arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2409.04366cs.CR
收藏

去匿名化以太坊验证者:P2P网络存在隐私问题

Deanonymizing Ethereum Validators: The P2P Network Has a Privacy Issue

Lioba Heimbach, Yann Vonlanthen, Juan Villacis, Lucianna Kiffer, Roger Wattenhofer

AI总结:

本研究提出一种去匿名化方法,使以太坊P2P网络中的节点能识别验证者IP地址,3天内定位超15%验证者,揭示了其隐私风险并提出防护建议。

摘要:

许多区块链网络旨在保持对等(P2P)网络中验证者的匿名性,确保没有攻击者能将验证者的标识符与对等节点的IP地址关联起来,从而避免相关的隐私和安全风险。本研究表明,以太坊P2P网络并未提供这种匿名性。我们提出了一种方法,使网络中的任何节点都能识别托管在已连接对等节点上的验证者,并通过实验验证了所提方法的可行性。利用4个节点在3天内收集的数据,我们在P2P网络中定位了超过15%的以太坊验证者。通过这种去匿名化技术获得的见解,提供了关于验证者在各对等节点间的分布、地理位置以及托管组织的宝贵信息。我们进一步讨论了P2P网络缺乏匿名性所带来的影响和风险,并提出了帮助验证者保护其隐私的方法。以太坊基金会已向我们颁发了漏洞赏金,以肯定我们研究结果的影响力。

英文摘要:

Many blockchain networks aim to preserve the anonymity of validators in the peer-to-peer (P2P) network, ensuring that no adversary can link a validator's identifier to the IP address of a peer due to associated privacy and security concerns. This work demonstrates that the Ethereum P2P network does not offer this anonymity. We present a methodology that enables any node in the network to identify validators hosted on connected peers and empirically verify the feasibility of our proposed method. Using data collected from four nodes over three days, we locate more than 15% of Ethereum validators in the P2P network. The insights gained from our deanonymization technique provide valuable information on the distribution of validators across peers, their geographic locations, and hosting organizations. We further discuss the implications and risks associated with the lack of anonymity in the P2P network and propose methods to help validators protect their privacy. The Ethereum Foundation has awarded us a bug bounty, acknowledging the impact of our results.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