WO2022150961A1

WO2022150961A1 - Blockchain security monitoring method and apparatus, electronic device and storage medium

Info

Publication number: WO2022150961A1
Application number: PCT/CN2021/071245
Authority: WO
Inventors: 王毅; 马佳玲; 陈洁欣; 廖竞; 罗秋明; 毛睿
Original assignee: 深圳大学
Priority date: 2021-01-12
Filing date: 2021-01-12
Publication date: 2022-07-21

Abstract

A blockchain security monitoring method and apparatus, an electronic device and a storage medium. The method comprises: obtaining a data strip to be detected and a preset total quantity of monitoring resources (201); selecting, according to the confidence level, monitoring frequency and usage amount of a storage node corresponding to said data strip, a node to be detected (202); and allocating, on the basis of a preset monitoring resource allocation rule and the preset total quantity of monitoring resources, a monitoring resource for each storage data block according to the access frequencies of storage data blocks in the node to be detected, so as to perform security monitoring on said node (203). In the method, by selecting, according to the confidence level, monitoring frequency and usage amount of each storage node, the node to be detected, and further allocating monitoring resources according to the access frequency of each storage data block in the node, the monitoring frequency of each storage node is balanced, and the monitoring resources are reasonably allocated, thereby improving the reliability of a security monitoring result, and laying a foundation for improving the security of a blockchain storage system.

Description

A blockchain security monitoring method, device, electronic device and storage medium

technical field

The present application relates to the field of blockchain technology, and in particular, to a blockchain security monitoring method, device, electronic device and storage medium.

Background technique

At present, people have put forward higher requirements for the privacy, security and correctness of data storage, and traditional storage methods are facing great challenges. Therefore, blockchain storage is a trend in the future development of the storage industry. In blockchain storage, how to verify the correctness of users' stored data and the reliability of storage nodes is a very important issue.

In the prior art, a data strip is usually randomly selected in the blockchain, and the blockchain nodes corresponding to the data strip are randomly monitored for security.

However, due to the large number of blockchain nodes in the blockchain network, if the security monitoring of blockchain nodes is carried out based on the existing technology, some nodes may be monitored frequently, while some nodes cannot be monitored for a long time, which is not conducive to Ensure the reliability of safety monitoring results. Therefore, there is an urgent need for a blockchain security monitoring method that can ensure the reliability of security monitoring results, which is of great significance for improving the security of blockchain storage systems.

SUMMARY OF THE INVENTION

The present application provides a blockchain security monitoring method, device, electronic device and storage medium to solve the defects of the prior art such as low reliability.

A first aspect of the present application provides a blockchain security monitoring method, including:

Obtain the data strips to be detected and the total amount of preset monitoring resources;

selecting a node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data strip to be detected;

Based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, and according to the access frequency of the stored data blocks in the nodes to be detected, monitoring resources are allocated for each stored data block, so as to perform security monitoring on the nodes to be detected.

Optionally, selecting the node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data stripe to be detected includes:

Screening trusted storage nodes in the storage nodes according to the confidence of the storage nodes;

Determine the monitoring priority corresponding to each trusted storage node according to the ascending sorting result of the monitoring frequency of the trusted storage node;

For each trusted storage node with the same monitoring priority, update the monitoring priority of each trusted storage node based on the descending sorting result of the usage of each trusted storage node;

According to the updated monitoring priority of each trusted storage node, a node to be detected is selected from the reliability storage nodes.

Optionally, it further includes: in the storage nodes corresponding to the data stripes to be detected, screening new nodes that are newly added within a preset time;

Based on the monitoring frequency and joining time of each new node, a new node to be detected is selected from the new nodes;

Based on the preset monitoring resource allocation rule and the preset total amount of monitoring resources, and according to the monitoring frequency of the stored data blocks in the new node to be detected, monitoring resources are allocated to each stored data block, so as to perform security monitoring of the new node to be detected.

Optionally, selecting a new node to be detected from the new nodes based on the monitoring frequency and joining time of each new node, including:

Determine the monitoring priority corresponding to each new node according to the ascending sorting result of the monitoring frequency corresponding to each new node;

For each new node with the same monitoring priority, update the monitoring priority of each new node based on the order of the joining time of each new node;

According to the updated monitoring priority of each new node, a new node to be detected is selected from the new nodes.

Optionally, based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, and according to the access frequency of the stored data blocks in the nodes to be detected, the monitoring resources are allocated to each stored data block, so that the nodes to be detected are allocated monitoring resources. Security monitoring, including:

Determine the first total amount of monitoring resources corresponding to the node to be detected based on the preset monitoring resource allocation rule and the preset total amount of monitoring resources;

According to the access frequency of the storage data block, determine the data block level corresponding to the storage data block;

Determine the resource allocation ratio of each storage data block according to the data block level corresponding to each storage data block and the number of storage data blocks included in each data block level;

According to the resource allocation ratio of each storage data block and the total amount of the first monitoring resources, monitoring resources are allocated to each storage data block, so as to perform security monitoring on the node to be detected.

