1 Gabatarwa
Babban nasarar Bitcoin ta haifar da ƙaruwar madadin cryptocurrencies (altcoins) waɗanda suka raba tushen code ɗin Bitcoin. Duk da cewa waɗannan altcoins ɗin suna raba tushen fasahar Bitcoin, sau da yawa suna aiwatar da ƙananan gyare-gyare kamar lokutan samarwa daban-daban na toshe, ayyukan hash, ko iyakokin wadata. Wannan takarda tana ƙalubalantar ra'ayin gama gari cewa altcoins suna ba da tsaro kwatankwacin Bitcoin ta hanyar yin nazari kan yadda ake yada gyare-gyaren tsaro cikin sauri daga Bitcoin zuwa cryptocurrencies ɗin da aka raba.
Mahimmin Fahimta
Daidaiton tsaro tsakanin Bitcoin da rassansa labari ne mai haɗari. Bincikenmu ya bayyana cewa manyan raunin da aka gyara a Bitcoin sau da yawa suna kasancewa ba a magance su ba a cikin altcoins har tsawon watanni, suna haifar da haɗarin tsaro a cikin tsarin cryptocurrency.
2 Hanyar Bincike
Hanyar bincikenmu ta mayar da hankali kan bin diddigin gyare-gyaren tsaro daga Bitcoin zuwa altcoins daban-daban ta hanyar nazarin GitHub repository. Kalubalen farko shine auna daidai lokutan yada gyare-gyare lokacin da ake amfani da gyare-gyare ta hanyar ayyukan rebase, waɗanda ke ɓoye ainihin alamun lokacin jigilar kaya.
2.1 Ƙirar Kayan Aikin GitWatch
GitWatch yana amfani da API ɗin taron GitHub da GH archive don ƙididdige lokacin da ake amfani da gyare-gyare a ayyukan da aka raba, ko da lokacin amfani da ayyukan rebase. Kayan aikin yana magance iyakar asali na Git na yanke commits ɗin da ba a ambata ba ta hanyar samun damar rajistan bayanan ciki na GitHub.
Aiwatar da Fasaha
Lokacin yadawa $T_{prop}$ na faci daga Bitcoin zuwa altcoin ana ƙididdige shi kamar haka:
$T_{prop} = T_{altcoin} - T_{bitcoin}$
Inda $T_{bitcoin}$ shine alamar lokacin commit a cikin Bitcoin-core kuma $T_{altcoin}$ shine farkon lokacin aikace-aikacen da aka gano a cikin reshen altcoin.
2.2 Tsarin Tattara Bayanai
Mun bincika ma'ajiyar GitHub na shahararrun cryptocurrencies ciki har da Litecoin, Dogecoin, da Namecoin. Binciken ya mayar da hankali kan manyan raunin tsaro da aka gano a Bitcoin tsakanin 2015-2022 kuma aka bi yadarsu a cikin rassan.
Kwararar Ma'ana
Binciken ya bi hanyar bincike mai tsanani mai matakai uku: gano rauni a cikin Bitcoin-core, bin diddigin faci ta GitWatch, da kuma tantance tasiri a cikin tsarin cryptocurrency. Wannan hanyar ta bayyana a fili gibin kula da tsaro wanda yawancin masu saka hannun jari a altcoins suka yi watsi da shi.
3 Sakamakon Gwaji
3.1 Jinkirin Yada Gyare-gyare
Bincikenmu ya bayyana gagarumin jinkiri a yada gyare-gyare a cikin altcoins. Manyan raunin sun ɗauki matsakaita na watanni 4-6 don a gyara su a cikin manyan altcoins, tare da wasu lokuta sun wuce watanni 12.
Matsakaicin Jinkirin Gyara
watanni 4.2
Matsakaicin Jinkiri da aka Lura
watanni 14
Altcoins da aka Bincika
12+
Jadawalin Gwaji: Lokutan Yada Gyare-gyare
Hoton lokuta yana nuna kwanakin bayyana rauni a Bitcoin tare da kwanakin gyare-gyare masu dacewa a cikin altcoins. Ƙarar gibin tsakanin bayyanawa da gyara suna nuna ƙaruwar rarrabuwar tsaro akan lokaci.
3.2 Binciken Tasirin Tsaro
Jinkirin yada gyare-gyare yana haifar da babban haɗarin tsaro. A cikin taga tsakanin gyaran Bitcoin da karɓar altcoin, altcoins suna kasancewa cikin rauni ga sanannun hare-hare, suna fallasa masu amfani ga keta tsaro da za a iya karewa.
Ƙarfi & Kurakurai
Ƙarfi: GitWatch yana ba da hangen nesa da ba a taɓa gani ba a cikin tsarin yada gyare-gyare. Hanyar bincike ta yi watsi da iyakokin Git na asali tare da ayyukan rebase.
Kurakurai: Binciken ya mayar da hankali kawai kan ayyukan da aka ɗauka a GitHub, yana yiwuwar rasa aiwatar da mallakar mallaka. Binciken ya ɗauka cewa duk gyare-gyaren suna da mahimmanci na tsaro ba tare da rarraba muni ba.
