一种基于区块链的物联网攻击防御方案

An IoT Attack Defense Solution Based on Blockchain

为了解决目前物联网装置资源有限而导致的安全防护能力弱的问题,同时摆脱传统的中心化安全防护模式带来的单点故障和信任问题,可以采用一种去中心化的模式对物联网装置的身份信息进行可信存储和管理,用于防御通过假冒装置身份信息对物联网发起的攻击。区块链因其去中心化、不可篡改、可溯源等技术特征,为实现在去中心化模式下的物联网装置的安全防护提供了设计思路。针对上述物联网安全防护中可能存在的问题,提出了一种基于区块链的物联网攻击防御方案,以去中心化的方式可信地存储和管理装置身份信息,使得装置可以利用链上的身份信息确认通信双方的合法性。基于以太坊平台及其支持的智能合约技术,设计了物联网装置的攻击防御方案,通过创建以太坊私有链进行方案的仿真实验,结果证明了该方案的可行性。

In order to solve the weak security protection capabilities caused by the limited resources of the current Internet of Things devices,while getting rid of the single point of failure and trust problems caused by the traditional centralized security protection mode,a decentralized mode can be used to credibly store and manage the identity information of the Internet of Things device,which is used to defend against attacks initiated on the network through the identity information of the counterfeit device.Because of its technical characteristics such as decentralization,non-tampering,and traceability,the blockchain provides design ideas for realizing the security protection of IoT devices in the decentralized mode.In response to the above-mentioned possible problems in the security protection of IoT devices,a blockchain-based attack defense scheme for IoT devices is proposed,which credibly stores and manages the identity information of the device in a decentralized manner,so that the device can be the legitimacy of the identity information of both parties can be confirmed in the communication.Based on the Ethereum platform and the smart contract technology it supports,design an attack defense plan for IoT devices.Through the establishment of the Ethereum private chain blockchain network for simulation,the test results proved the correctness and feasibility of the scheme.