically, we start by formulating the interactive competition among mining pools as a general-sum stochastic game. Then we propose an efficient Nash learning algorithm to obtain the near optimal attacking strategy that maximizes the expected long-term utility. Our theoretical analysis and extensive experimental results both show that the proposed strategy outperforms the baseline myopic learning algorithm, which only aims at maximizing the revenue in the current time stage. These findings, together with our proposed stochastic game model and learning algorithm, are expected to provide more practical guidelines for mining pools to survive and thrive in the highly-competitive bitcoin ecosystem.
Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Yifan Jia,Jingyi Wang,Christopher M. Poskitt,Sudipta Chattopadhyay,Jun Sun,Yuqi Chen

DOI: https://doi.org/10.1016/j.ijcip.2021.100452

IF: 3.683

2021-01-01

International Journal of Critical Infrastructure Protection

Abstract:The threats faced by cyber-physical systems (CPSs) in critical infrastructure have motivated research into a multitude of attack detection mechanisms, including anomaly detectors based on neural network models. The effectiveness of anomaly detectors can be assessed by subjecting them to test suites of attacks, but less consideration has been given to adversarial attackers that craft noise specifically designed to deceive them. While successfully applied in domains such as images and audio, adversarial attacks are much harder to implement in CPSs due to the presence of other built-in defence mechanisms such as rule checkers (or invariant checkers). In this work, we present an adversarial attack that simultaneously evades the anomaly detectors and rule checkers of a CPS. Inspired by existing gradient-based approaches, our adversarial attack crafts noise over the sensor and actuator values, then uses a genetic algorithm to optimise the latter, ensuring that the neural network and the rule checking system are both deceived. We implemented our approach for two real-world critical infrastructure testbeds, successfully reducing the classification accuracy of their detectors by over 50% on average, while simultaneously avoiding detection by rule checkers. Finally, we explore whether these attacks can be mitigated by training the detectors on adversarial samples.
Mitigate DoS and DDoS Attack in Ad Hoc Networks

Jin Liu,Hefei Ling,Fuhao Zou,Wei Qi Yan,Zhengding Lu

DOI: https://doi.org/10.4018/jdcf.2010100103

2010-01-01

International Journal of Digital Crime and Forensics

Abstract:This paper proposes a technique to defeat Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks in Ad Hoc Networks. The technique is divided into two main parts and with game theory and cryptographic puzzles. Introduced first is a new client puzzle to prevent DoS attacks in such networks. The second part presents a multiplayer game that takes place between the nodes of an ad hoc network and based on fundamental principles of game theory. By combining computational problems with puzzles, improvement occurs in the efficiency and latency of the communicating nodes and resistance in DoS and DDoS attacks. Experimental results show the effectiveness of the approach for devices with limited resources and for environments like ad hoc networks where nodes must exchange information quickly.
Distributed Shielded Execution for Transmissible Cyber Threats Analysis

Yuxia Cheng,Qing Wu,Wenzhi Chen,Bei Wang

DOI: https://doi.org/10.1016/j.jpdc.2018.07.014

IF: 4.542

2018-01-01

Journal of Parallel and Distributed Computing

Abstract:Transmissible cyber threats have become one of the most serious security issues in cyberspace. Many techniques have been proposed to model, simulate and identify threats’ sources and their propagation in large-scale distributed networks. Most techniques are based on the analysis of real networks dataset that contains sensitive information. Traditional in-memory analysis of these dataset often causes data leakage due to system vulnerabilities. If the dataset itself is compromised by adversaries, this threat cost would be even higher than the threat being analysed. In this paper, we propose a new distributed shielded execution framework (Disef) for cyber threats analysis. The Disef framework enables efficient distributed analysis of network dataset while achieves security guarantees of data confidentiality and integrity. In-memory dataset is protected by using a new encrypted key–value format and could be efficiently transferred into Intel SGX enabled enclaves for shielded execution. Our experimental results showed that the proposed framework supports secure in-memory analysis of large network dataset and has comparable performance with systems that have no confidentiality and integrity guarantees.
Byzantine Attacks Exploiting Penalties in Ethereum PoS

