区块链的安全风险评估模型  

Security Risk Assessment Model of Blockchain

作　　者：秦超霞 郭兵[1] 沈艳[2] 苏红 张珍 周驰岷[1] QIN Chao-xia;GUO Bing;SHEN Yan;SU Hong;ZHANG Zhen;ZHOU Chi-min(College of Computer Science,Sichuan University,Chengdu,Sichuan 610065,China;School of Control Engineering,Chengdu University of Information Technology,Chengdu,Sichuan 610225,China)

机构地区：[1]四川大学计算机学院,四川成都610065 [2]成都信息工程大学控制工程学院,四川成都610225

出　　处：《电子学报》2021年第1期117-124,共8页Acta Electronica Sinica

基　　金：国家自然科学基金(No.61772352);四川省科技计划项目(No.2019YFG0400,No.2018GZDZX0031,No.2018GZDZX0004)。

摘　　要：随着区块链技术在社会经济领域的应用不断扩大,区块链的安全问题受到越来越多的关注.本文提出了一种新的区块链安全风险评估方法,分别从技术架构和算力两方面量化区块链的安全风险.我们首先根据区块链技术体系架构建立了区块链可信计算基(Blockchain Trusted Computing Base,BTCB),进而设计了一种结合层次分析(Analytic Hierarchy Process,AHP)和配对比较的安全敏感性分析方法,为每个安全风险影响因素分配权重,最终构造了一个区块链的安全风险评估模型.在实验部分,我们采用该模型为当下15个常见公有链区块链项目打分,并与市场认可度较高的四家区块链评级机构的评测数据进行对比分析,实验结果表明我们的模型具有一定的可行性.With the expansion of the application of blockchain technology in the socio-economic fields,increasing attention has been paid to the security of blockchain.This paper proposes a security risk assessment method for blockchain,which quantifies the security risk of blockchain from the aspects of technical architecture and hash rate.At first,we build the Blockchain Trusted Computing Base(BTCB)model based on the technology architecture.Then,we design a sensitivity analysis method combined the AHP and paired comparison to assign security weights to each security risk factor.Finally,we construct a security risk assessment model.In the experimental part,we use this model to score 15 common public-chain blockchain projects,and conducte comparative analysis with the evaluation data of four blockchain rating agencies with high market recognition.The experiment results verify the feasibility of this method.

关 键 词：区块链 风险评估 区块链可信计算基 层次分析 算力 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]