论文标题
在区块链网络中进行网络攻击检测的协作学习
Collaborative Learning for Cyberattack Detection in Blockchain Networks
论文作者
论文摘要
本文旨在研究入侵攻击,然后开发一个新型的网络攻击检测框架,以检测区块链网络网络层(例如蛮密码和交易的洪水)的网络攻击。具体来说,我们首先在实验室设计和实施区块链网络。该区块链网络将有两个目的,即,为我们的学习模型生成真实的流量数据(包括正常数据和攻击数据),并实施实时实验以评估我们建议的入侵检测框架的性能。据我们所知,这是第一个在区块链网络中用于网络攻击的实验室中合成的数据集。然后,我们提出了一种新颖的协作学习模型,该模型允许区块链网络中的有效部署来检测攻击。提出的学习模型的主要思想是使区块链节点能够积极收集数据,使用深度信念网络从数据中学习知识,然后与网络中的其他区块链节点共享从数据中学到的知识。这样,我们不仅可以利用网络中所有节点的知识,而且还不需要收集所有原始数据进行培训,以便在常规的集中学习解决方案(例如传统的集中学习解决方案)上进行培训。这样的框架还可以避免暴露本地数据的隐私以及过多的网络开销/拥塞的风险。密集模拟和实时实验都清楚地表明,我们提出的入侵检测框架可以在检测攻击方面达到高达98.6%的准确性。
This article aims to study intrusion attacks and then develop a novel cyberattack detection framework to detect cyberattacks at the network layer (e.g., Brute Password and Flooding of Transactions) of blockchain networks. Specifically, we first design and implement a blockchain network in our laboratory. This blockchain network will serve two purposes, i.e., to generate the real traffic data (including both normal data and attack data) for our learning models and to implement real-time experiments to evaluate the performance of our proposed intrusion detection framework. To the best of our knowledge, this is the first dataset that is synthesized in a laboratory for cyberattacks in a blockchain network. We then propose a novel collaborative learning model that allows efficient deployment in the blockchain network to detect attacks. The main idea of the proposed learning model is to enable blockchain nodes to actively collect data, learn the knowledge from data using the Deep Belief Network, and then share the knowledge learned from its data with other blockchain nodes in the network. In this way, we can not only leverage the knowledge from all the nodes in the network but also do not need to gather all raw data for training at a centralized node like conventional centralized learning solutions. Such a framework can also avoid the risk of exposing local data's privacy as well as excessive network overhead/congestion. Both intensive simulations and real-time experiments clearly show that our proposed intrusion detection framework can achieve an accuracy of up to 98.6% in detecting attacks.