CN114679394A - Bit currency address classification verification method based on network space search engine - Google Patents
Bit currency address classification verification method based on network space search engine Download PDFInfo
- Publication number
- CN114679394A CN114679394A CN202210381926.4A CN202210381926A CN114679394A CN 114679394 A CN114679394 A CN 114679394A CN 202210381926 A CN202210381926 A CN 202210381926A CN 114679394 A CN114679394 A CN 114679394A
- Authority
- CN
- China
- Prior art keywords
- address
- search engine
- node
- connectable
- bitcoin
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Landscapes
- Engineering & Computer Science (AREA)
- Environmental & Geological Engineering (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a bit currency address classification verification method based on a network space search engine, which comprises the steps of inputting a query address to the network space search engine, analyzing a returned result, judging whether to return an effective record or not, and judging the address type; the method can finish automatic classification verification of the bitcoin address, identify the online connectable node, the online non-connectable wiring, the failure connectable node, the failure non-connectable wiring and the false node in the network, and has important values on bitcoin network topology analysis, transaction traceability and the like.
Description
Technical Field
The invention belongs to the technical field of block chains, and particularly relates to a bit currency address classification verification method based on a network space search engine.
Background
The bitcoin network is a P2P network and has the characteristics of no center and dynamic change of topology. The nodes are connected with adjacent addresses to form a dynamic P2P network and complete basic functions of address broadcasting, transaction transmission and the like. In the P2P network, the node address management plays a very important role in the normal operation of the network. All node addresses of the bitcoin are stored in an addrman database of the nodes, and neighbor nodes are selected from the addrman database according to a certain algorithm. Because the bitcoin network lacks the regular cleaning function to historical address, a large amount of expired, failed node addresses are accumulated constantly, and the total amount is nearly 500 ten thousand at present.
We can get a large number of bitcoin addresses by the GETADDR-ADDR method. All addresses can be divided into two categories, an online address and an offline address, wherein the online address corresponds to a node which currently provides network real-time services, and the offline address corresponds to a node which currently does not provide network services any more. The address types can be further classified into connectable addresses and non-connectable addresses: the connectable address receives connection requests sent by other nodes, generally a service end of the network; the non-connectable address does not receive a connection request, typically a client of the network. Thus, the entire address can be subdivided into: connectable addresses, non-connectable addresses, depunctured non-connectable addresses and dummy address 5 classes, as shown in fig. 1.
Verifying bitcoin node addresses is of great value for studying bitcoin networks. The existing method can only verify a connectable address, namely imitate a bitcoin client, and initiate a connection request to a target node according to a bitcoin protocol, and if the connection is successful, the opposite side is proved to be the bitcoin connectable node. The number of connectable nodes is about 3 to 4 ten thousand. For a larger number of other classes of nodes, no effective authentication method is available at present.
The network space search engine is a new internet service platform, which continuously detects the network space by using probes all over the world, scans the open port of the network through various protocols and discovers entities and services existing in the network. Currently known search engines are Shodan, Censys, ZoomEye, Fofa, etc., which have become third party web services infrastructures. The detection capability of the engines is far better than that of a single terminal, most of the engines provide detection services for the special currency nodes, and the possibility is provided for comprehensively verifying various nodes.
The biggest defect of the existing bit currency address verification method is that only connectable nodes can be verified, but other various nodes cannot be verified. The existing method is based on active detection, only the connectable node responds to the active detection, and other various nodes cannot respond. The unconnected node does not receive an incoming connection request from an external node, and therefore cannot actively detect the incoming connection request. The number of non-connectable nodes is typically tens of times the number of connectable nodes. The failed nodes are historical nodes existing in the bitcoin network once, are all offline at present, and therefore cannot respond to active detection. Researches on non-connectable nodes, failed connectable nodes and failed non-connectable nodes have important value for the bitcoin network, and a reliable verification method needs to be found.
Disclosure of Invention
In view of this, the present invention provides a bit currency address classification verification method based on a network space search engine, which can obtain effective verification methods for an unconnected node, a failed connectable node, and a failed unconnected node.
The technical scheme for realizing the invention is as follows:
a bit currency address classification verification method based on a network space search engine comprises the following steps:
step one, inputting the IP address of the bitcoin node to be verified into a search engine through an API function provided by a network space search engine, and receiving returned data;
step two, extracting an IP address, an open service type and a timestamp in the returned data by adopting a character string matching method;
step three, if the network space search engine does not return data or the IP address in the returned data is inconsistent with the query address, the historical search record of the search engine does not have the detection record of the IP address, the address is a false address, and the step one is returned;
if the search engine returns an IP address consistent with the query address, the address is an effective address, and the step four is entered to judge the address type;
analyzing the open service type and the timestamp information in the returned data;
when the time stamp is within the polling period of the search engine, if the open service contains a 'bitcoin' character string, the node is a connectable node which is used for providing bitcoin service; if the "bitcoin" character string is not contained, the node is an unconnected node;
when the timestamp exceeds the polling period of the search engine, if the open service contains a 'bitcoin' character string, the node is a failed connectable node; if the "bitcoin" character string is not contained, the node is a failed and unconnected node.