Ulysse Pavloff,Yackolley Amoussou-Genou,Sara Tucci-Piergiovanni

2024-06-07

Abstract:In May 2023, the Ethereum blockchain experienced its first inactivity leak, a mechanism designed to reinstate chain finalization amid persistent network disruptions. This mechanism aims to reduce the voting power of validators who are unreachable within the network, reallocating this power to active validators. This paper investigates the implications of the inactivity leak on safety within the Ethereum blockchain. Our theoretical analysis reveals scenarios where actions by Byzantine validators expedite the finalization of two conflicting branches, and instances where Byzantine validators reach a voting power exceeding the critical safety threshold of one-third. Additionally, we revisit the probabilistic bouncing attack, illustrating how the inactivity leak can result in a probabilistic breach of safety, potentially allowing Byzantine validators to exceed the one-third safety threshold. Our findings uncover how penalizing inactive nodes can compromise blockchain properties, particularly in the presence of Byzantine validators capable of coordinating actions.

Cryptography and Security,Distributed, Parallel, and Cluster Computing
An Adaptive Gas Cost Mechanism for Ethereum to Defend Against Under-Priced DoS Attacks.

Ting Chen,Xiaoqi Li,Ying Wang,Jiachi Chen,Zihao Li,Xiapu Luo,Man Ho Au,Xiaosong Zhang

DOI: https://doi.org/10.1007/978-3-319-72359-4_1

2017-01-01

Abstract:The gas mechanism in Ethereum charges the execution of every operation to ensure that smart contracts running in EVM (Ethereum Virtual Machine) will be eventually terminated. Failing to properly set the gas costs of EVM operations allows attackers to launch DoS attacks on Ethereum. Although Ethereum recently adjusted the gas costs of EVM operations to defend against known DoS attacks, it remains unknown whether the new setting is proper and how to configure it to defend against unknown DoS attacks. In this paper, we make the first step to address this challenging issue by first proposing an emulation-based framework to automatically measure the resource consumptions of EVM operations. The results reveal that Ethereum's new setting is still not proper. Moreover, we obtain an insight that there may always exist exploitable under-priced operations if the cost is fixed. Hence, we propose a novel gas cost mechanism, which dynamically adjusts the costs of EVM operations according to the number of executions, to thwart DoS attacks. This method punishes the operations that are executed much more frequently than before and lead to high gas costs. To make our solution flexible and secure and avoid frequent update of Ethereum client, we design a special smart contract that collaborates with the updated EVM for dynamic parameter adjustment. Experimental results demonstrate that our method can effectively thwart both known and unknown DoS attacks with flexible parameter settings. Moreover, our method only introduces negligible additional gas consumption for benign users.
Defending Against Denial of Service Attacks

Yin Qin,Xue Zhi

DOI: https://doi.org/10.3969/j.issn.1009-8054.2006.12.055

2006-01-01

Abstract:DDoS attacks in the Internet have produced new challenges to network and system security. Many mecha- nisms have been designed to address this problem in recent years. This paper surveys these techniques and analyses them.
An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem.

Shunfan Zhou,Zhemin Yang,Jie Xiang,Yinzhi Cao,Min Yang,Yuan Zhang

2020-01-01

Abstract:Smart contract security has drawn much attention due to many severe incidents with huge ether and token losses. As a consequence, researchers have proposed to detect smart contract vulnerabilities via code analysis. However, code analysis only shows what contracts can be attacked, but not what have been attacked, and more importantly, what attacks have been prevented in the real world. In this paper, we present the first comprehensive measurement study to analyze real-world attacks and defenses adopted in the wild based on the transaction logs produced by uninstrumented Ethereum Virtual Machine (EVM). Specifically, our study decouples two important factors of an adversarial transaction--i.e., (i) an adversarial action exploiting the vulnerable contract and (ii) an adversarial consequence like ether or token transfers resulted from the action--for the analysis of attacks and defenses. The results of our study reveal a huge volume of attacks beyond what have been studied in the literature, e.g., those targeting new vulnerability types like airdrop hunting and those targeting zero-day variants of known vulnerabilities. Besides successful attacks, our study also shows attempted attacks that are prevented due to the deployments of defenses. As the nature of cyber-security, those defenses have also been evaded, mainly due to incomplete defense deployments. To summarize it, we believe that this is an ever-evolving game between adversaries obtaining illegal profits and defenders shielding their own contracts.
Delayed Packing Attack and Countermeasure Against Transaction Information Based Applications

