当前位置: 玩币族首页 > 行情分析 > 【第295期】#区块链网络安全保障工具专利# &“行情解读”&“PI网友观点摘录”

【第295期】#区块链网络安全保障工具专利# &“行情解读”&“PI网友观点摘录”

2020-07-29 醉玲珑来源：区块链网络

第一篇章“区块链安全保障”

近期美国银行获得了一项专利，旨在控制对区块链网络方面的访问许可权。该专利名为“安全管理和资源子组件访问系统”,解释了证券型token中将被允许用户访问特定区块中包含的信息。该系统将是自动化的，将由网络本身授予权限或进行访问。

根据安全方案研究公司RiskIQ的说法，有一个犯罪集团策划了一起网络钓鱼攻击，这一攻击行动通过自动转账系统在不被发现的情况下去清空被攻击目标的以太坊钱包的余额。以太坊钱包似乎是这次恶意钓鱼攻击行动中受影响最严重的钱包平台。造成这一结果的原因是因为以太坊钱包十分简单易用，并且缺乏安全防护功能--比如能够检测活跃的Web会话中是否插入了可疑脚本的功能。正规银行会提供额外的安全防护措施，但是以太坊钱包与银行有些不同，这个钱包程序为用户提供了直接访问以太坊网络的机会，黑客正是利用这一弱点来窃取了各种登录凭证。

目前的公链三个主要问题，1.扩容问题，现有的区块链网络，在出块时间、转账速度、系统高并发、容错性稳定性等方面，离商业应用（参照银行、证券交易所的交易吞吐量），还有很大差距。2.分布式存储问题，目前的区块链，容量小，导致网络拥堵。大量的区块数据，存哪里，如何存，如何高效存都是难点。3.系统安全性问题，智能合约漏洞，黑客事件频发，成为整个行业的痛！公链的安全性，对漏洞的修复能力，决定着这条公链的命运。

另一方面说明一个问题，以太坊的钱包安全性迫在眉睫，银行系统多层保护措施确实强于以太坊钱包，黑客们从交易所出来转向钱包，相关专业人士建议用户最好把资产转移到硬件钱包中，例如Ledger和Trezor等。

美国银行在此时提交申请获得此项专利，可谓是及时雨。说明美国银行已经意识到加密货币的软肋，如何保护自己的私人密钥是一个难题，该专利自动化功能将会控制实体或用户对区域链访问权限的时间，从而降低风险，注意是降低而不是杜绝，所以此类技术还会不断革新发展。

Bank of America recently obtained a patent aimed at controlling Filesystem permissions on the blockchain network. The patent, entitled "Security Management and Resource subcomponent access system" , explains that security-type Tokens will allow users to access information contained in a particular block. The system will be automated and will be granted or accessed by the network itself. A criminal group masterminded a phishing attack, according to Riskiq, a security research firm, the attack uses an automated money transfer system to empty the balance of the target's ether square wallet without being detected. Ether Square Wallet appears to be the most affected wallet platform in this malicious phishing attack. The reason for this is that the ethereal wallet is simple to use and lacks security features -- such as the ability to detect suspicious script inserts in active Web sessions. Regular banks provide additional security, but unlike banks, the ethereum Wallet Program gives users direct access to the ethereum network, this vulnerability was exploited by hackers to steal various login credentials. The present common chain three main problems, 1. The problem of capacity expansion, the existing block chain network, in the block time, transfer speed, system high concurrency, fault-tolerant stability, and other aspects of commercial applications (reference to banks, stock exchanges trading throughput) , there is still a large gap. 2. Distributed storage problem, the current blockchain, small capacity, resulting in network congestion. A large amount of block data, where to store, how to store, how efficient storage is difficult. 3. System security issues, smart contract vulnerabilities, frequent hacking incidents, as the pain of the industry! The security of the public chain, the ability to repair the vulnerability, determines the fate of the public chain. On the other hand, it shows that the security of ethereum's wallet is imminent. The multi-layer protection measures of the banking system are indeed better than ethereum's wallet. Hackers have turned from exchanges to wallets, professionals advise users to transfer assets to hardware wallets, such as Ledger and Trezor. It was timely that Bank of America filed for the patent. That Bank of America has realized the weakness of Cryptocurrency, how to protect its private key is a difficult problem, the patent automation function will control the entity or the user to the region chain access time, thus reducing the risk, the point is to reduce, not eliminate, so the technology will continue to evolve.

第二篇章“行情解读”