Optionally, before selecting the node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data stripe to be detected, the method further includes:

Obtain historical monitoring records of each of the storage nodes;

Based on a preset confidence calculation rule, the confidence of each storage node is calculated according to the historical monitoring records.

Optionally, also include:

Determine whether the time interval between the current node to be detected and the last historical monitoring time is less than a preset time threshold;

If so, abandon the current node to be detected.

A second aspect of the present application provides a blockchain security monitoring device, including:

an acquisition module, used to acquire the data strip to be detected and the total amount of preset monitoring resources;

a determination module, configured to select a node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data strip to be detected;

The monitoring module is configured to allocate monitoring resources for each stored data block based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources and according to the access frequency of the stored data blocks in the nodes to be detected, so as to ensure the security of the nodes to be detected monitor.

Optionally, the determining module is specifically used for:

Optionally, the determining module is further used for:

In the storage nodes corresponding to the data stripes to be detected, filter new nodes that are newly added within a preset time;

Optionally, the determining module is specifically used for:

Optionally, the monitoring module is specifically used for:

Optionally, the determining module is further used for:

Obtain historical monitoring records of each of the storage nodes;

Optionally, the determining module is further used for:

If so, abandon the current node to be detected.

A third aspect of the present application provides an electronic device, including: at least one processor and a memory;

the memory stores computer-executable instructions;

The at least one processor executes computer-implemented instructions stored in the memory to cause the at least one processor to perform the methods described above in the first aspect and various possible designs of the first aspect.

A fourth aspect of the present application provides a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and when a processor executes the computer-executable instructions, the first aspect and the first Aspects various possible designs of the described method.

The technical solution of the present application has the following advantages:

The blockchain security monitoring method, device, electronic device and storage medium provided by this application, by obtaining the data strip to be detected and the total amount of preset monitoring resources; and usage, select the node to be detected; based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, according to the access frequency of the stored data block in the node to be detected, allocate monitoring resources for each stored data block to the node to be detected Conduct safety monitoring. In the method provided by the above technical solutions, the nodes to be detected are selected according to the confidence, detection frequency and usage of each storage node, and monitoring resources are allocated according to the access frequency of each storage data block in the node, which balances the monitoring of each storage node. The frequency of monitoring resources is reasonably allocated, which improves the reliability of security monitoring results and lays a foundation for improving the security of the blockchain storage system.

Description of drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following will briefly introduce the accompanying drawings used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are some embodiments of the present application, and for those of ordinary skill in the art, other drawings can also be obtained according to these drawings.

1 is a schematic structural diagram of a blockchain security monitoring system based on an embodiment of the application;

2 is a schematic flowchart of a blockchain security monitoring method provided by an embodiment of the present application;

3 is a schematic structural diagram of a blockchain security monitoring device provided by an embodiment of the present application;

FIG. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present application.

Specific embodiments of the present application have been shown by the above-mentioned drawings, and will be described in more detail hereinafter. These drawings and written descriptions are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the present application to those skilled in the art by referring to specific embodiments.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments It is a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

In addition, the terms "first", "second", etc. are used for descriptive purposes only, and should not be construed as indicating or implying relative importance or implying the number of indicated technical features. In the description of the following embodiments, the meaning of "plurality" is two or more, unless otherwise expressly and specifically defined.

In the prior art, a data strip is usually randomly selected in the blockchain, and the blockchain nodes corresponding to the data strip are randomly monitored for security. However, due to the large number of blockchain nodes in the blockchain network, if the security monitoring of blockchain nodes is carried out based on the existing technology, some nodes may be monitored frequently, while some nodes cannot be monitored for a long time, which is not conducive to Ensure the reliability of safety monitoring results.

In view of the above problems, the blockchain security monitoring method, device, electronic device and storage medium provided by the embodiments of the present application obtain the data stripe to be detected and the total amount of preset monitoring resources; according to the storage node corresponding to the data stripe to be detected Based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, according to the access frequency of the stored data blocks in the nodes to be detected, the monitoring nodes are allocated to each stored data block. resources for security monitoring of nodes to be detected. In the method provided by the above technical solutions, the nodes to be detected are selected according to the confidence, detection frequency and usage of each storage node, and monitoring resources are allocated according to the access frequency of each storage data block in the node, which balances the monitoring of each storage node. The frequency of monitoring resources is reasonably allocated, which improves the reliability of security monitoring results and lays a foundation for improving the security of the blockchain storage system.