Jiliang Li,Yuheng Wang,Yuan Su,Zhou Su,Yuyi Wang,Weizhi Meng,Yinghua Shen

DOI: https://doi.org/10.1016/j.ins.2023.119742

IF: 8.1

2023-01-01

Information Sciences

Abstract:Due to the nature of decentralization, blockchain-based applications are gradually adopted by more and more systems in different fields to replace centralized third-party agencies. Many applications, like blockchain oracles, rely on on-chain transactions to deliver information that is used to make final decisions. There have been many methods proposed to guarantee the correctness of the final results, and most of them are in terms of the management of information providers and the application's design. However, to our notice, only a few works have discussed the security threat caused by rational mining pools that are responsible for packing transactions and information into blocks and uploading them to the blockchain. Therefore in this paper, we propose a possible delayed packing attack carried out by rational mining pools against these transaction information based applications. Game theory analysis is conducted to obtain the Nash equilibrium strategy, and the price of anarchy is calculated to depict the success probability of such an attack under different circumstances. In addition, we design a countermeasure protocol based on cryptography tools to defend against the delayed packing attack. Finally, we carry out a thorough security analysis as well as corresponding experiments to prove the security and feasibility of our countermeasure.
A Cost-effective Shuffling Method against DDoS Attacks using Moving Target Defense

Yuyang Zhou,Guang Cheng,Shanqing Jiang,Ying Hu,Yuyu Zhao,Zihan Chen

DOI: https://doi.org/10.1145/3338468.3356824

2019-09-18

Abstract:Moving Target Defense (MTD) has emerged as a newcomer into the asymmetric field of attack and defense, and shuffling-based MTD has been regarded as one of the most effective ways to mitigate DDoS attacks. However, previous work does not acknowledge that frequent shuffles would significantly intensify the overhead. MTD requires a quantitative measure to compare the cost and effectiveness of available adaptations and explore the best trade-off between them. In this paper, therefore, we propose a new cost-effective shuffling method against DDoS attacks using MTD. By exploiting Multi-Objective Markov Decision Processes to model the interaction between the attacker and the defender, and designing a cost-effective shuffling algorithm, we study the best trade-off between the effectiveness and cost of shuffling in a given shuffling scenario. Finally, simulation and experimentation on an experimental software defined network (SDN) indicate that our approach imposes an acceptable shuffling overload and is effective in mitigating DDoS attacks.

Cryptography and Security
Adaptive Double-Spending Attacks on PoW-Based Blockchains

Zibin Zheng,Huawei Huang,Song Guo,Jian Zheng

DOI: https://doi.org/10.1109/TDSC.2023.3268668

2024-05-01

IEEE Transactions on Dependable and Secure Computing

Abstract:Previous state-of-the-art studies have proposed various analytical models to understand the double-spending attacks (DSA) occurred in Proof-of-Work (PoW) based Blockchains. Although many insights behind the double-spending attacks have been disclosed, we still believe that advanced versions of DSA can be developed to create new threats for the PoW-based blockchains such as the Bitcoin blockchain. In this paper, we present two new types of double-spending attacks in the context of the PoW-based blockchain and discuss the insights behind them. By considering more practical network parameters, such as the number of confirmation blocks, the hashpower of the double-spending attacker, the amount of coins in the target transaction, and the network-status parameter, we first analyze the success probability of the conventional double-spending attack, named Naive DSA. Based on Naive DSA, we create two new adaptive DSA, i.e., the Adaptive DSA and the Reinforcement Adaptive DSA (RA-DSA). In our analytical models, a double-spending attack is converted into a Markov Decision Process. We then exploit the Stochastic Dynamic Programming (SDP) approach to obtain the optimal attack strategies under Adaptive DSA and RA-DSA. Numerical simulation results demonstrate the correlations between each critical network parameter and the expected attacker's reward. Through the proposed analytical models, we aim to alert the PoW-based blockchain ecosystem that the threat of double-spending attacks is still at a dangerous level. For example, our findings show that the attacker can launch a successful attack with a small hashpower proportion much lower than 51% under RA-DSA.

