Eclipse Attack Detection on a Blockchain Network as a Non-Parametric Change Detection Problem

Anurag Gupta,Vikram Krishnamurthy,Brian M. Sadler
2024-05-30
Abstract:This paper introduces a novel non-parametric change detection algorithm to identify eclipse attacks on a blockchain network; the non-parametric algorithm relies only on the empirical mean and variance of the dataset, making it highly adaptable. An eclipse attack occurs when malicious actors isolate blockchain users, disrupting their ability to reach consensus with the broader network, thereby distorting their local copy of the ledger. To detect an eclipse attack, we monitor changes in the Fréchet mean and variance of the evolving blockchain communication network connecting blockchain users. First, we leverage the Johnson-Lindenstrauss lemma to project large-dimensional networks into a lower-dimensional space, preserving essential statistical properties. Subsequently, we employ a non-parametric change detection procedure, leading to a test statistic that converges weakly to a Brownian bridge process in the absence of an eclipse attack. This enables us to quantify the false alarm rate of the detector. Our detector can be implemented as a smart contract on the blockchain, offering a tamper-proof and reliable solution. Finally, we use numerical examples to compare the proposed eclipse attack detector with a detector based on the random forest model.
Cryptography and Security,Applications
What problem does this paper attempt to address?
The problem that this paper attempts to solve is the detection of eclipse attacks in blockchain networks. Specifically, the author proposes a method based on non - parametric change - detection algorithms to identify eclipse attacks in blockchain networks. ### Definition of Eclipse Attack An eclipse attack is a malicious behavior in which an attacker isolates blockchain users, preventing them from reaching consensus with other nodes in the network, thereby distorting their local ledger copies. For example, if a user has eight inbound connections and the attacker controls these eight nodes, the attacker can choose not to forward new blocks from other nodes, causing the user to be unable to synchronize the latest blockchain state. ### Main Contributions of the Paper 1. **Non - parametric change - detection algorithm**: This algorithm only depends on the empirical mean and variance of the data set and is highly adaptable. 2. **Application of Fréchet mean and variance**: Detect eclipse attacks by monitoring the changes of Fréchet mean and variance in the blockchain communication network. 3. **Application of Johnson - Lindenstrauss lemma**: Use this lemma to project the high - dimensional network into a low - dimensional space while retaining key statistical properties. 4. **Smart contract implementation**: The proposed detector can be deployed as a smart contract on the blockchain, providing a tamper - proof and reliable solution. 5. **Performance evaluation**: Compare the performance of the proposed detector with that of the detector based on the random forest model through numerical experiments. ### Overview of Algorithm Steps 1. **Dimensionality reduction**: Use the Johnson - Lindenstrauss lemma to reduce the dimensionality of the adjacency matrix. 2. **Calculate test statistics**: Calculate test statistics based on the reduced - dimensionality adjacency matrix. 3. **Determine the threshold**: Select the significance level and calculate the corresponding quantile. 4. **Judge the attack**: Judge whether there is an eclipse attack according to whether the test statistic exceeds the threshold, and estimate the starting time of the attack. ### Results of Numerical Experiments - In the absence of eclipse attacks, the maximum value of the test statistic is lower than the set threshold. - In the presence of eclipse attacks, the maximum value of the test statistic is significantly higher than the threshold, and the peak position corresponds to the starting time of the attack. - The ROC curve analysis shows that the detector has strong robustness to noise. In conclusion, this paper proposes an effective non - parametric change - detection algorithm that can accurately detect eclipse attacks in blockchain networks and can achieve automated detection through smart contracts.