4 Tsarin Fasaha
4.1 Samfurin Lissafi
Haɗarin tsaro $R$ na altcoin ana iya ƙirƙira shi kamar haka:
$R = \sum_{i=1}^{n} S_i \cdot D_i \cdot E_i$
Inda $S_i$ yana wakiltar muni na rauni $i$, $D_i$ shine jinkirin gyara, kuma $E_i$ shine abin amfani. Wannan samfurin yana taimakawa ƙididdige bashi na tsaro da altcoins suka taru.
4.2 Misalin Tsarin Bincike
Yi la'akari da babban rauni a cikin tabbatar da ma'amala na Bitcoin tare da maki CVSS 8.5. Idan an gyara a Bitcoin a ranar 1 ga Janairu kuma altcoin ta karɓa a ranar 1 ga Yuni, lokacin fallasa haɗari shine kwanaki 150. A cikin wannan lokacin, altcoin tana ci gaba da zama mai rauni ga sanannen hari tare da babban muni.
Misalin Lissafin Haɗari
Rabi: Ma'amalar Ma'amala Muni (S): 8.5/10 Jinkiri (D): kwanaki 150 Amfani (E): 0.9 (high) Makin Haɗari: 8.5 × 150 × 0.9 = 1147.5
5 Aikace-aikacen Gaba
Hanyar GitWatch tana da fa'ida mai faɗi fiye da tsaron cryptocurrency. Ana iya daidaita shi don:
- Saurin sarrafa sarkar wadata software na Kamfani
- Kimar ingancin kula da aikin buɗe tushe
- Tabbitaccen yarda da ƙa'idodi don muhimman abubuwan more rayuwa
- Benchmark aikin tsaro na mai sayar da software
Ci gaban gaba zai iya haɗawa da allunan sa ido na ainihin lokaci, ƙididdige haɗari ta atomatik, da haɗawa da tsarin gudanar da bayanai da taron tsaro (SIEM).
6 Nassoshi
- Gervais, A., et al. "Akan Tsaro da Aikin Hujjar Aikin Blockchain." CCS 2016.
- Nakamoto, S. "Bitcoin: Tsarin Kuɗin Lantarki Peer-to-Peer." 2008.
- Kamfanin MITRE. "Tsarin Ƙididdiga na Rauni Gama gari v3.1." 2019.
- Zhu, J., et al. "CycleGAN: Fassarar Hoto zuwa Hoto mara biyu ta amfani da Cibiyoyin Adawa masu Juyawa." ICCV 2017.
- GitHub. "GitHub REST API Documentation." 2023.
Binciken Kwararre: Ruɗin Tsaron Blockchain
Wannan bincike ya bayyana babban aibi a cikin zato na tsaro na tsarin cryptocurrency. Yaduwar imani cewa rassan Bitcoin sun gaji kaddarorin tsaro na Bitcoin gaba ɗaya kuskure ne. Bincikenmu ya bayyana cewa jinkirin yada gyare-gyare yana haifar da raunin tsaro wanda ke ɓata duk ra'ayin tsaron blockchain.
Hanyar GitWatch tana wakiltar gudunmawar fasaha mai mahimmanci, kamar yadda CycleGAN (Zhu et al., 2017) ta kawo sauyi ga fassarar hoto ta hanyar magance ƙalubalen daidaita yanki. Kamar yadda CycleGAN ta ba da damar fassarar hoto mara biyu ba tare da daidaito kai tsaye ba, GitWatch yana ba da damar bin diddigin faci duk da ayyukan rebase na Git waɗanda ke ɓoye alaƙar lokaci.
Idan aka kwatanta da binciken tsaron software na gargajiya daga cibiyoyi kamar MITRE ko NIST, wannan binciken ya magance yanayin rarraba ci gaban blockchain. Binciken ya ƙalubalanci zato cewa buɗe tushe yana daidaita da tsaro kai tsaye, yana bayyana cewa ingancin kulawa ya bambanta sosai a cikin ayyuka.
Samfurin haɗarin lissafi $R = \sum S_i \cdot D_i \cdot E_i$ yana ba da tsarin ƙididdiga wanda zai iya canza yadda muke tantance tsaron cryptocurrency. Wannan hanyar ta dace da ingantattun ayyukan tsaro yayin daidaitawa da halayen blockchain na musamman.
Daga mahangar saka hannun jari, waɗannan binciken sun nuna cewa tsaron altcoin ya kamata ya zama babban la'akari maimakon bayan hankali. Jinkirin gyare-gyaren na watanni yana haifar da taga da za a iya amfani da su wanda ƙwararrun mahara za su iya kaiwa hari.
Fahimta Mai Aiki
Ga Masu Zuba Jari: Nemi ma'aunin kulawar tsaro a fili kafin a ware kowane cryptocurrency. Kwanakin amincewa da altcoins bisa takardun fari kawai sun ƙare.
Ga Masu Haɓakawa: Aiwatar da sa ido ta atomatik kan gyare-gyare da kafa ƙa'idodin bayyana masu alhaki waɗanda suka haɗa da duk sarkoki da aka raba.
Ga Masu Kayyade Dokoki: Yi la'akari da lokutan yada gyare-gyare a matsayin mahimmin ma'auni don buƙatun jera musayar cryptocurrency.