Computer Science
Dual-domain Defenses for Byzantine-resilient Decentralized Resource Allocation

Runhua Wang,Qing Ling,Zhi Tian

2023-10-09

Abstract:This paper investigates the problem of decentralized resource allocation in the presence of Byzantine attacks. Such attacks occur when an unknown number of malicious agents send random or carefully crafted messages to their neighbors, aiming to prevent the honest agents from reaching the optimal resource allocation strategy. We characterize these malicious behaviors with the classical Byzantine attacks model, and propose a class of Byzantine-resilient decentralized resource allocation algorithms augmented with dual-domain defenses. The honest agents receive messages containing the (possibly malicious) dual variables from their neighbors at each iteration, and filter these messages with robust aggregation rules. Theoretically, we prove that the proposed algorithms can converge to neighborhoods of the optimal resource allocation strategy, given that the robust aggregation rules are properly designed. Numerical experiments are conducted to corroborate the theoretical results.

Optimization and Control
Defend Against Denial of Service Attack with VMM

Siqin Zhao,Kang Chen,Weimin Zheng

DOI: https://doi.org/10.1109/gcc.2009.14

2009-01-01

Abstract:When a denial-of-service happens, the malicious programs often occupies too much computing resources. A defending schema proposed in this paper can use virtual machine monitor to detect such attack by adapting threshold of available resources. If the defending system assures existence of attack, it will live duplicates the operating system together with the tagged applications to reserved isolated environment. The isolated environment is another virtual machine that is similar to the original one. At the meantime, execution of the operating system and tagged application keeps continuously both in new environment and original one. Through this way, the defending system can protect the running of the operating system and tagged applications from denial-of-service attack.
Defending P2Ps from Overlay Flooding-based DDoS.

Yunhao Liu,Xiaomei Liu,Chen Wang,Li Xiao

DOI: https://doi.org/10.1109/icpp.2007.31

2007-01-01

Abstract:A flooding-based search mechanism is often used in unstructured P2P systems. Although a flooding-based search mechanism is simple and easy to implement, it is vulnerable to overlay distributed denial-of-service (DDoS) attacks. Most previous security techniques protect networks from network-layer DDoS attacks, but cannot be applied to overlay DDoS attacks. Overlay flooding-based DDoS attacks can be more damaging in that a small number of messages are inherently propagated to consume a large amount of bandwidth and computation resources. We propose a distributed and scalable method, DD-POLICE, to detect malicious nodes in order to defend P2P systems from overlay flooding-based DDoS attacks. We show the effectiveness of DD-POLICE by comprehensive simulation studies. We believe that deploying DD-POLICE will make P2P systems more scalable and robust.
Resisting Network Ddos Attacks By Packet Asymmetry Path Marking

Guang Jin,Jiangang Yang,Wei Wei,Yabo Dong

DOI: https://doi.org/10.1109/CHINACOM.2007.4498433

2007-01-01

Abstract:A novel packet marking scheme is proposed to defend against network or bandwidth DDoS attacks, especially where malicious packets do not target the victim directly. A recent study shows that packet-level symmetry exists in legitimate Internet traffic while malicious flooding traffic often exhibits packet asymmetry. Our scheme utilizes the packet asymmetry to differentiate malicious and legitimate traffic. When a packet to a destination host is transmitted from a router, a packet asymmetry score, the ratio of transmitted to received packets of the destination host over the last interval, is calculated and recorded into the packet's header additively. Malicious packets should carry higher scores because of the absence of reverse packets. When packets with packet asymmetry scores arrive at a downstream router, where some packets are dropped because of congestion, the router should drop packets with higher scores preferentially. Simulation results show the scheme is effective to defend against DDoS attacks targeting network resources.
Defending Against Adversarial Attacks by Energy Storage Facility

