CRII: SaTC: Towards a Secure and Efficient Ethereum P2P Network with Client Diversity

CRII：SaTC：迈向具有客户端多样性的安全高效的以太坊 P2P 网络

• 批准号: 2347486
• 负责人: Kai Li
• 金额: $ 17.49万
• 依托单位: San Diego State University Foundation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2024
• 资助国家: 美国
• 起止时间: 2024-07-01 至 2026-06-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2347486&HistoricalAwards=false
• 关键词: CRII; SaTC; Towards; Secure; Efficient; CRII; SaTC; Towards; Secure; Efficient

Ethereum is a software platform used for decentralized payments (similar to bitcoin) and also for financial ("smart") contracts and applications. Since its inception, Ethereum has been increasingly adopted by various diverse applications such as finance, health, and gaming. Ethereum implements blockchain technology with a peer-to-peer (P2P) network where each participating node may run different clients and propagation models to enhance its security and efficiency. This effort addresses the following Ethereum P2P network challenges: how to understand whether all clients have compatible communication protocols and behave consistently; and how to prevent the leakage of neighbors' private information to a malicious node. To address these challenges, this effort will develop methods to systematically detect incompatible communication protocols and inconsistent behaviors in Ethereum clients, and design a new approach to preserve node privacy and improve efficiency. Two new courses will be developed based on this research, a course covering the foundations of cryptography and its applications in blockchains, and an elective graduate course on blockchain security foundations.This effort includes three research tasks. Task 1 is to develop an automated testing framework to discover incompatible communication protocols implemented in Ethereum clients that would cause communication failures. Task 2 is to develop a differential fuzzing framework to detect inconsistent propagation behaviors in Ethereum clients that could lead to Denial-of-Service attacks. Task 3 is to design a dynamic propagation model that can select the best propagation method based on the network conditions and neighbor status to mitigate the neighbor privacy leakage problem and improve propagation efficiency.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

以太坊是一个用于分散付款（类似于比特币）的软件平台，也用于财务（“智能”）合同和应用程序。 自成立以来，以太坊越来越多地被各种不同的应用（例如金融，健康和游戏）采用。以太坊通过点对点（P2P）网络实现区块链技术，每个参与节点可能会运行不同的客户端和传播模型以提高其安全性和效率。这项工作解决了以下以太坊P2P网络挑战：如何了解所有客户是否具有兼容的通信协议并保持持续的行为；以及如何防止邻居的私人信息泄漏到恶意节点。为了应对这些挑战，这项工作将开发出系统地检测以太坊客户中不兼容的通信协议和行为不一致的方法，并设计一种新方法来保护节点隐私并提高效率。根据这项研究，将开发两个新课程，其中涵盖了密码学及其在区块链中的应用，以及针对区块链安全基础的选修生课程。这项工作包括三项研究任务。任务1是开发一个自动化的测试框架，以发现以太坊客户端实施的不兼容的通信协议，这将导致通信失败。任务2是开发一个不同的模糊框架，以检测以太坊客户中不一致的传播行为，这可能导致拒绝服务攻击。任务3是设计一个动态传播模型，该模型可以根据网络条件和邻居状态选择最佳的传播方法，以减轻邻居隐私泄漏问题并提高传播效率。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子和更广泛影响的评估来通过评估来获得支持的审查标准。