Further, the automatic classification verification of the multiple bit currency addresses can be completed by repeating the steps one to four, and online connectable nodes, online non-connectable wiring, failed connectable nodes, failed non-connectable nodes and false nodes in the network are identified.
Further, in the third step, if the IP address in the returned data is not consistent with the query address, it indicates that the returned result is incorrect.
Has the advantages that:
1. the method of the invention makes full use of the probes widely deployed by the network space search engine and the detection data and detection capability of the whole network, and skillfully realizes the accurate verification of various bitcoin nodes of the bitcoin.
2. The method of the invention utilizes rich data accumulated by a network space search engine and a high-performance scanning platform to carry out the verification of the bit currency node address, the accuracy rate is higher, and the accuracy rate of the verification of the non-connectable nodes exceeds 95 percent.
3. The method of the invention is based on API query service provided by a network search engine, but is not limited to a specific engine, can perform multi-engine verification and transversely compare results. Meanwhile, the method can be applied to network node verification analysis of other encrypted digital currencies such as Ether currency, Tada currency, Menlo currency and the like, and has good expansibility.
Drawings
Fig. 1 is a schematic diagram of bit currency address classification.
FIG. 2 is a flow chart of the bit currency address classification verification method of the present invention.
Detailed Description
The invention is described in detail below by way of example with reference to the accompanying drawings.
The network search engines such as Shodan, Censys, ZoomEye, Fofa and the like continuously detect network space by using probes all over the world, and accumulate rich detection data including bitcoin node data. Many search engines accumulated all probe data since the 2009 bitcoin came on-line and opened API query services.
The invention applies the API inquiry service opened by the search engine, fully utilizes the comprehensive detection data of the search engine to all network spaces, and skillfully realizes the classification verification of various nodes of the bitcoin. As shown in fig. 2, the method of the present invention is mainly divided into the following 4 steps:
step 1: entering query addresses into a network space search engine
And inputting the IP address of the bitcoin node to be verified into the engine through an API function provided by the search engine, and receiving a return result. Currently, each cyberspace search engine is very well aware of the IPV4 address space.
Step 2: analyzing returned results
The results returned by the web space search engine are typically in a fixed format. By adopting the character string matching method, important data such as IP, open service type, time stamp and the like in the return data can be extracted easily.
And step 3: determining whether to return a valid record
If the network space search engine does not return data or returns error data (the IP address is inconsistent with the query address), which indicates that no detection record of the IP address exists in the history retrieval record of the search engine, the address is a false address, and the step 1 is returned.
If the search engine returns an IP address consistent with the query address, the address is an effective address, and the step 4 is carried out to judge the type.
And 4, step 4: judging address type
And analyzing the open service type and the timestamp information in the return record. When the time stamp is within the polling period of the search engine, if the open service contains a 'bitcoin' character string, the node is a connectable node (judgment 1) which shows that the node is providing bitcoin service; if the "bitcoin" string is not included, it indicates that the node is a non-connectable node (decision 2). When the timestamp exceeds the polling period of the search engine, if the open service contains a 'bitcoin' character string, the node is a failed connectable node (judgment 3); if the "bitcoin" string is not included, it indicates that the node is a failed and unconnected node (decision 4).
The correctness of decision 1 is obvious because the web space search engine behaves, in principle, as a counterfeit bitcoin client.
The correctness of decision 2 is also easily understood because if a real address from the bitcoin system is not always detected by the network search engine through nodes all over the world at all times, then it is very probable that the node is not connectable, rather than being not connectable for other reasons such as time delay or limited connectivity. In fact, experiments are also carried out, and the accuracy of the method 2 is verified to be higher than 95%.
Decision 3 is also true because a connectable node was detected by the search engine but was not detected during the most recent polling period, most likely because it has failed.
Similarly, decision 4 is also true because a search engine that ever detected an unconnected node was not detected during the most recent polling period, most likely because it has failed.
The judgment 1 to 4 can be described in a list as shown in the following Table 1.
TABLE 1 node type judgment Table
Repeating the steps 1-4 can complete automatic classification verification of nearly 500 ten thousand bit currency addresses, identify online connectable nodes, online non-connectable wires, failed connectable nodes, failed non-connectable wires and false nodes in the network, and have important values for topology analysis of the bit currency network, transaction traceability and the like.
In summary, the above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims (3)
1. A bit currency address classification verification method based on a network space search engine is characterized by comprising the following steps:
step one, inputting the IP address of the bitcoin node to be verified into a search engine through an API function provided by a network space search engine, and receiving returned data;
step two, extracting an IP address, an open service type and a timestamp in the returned data by adopting a character string matching method;
step three, if the network space search engine does not return data or the IP address in the returned data is inconsistent with the query address, the historical search record of the search engine does not have the detection record of the IP address, the address is a false address, and the step one is returned;
if the search engine returns an IP address consistent with the query address, the address is an effective address, and the step four is entered to judge the address type;
analyzing the open service type and the timestamp information in the returned data;
when the time stamp is within the polling period of the search engine, if the open service contains a 'bitcoin' character string, the node is a connectable node which is used for providing bitcoin service; if the "bitcoin" character string is not contained, the node is an unconnected node;
when the time stamp exceeds the polling period of the search engine, if the open service contains a bitcoin character string, the node is a failure connectable node; if the "bitcoin" character string is not contained, the node is a failed and unconnected node.
