be selfish and avoid dilemmas · 2018-03-06 · be selfish and avoid dilemmas fork after...
TRANSCRIPT
![Page 1: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/1.jpg)
BeSelfishandAvoidDilemmas
ForkAfterWithholdingAttacksonBitcoin
Y.Kwon,D.Kim,Y.Son,E.Vasserman,Y.Kim.CCS2017.
SimonBienz
![Page 2: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/2.jpg)
Blockchain
Image:https://d2omlh28jsv4r7.cloudfront.net/wp-content/uploads/2016/09/image-4-276x300.png
![Page 3: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/3.jpg)
Blockchain:Mining
Reward
![Page 4: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/4.jpg)
MiningPools
![Page 5: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/5.jpg)
Blockchain:Fork
![Page 6: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/6.jpg)
Bitcoin
• Digitalcurrency
• Completelypeer-to-peer
• Transactionsverifiedbynodes
• Underlyingblockchain actsasledger
• Coinscreatedbymining
Image:https://bitcoin.org/img/icons/opengraph.png
![Page 7: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/7.jpg)
Bitcoin:Block
Header:Merkle rootofdata+hash(previousheader)+Nonce
Data:Transactions
Header
Data
Header
Data
![Page 8: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/8.jpg)
SelfishMining
CreateForkintentionally
private
public
![Page 9: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/9.jpg)
SelfishMining:Reward
MajorityIsNotEnough:BitcoinMiningIsVulnerable;Ittay Eyal andEmin GunSirer; 2014;
![Page 10: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/10.jpg)
BlockWithholdingAttack
Lossfortheattackedpool
FPoW❌
PPoW✔
Image:https://www.buybitcoinworldwide.com/wp-content/uploads/2017/02/i1000-_0000_Vector-Smart-Object-300x300.png
![Page 11: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/11.jpg)
BlockWithholdingAttack
Lossforpool+rewardforattacker
FPoW
Image:https://www.buybitcoinworldwide.com/wp-content/uploads/2017/02/i1000-_0000_Vector-Smart-Object-300x300.png
❌
![Page 12: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/12.jpg)
BWH:Attacker’sDilemma
![Page 13: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/13.jpg)
ForkAfterWithholdingAttack
+FPoW❌
PPoW✔
![Page 14: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/14.jpg)
FAW:AttackingOnePool
![Page 15: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/15.jpg)
FAW:AttackingOnePool
![Page 16: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/16.jpg)
InnocentMiner
![Page 17: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/17.jpg)
InfiltrationMiner
noimmediateFPoW propagation
![Page 18: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/18.jpg)
FPoW holding+2nd Blockfound
1) mineroutside:
2) honestminer:
3) owninnocentminer:
FPoW❌
FPoW❌
![Page 19: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/19.jpg)
RewardAttacker
…
…
…
…
attackerinnocentmining
honestminerinpool
otherminer
attackerinfiltration
otherminer
FAW BWH
![Page 20: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/20.jpg)
RewardAttacker
1
0.8
0.6
0.4
0.2
000.10.20.30.40.5
4.5
3.5
2.5
1.5
0.5
PoolSize
c(coe
fficien
t)
ExtraRe
ward(%
)
![Page 21: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/21.jpg)
RewardPool
…
…
…
…
attackerinnocentmining
honestminerinpool
otherminer
attackerinfiltration
otherminer
FAW NoAttack
![Page 22: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/22.jpg)
PoolReward
1
0.8
0.6
0.4
0.2
000.10.20.30.40.5
0
-2
-6
-8
-10
-12
PoolSize
c(coe
fficien
t)
ExtraRe
ward(%
)
![Page 23: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/23.jpg)
FAW:AgainstMultiplePools
![Page 24: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/24.jpg)
FAW:AgainstMultiplePools
![Page 25: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/25.jpg)
InnocentMiner
![Page 26: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/26.jpg)
InfiltrationMiner
noimmediateFPoW propagation
![Page 27: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/27.jpg)
FPoW holding+2nd Blockfound
1) mineroutside:
2) honestminer:
3) owninnocentminer:
FPoW❌
FPoW❌
![Page 28: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/28.jpg)
RewardAttackerattackerinnocentmining
honestminerinpool
otherminer
attackerinfiltration
otherminer
FAW BWH
……
…
… attackerinfiltrationpool1
attackerinfiltrationpool2
![Page 29: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/29.jpg)
RewardAttacker
![Page 30: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/30.jpg)
FAW:AttackGame
![Page 31: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/31.jpg)
AttackGame
Pool1InfiltrationPower Pool2InfiltrationPower
![Page 32: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/32.jpg)
AttackGame
![Page 33: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/33.jpg)
NetworkCapability
PoolSize1
PoolSize
2
PoolSize1
PoolSize
2
![Page 34: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/34.jpg)
FAWvsSelfishMining
1
0.8
0.6
0.4
0.2
000.10.20.30.40.5
4.5
3.5
2.5
1.5
0.5
PoolSize
c(coe
fficien
t)
ExtraRe
ward(%
)
![Page 35: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/35.jpg)
RationalManager
localFPoW
otherminersblock
?
![Page 36: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/36.jpg)
DetectingAttacks
vs
![Page 37: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/37.jpg)
FAW:Countermeasures
• TwophaseprotocolEyal,Rosenfeld
• beacon
• honeypotEyal
• joiningfeeEyal,Luu etal.
• bonus
![Page 38: Be Selfish and Avoid Dilemmas · 2018-03-06 · Be Selfish and Avoid Dilemmas Fork After Withholding Attacks on Bitcoin Y. Kwon, D. Kim, Y. Son, E. Vasserman, Y. Kim. CCS 2017. Simon](https://reader035.vdocument.in/reader035/viewer/2022063001/5f21b5d6e1e3da4e4f0b86c0/html5/thumbnails/38.jpg)
Conclusions
• rewardlowerboundedbyBWH• rathersmallgaincomparedtoselfishmining• gainpossiblesingleminer/smallpools• noattackersdilemma• attackhardertodetect