Jiawei Li,Jianxiao Wang,Lin Chen,Yang Yu

DOI: https://doi.org/10.1109/pesgm48719.2022.9917139

2022-01-01

Abstract:Adversarial attacks on data-driven algorithms applied in power system will be a new type of threat on grid security. Literature has demonstrated the adversarial attack on deep-neural network can significantly misleading the load forecast of a power system. However, it is unclear how the new type of attack impact on the operation of grid system. In this research, we point out that adversarial attacks on the algorithms are distinct from traditional attacks. Rather than causing system collapse, the adversarial attacks camouflaged as normal forecast bias and thus is able to continuously cause the economic loss in a system. We manifest that the adversarial algorithm attack induces a significant cost-increase risk which will be exacerbated by the growing penetration of intermittent renewable energy. In Texas, a 5% adversarial attack can increase the total generation cost by 17% in a quarter, which account for around $\$ 2\times 10^{7}$ . When wind-energy penetration increases to over 40%, the 5% adversarial attack will inflate the generation cost by 23%. Our research discovers a novel approach of defending against the adversarial attack: investing on energy-storage system. All current literature focuses on developing algorithm to defending against adversarial attack. We are the first research revealing the capability of using facility in physical system to defending against the adversarial algorithm attack in a system of Internet of Thing, such as smart grid system.
Three Attacks on Proof-of-Stake Ethereum

Caspar Schwarz-Schilling,Joachim Neu,Barnabé Monnot,Aditya Asgaonkar,Ertem Nusret Tas,David Tse

DOI: https://doi.org/10.48550/arXiv.2110.10086

2021-10-20

Abstract:Recently, two attacks were presented against Proof-of-Stake (PoS) Ethereum: one where short-range reorganizations of the underlying consensus chain are used to increase individual validators' profits and delay consensus decisions, and one where adversarial network delay is leveraged to stall consensus decisions indefinitely. We provide refined variants of these attacks, considerably relaxing the requirements on adversarial stake and network timing, and thus rendering the attacks more severe. Combining techniques from both refined attacks, we obtain a third attack which allows an adversary with vanishingly small fraction of stake and no control over network message propagation (assuming instead probabilistic message propagation) to cause even long-range consensus chain reorganizations. Honest-but-rational or ideologically motivated validators could use this attack to increase their profits or stall the protocol, threatening incentive alignment and security of PoS Ethereum. The attack can also lead to destabilization of consensus from congestion in vote processing.

Cryptography and Security
Mempool Privacy: An Economic Perspective

Antoine Rondelet,Quintus Kilbourn

2023-10-25

Abstract:A growing body of literature is aimed at designing private mempools in blockchains. The ultimate goal of this research is addressing several phenomena broadly classed under MEV with sandwich attacks as the canonical example. The literature has primarily viewed MEV as a problem arising from oversights in distributed systems and cryptographic protocol design and has attempted to address it with the standard tool sets from those disciplines. This paper argues that the impact of private mempools on markets and agent incentives renders analyses that do not consider the economic lens incomplete. The paper presents several observations across blockchains and traditional finance to justify this argument and highlight specific dynamics for future study.

Cryptography and Security

Defining and Preventing Asymmetric Mempool DoS in Ethereum with saferAd

Asymmetric Mempool DoS Security: Formal Definitions and Provable Secure Designs

Understanding Ethereum Mempool Security under Asymmetric DoS by Symbolized Stateful Fuzzing

Survive and Thrive: A Stochastic Game for DDoS Attacks in Bitcoin Mining Pools

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Mitigate DoS and DDoS Attack in Ad Hoc Networks

Distributed Shielded Execution for Transmissible Cyber Threats Analysis

Byzantine Attacks Exploiting Penalties in Ethereum PoS

An Adaptive Gas Cost Mechanism for Ethereum to Defend Against Under-Priced DoS Attacks.

Defending Against Denial of Service Attacks

An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem.

Delayed Packing Attack and Countermeasure Against Transaction Information Based Applications

A Cost-effective Shuffling Method against DDoS Attacks using Moving Target Defense

Adaptive Double-Spending Attacks on PoW-Based Blockchains

Dual-domain Defenses for Byzantine-resilient Decentralized Resource Allocation

Defend Against Denial of Service Attack with VMM

Defending P2Ps from Overlay Flooding-based DDoS.

Resisting Network Ddos Attacks By Packet Asymmetry Path Marking

Defending Against Adversarial Attacks by Energy Storage Facility

Three Attacks on Proof-of-Stake Ethereum

Mempool Privacy: An Economic Perspective