2. The bit coin address classification validation method based on the network space search engine as claimed in claim 1, characterized in that the above steps one to four are repeated to complete automatic classification validation of a plurality of bit coin addresses and identify online connectable nodes, online non-connectable wires, failed connectable nodes, failed non-connectable nodes and false nodes in the network.
3. The bit currency address classification verification method based on the network space search engine as claimed in claim 1, wherein in the third step, if the IP address in the returned data is not consistent with the query address, it indicates that the returned result is wrong.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210381926.4A CN114679394B (en) | 2022-04-12 | 2022-04-12 | Bitcoin address classification verification method based on network space search engine |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210381926.4A CN114679394B (en) | 2022-04-12 | 2022-04-12 | Bitcoin address classification verification method based on network space search engine |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114679394A true CN114679394A (en) | 2022-06-28 |
| CN114679394B CN114679394B (en) | 2023-09-15 |
Family
ID=82078952
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210381926.4A Active CN114679394B (en) | 2022-04-12 | 2022-04-12 | Bitcoin address classification verification method based on network space search engine |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114679394B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108009807A (en) * | 2017-10-17 | 2018-05-08 | 国家计算机网络与信息安全管理中心 | A kind of bit coin transaction identity method |
| CN109918584A (en) * | 2019-03-25 | 2019-06-21 | 中国科学院自动化研究所 | Bit coin exchange Address Recognition method, system, device |
| WO2020105951A2 (en) * | 2018-11-20 | 2020-05-28 | 계명대학교 산학협력단 | System and method for topology investigation in block-chain network |
| CN112437938A (en) * | 2018-07-03 | 2021-03-02 | 环玺有限责任公司 | System and method for block chain address and owner verification |
| CN114020253A (en) * | 2021-10-28 | 2022-02-08 | 四川启睿克科技有限公司 | Method for detecting validity of EOS block chain address |
-
2022
- 2022-04-12 CN CN202210381926.4A patent/CN114679394B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108009807A (en) * | 2017-10-17 | 2018-05-08 | 国家计算机网络与信息安全管理中心 | A kind of bit coin transaction identity method |
| CN112437938A (en) * | 2018-07-03 | 2021-03-02 | 环玺有限责任公司 | System and method for block chain address and owner verification |
| WO2020105951A2 (en) * | 2018-11-20 | 2020-05-28 | 계명대학교 산학협력단 | System and method for topology investigation in block-chain network |
| CN109918584A (en) * | 2019-03-25 | 2019-06-21 | 中国科学院自动化研究所 | Bit coin exchange Address Recognition method, system, device |
| CN114020253A (en) * | 2021-10-28 | 2022-02-08 | 四川启睿克科技有限公司 | Method for detecting validity of EOS block chain address |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114679394B (en) | 2023-09-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Zhou et al. | Approximate object location and spam filtering on peer-to-peer systems | |
| He et al. | Lord of the links: a framework for discovering missing links in the internet topology | |
| He et al. | A Systematic Framework for Unearthing the Missing Links: Measurements and Impact. | |
| CN111277570A (en) | Data security monitoring method and device, electronic equipment and readable medium | |
| Magoni | Tearing down the Internet | |
| JP4553315B2 (en) | Congestion path classification method, management apparatus, and program for classifying congestion path from packet delay | |
| CN101414939B (en) | Internet application recognition method based on dynamical depth package detection | |
| Spring et al. | How to resolve IP aliases | |
| CN108282497A (en) | For the ddos attack detection method of SDN control planes | |
| CN101686239B (en) | Trojan discovery system | |
| CN101931628B (en) | Method and device for verifying intra-domain source addresses | |
| JP2007243368A5 (en) | ||
| CN104468107B (en) | Verify data processing method and processing device | |
| CN114143037B (en) | Malicious encrypted channel detection method based on process behavior analysis | |
| Zhao et al. | IP Geolocation based on identification routers and local delay distribution similarity | |
| CN113706100B (en) | Real-time detection and identification method and system for Internet of things terminal equipment of power distribution network | |
| CN108055227B (en) | WAF unknown attack defense method based on site self-learning | |
| CN112235336A (en) | Active discovery method for block chain nodes based on protocol fingerprints | |
| CN112235254B (en) | Rapid identification method for Tor network bridge in high-speed backbone network | |
| CN108199878B (en) | Personal identification information identification system and method in high-performance IP network | |
| KR20040083682A (en) | A system for monitoring multi-media service traffic and method thereof | |
| CN114679394A (en) | Bit currency address classification verification method based on network space search engine | |
| CN116886341A (en) | Equipment safety management method and system based on topology network | |
| CN110071898A (en) | A method of removing Spot detection node legitimacy | |
| CN113824602A (en) | Novel user network quality monitoring technology and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |