区块链信息系统安全测评方法研究

Research on Security Evaluation Method of Blockchain Information System

过往数年,区块链作为一种信任传递、价值共享的底层软件技术已进入人们视野,其前景受到各国政府、科学机构和跨国企业的极大关注,并受到资本和市场的强烈追捧。随着区块链与实体经济的深度融合,其存在的技术局限性和面临的安全问题也逐渐显现,尤其是系统安全事故层出不穷。从介绍区块链的概念及主要技术展开,逐步分析区块链面临的安全风险与原因,并结合测评实践,提出区块链安全测评方法。

In the past few years,blockchain,as a kind of trust transfer,the underlying software technology of value sharing has entered people's hori⁃zons,and its prospect has been paid great attention to by governments,scientific institutions and multinational enterprises,and has been strongly sought after by capital and markets.With the deep integration of blockchain and real economy,the technical limitations and securi⁃ty problems are gradually emerging,especially the system security accidents emerge in endlessly.In this paper,the concept and main tech⁃nology of blockchain are introduced,the security risks and causes of blockchain are analyzed step by step,and the security evaluation meth⁃od of blockchain is put forward according to the evaluation practice.