The following specific embodiments may be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below with reference to the accompanying drawings.

First, the structure of the blockchain security monitoring system on which this application is based is explained:

The blockchain security monitoring method, device, electronic device, and storage medium provided by the embodiments of this application are suitable for security monitoring of storage nodes in a blockchain storage system. As shown in FIG. 1, it is a schematic structural diagram of the blockchain security monitoring system based on the embodiment of the application, which mainly includes a blockchain storage system, a monitoring sequence construction device, and an area for performing security monitoring on the blockchain storage system. Blockchain security monitoring device. Specifically, a monitoring sequence construction device can be used to randomly select data strips in the blockchain storage system, and store the data strips in sequence according to the selection order to construct a monitoring sequence. Detecting data strips, determining nodes to be detected and new nodes to be detected according to the extracted data strips to be detected, and further filling the selected nodes to be detected into the monitoring sequence, and sequentially performing safety monitoring on the nodes in the monitoring sequence .

The embodiments of the present application provide a blockchain security monitoring method, which is used for security monitoring of storage nodes in a blockchain storage system. The execution body of the embodiment of the present application is an electronic device, such as a server, a desktop computer, a notebook computer, a tablet computer, and other electronic devices that can be used for security monitoring.

As shown in FIG. 2 , a schematic flowchart of a blockchain security monitoring method provided by an embodiment of the present application, the method includes:

Step 201: Acquire the data strip to be detected and the total amount of preset monitoring resources.

It should be explained that the preset total amount of monitoring resources may specifically refer to the set number of security monitoring per hour, also called the number of audits, which may be specifically set according to the actual situation, which is not limited in this embodiment of the present application.

Step 202: Select a node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data strip to be detected.

It should be explained that the monitoring frequency refers to the number of times of being monitored, that is, the number of times of being audited within the preset security monitoring period.

Specifically, the blockchain area storage system includes trusted storage nodes and untrusted storage nodes, which can be distinguished according to the confidence of the storage nodes. In order to avoid wasting monitoring resources, security monitoring is usually only performed on trusted storage nodes. Therefore, the node to be detected can be selected among the trusted storage nodes.

Further, in order to ensure the balance of the monitoring frequency of each storage node, a storage node with a lower monitoring frequency may be selected as the node to be detected. Among them, in order to ensure the security of the data stored in the storage nodes, when determining the nodes to be detected, the usage of each storage node can also be comprehensively considered, so as to select the nodes to be detected that most require security monitoring.

Step 203: Based on the preset monitoring resource allocation rule and the preset total amount of monitoring resources, and according to the access frequency of the stored data blocks in the nodes to be detected, monitoring resources are allocated to each stored data block, so as to perform security monitoring on the nodes to be detected.

Specifically, according to the usage of each storage data block in the selected node to be detected, monitoring resources may be allocated to each storage data block in proportion to allocate monitoring resources reasonably. Specifically, it refers to the number of security monitoring allocated to each storage node, that is, the number of audits allocated to each storage node.

On the basis of the above embodiment, since there are many newly added storage nodes in the blockchain storage system, and the confidence of these new nodes is unknown, in order to further ensure the reliability of the blockchain security monitoring results, as a In an implementation manner, in one embodiment, the method further includes:

Step 301, in the storage nodes corresponding to the data stripes to be detected, filter new nodes that are newly added within a preset time;

Step 302, based on the monitoring frequency and joining time of each new node, select a new node to be detected from the new nodes;

Step 303: Based on a preset monitoring resource allocation rule and a preset total amount of monitoring resources, and according to the monitoring frequency of the stored data blocks in the new node to be detected, allocate monitoring resources to each stored data block, so as to perform security monitoring on the new node to be detected.

Specifically, a common new node screening method may be used to screen new nodes among the multiple storage storage nodes corresponding to the data stripes to be detected.

Specifically, the new node with the lowest monitoring frequency can be selected as the new node to be detected. If there are multiple new nodes with the lowest monitoring frequency, among these new nodes with the lowest monitoring frequency, the new node with the earliest joining time is selected. The node is a new node on the side to be detected.

Specifically, in an embodiment, in order to improve the safety monitoring efficiency, the monitoring priority corresponding to each new node may be determined according to the ascending sorting result of the monitoring frequency corresponding to each new node; for each new node with the same monitoring priority, based on According to the order of the joining time of each new node, the monitoring priority of each new node is updated; according to the updated monitoring priority of each new node, a new node to be detected is selected from the new nodes.

Specifically, first, according to the monitoring frequency of each new node, the monitoring priority is divided for the new node. If the monitoring priority of multiple new nodes is the highest at the same time, that is, the monitoring frequency of multiple new nodes is tied for the lowest, then these new nodes are sorted again according to the joining time of each new node corresponding to the monitoring priority, that is, the The monitoring priority of each new node is updated, and finally the new node with the lowest monitoring frequency and the earliest joining time is selected as the new node to be detected.

Similarly, in an embodiment, selecting the node to be detected (step 202 ) according to the confidence, monitoring frequency and usage of the storage node corresponding to the data stripe to be detected may include:

Step 2021, according to the confidence level of the storage node, filter the trusted storage node in the storage node;

Step 2022: Determine the monitoring priority corresponding to each trusted storage node according to the ascending sorting result of the monitoring frequencies of the trusted storage nodes;

Step 2023, for each trusted storage node with the same monitoring priority, update the monitoring priority of each trusted storage node based on the descending sorting result of the usage of each trusted storage node;

Step 2024, according to the updated monitoring priority of each trusted storage node, select a node to be detected from the trusted storage nodes.

Specifically, first, according to the monitoring frequency of each trusted storage node, the monitoring priority is divided for the trusted storage nodes. If the monitoring priority of multiple trusted storage nodes is the highest at the same time, that is, the monitoring frequency of multiple trusted storage nodes is tied for the lowest, then according to the usage of each trusted storage node corresponding to the monitoring priority, The trusted storage nodes are sorted again, that is, the monitoring priority of each trusted storage node is updated, and finally the trusted storage node with the lowest monitoring frequency and the largest usage is selected as the node to be detected.

Further, in one embodiment, the first total amount of monitoring resources corresponding to the node to be detected may be determined based on a preset monitoring resource allocation rule and a preset total amount of monitoring resources; the storage data may be determined according to the access frequency of the stored data blocks. The data block level corresponding to the block; according to the data block level corresponding to each storage data block and the number of storage data blocks contained in each data block level, the resource allocation ratio of each storage data block is determined; according to the resource allocation ratio of each storage data block and The first total amount of monitoring resources is to allocate monitoring resources to each storage data block to perform security monitoring on nodes to be detected.

Exemplarily, the data block level of the storage data block with lower access frequency may be determined as the first level, the data block level of the storage data block with normal access frequency may be determined as the second level, and the data block of the storage data block with higher access frequency may be determined as the second level. The block level is determined to be level three. If the number of third-level storage data blocks in the node to be detected is m, the number of second-level storage data blocks is k, and the number of first-level storage data blocks is t. Among them, in order to ensure that the number of times that each trusted storage node is audited is basically the same, the number of times that each trusted storage node is audited every d days (the total amount of first monitoring resources) can be defined as adNumperw, and its calculation formula is:

adNumperw=blAdNum*24*d/blNum

Among them, blAdNum represents the total number of audit times per hour of all trusted storage nodes, and blNum represents the number of trusted storage nodes in the data strip to be detected.

Among them, the total number of audit times per hour of all trusted storage nodes can be calculated according to the following formula:

blAdNum=numperh*blNum/(blNum+newNum)

Wherein, numperh represents the total amount of preset monitoring resources, and newNum represents the number of new nodes in the data strip to be detected.

Define the tertiary storage data block with high access frequency, and the number of audits allocated every d days is x ₁ , that is, the allocated monitoring resources are x ₁ :

in,

Indicates the resource allocation ratio of tertiary storage data blocks.

The secondary storage data block that defines the normal access frequency is allocated x ₂ audit times every d days, that is, the allocated monitoring resources are x ₂ :

in,

Indicates the resource allocation ratio of secondary storage data blocks.

The secondary storage data block with lower access frequency is defined, and the number of audits allocated every d days is x ₃ , that is, the allocated monitoring resources are x ₃ :

in,

Indicates the resource allocation ratio of primary storage data blocks.

Further, the allocation is carried out in units of d days. The first x ₁ time is to select the third-level storage data block, the next x ₂ times are to select the second-level storage data block, and the last x ₃ times are to select the first-level storage data block. The storage data block is selected according to the access frequency, and the security monitoring is performed first if the access frequency is high.

It should be explained that, with regard to the rules for determining the resource allocation ratio provided by the embodiments of the present application, in the case of a large number of tertiary storage data blocks, the storage data blocks that are sorted later, such as the first-level storage data blocks, are not necessary. When it comes to monitoring resources, the security monitoring effect of the tertiary storage data blocks is guaranteed.

Similarly, in an embodiment, the second total amount of monitoring resources corresponding to the new node to be detected may be determined based on a preset monitoring resource allocation rule and a preset total amount of monitoring resources; The access frequency of the data blocks determines the data block level corresponding to the storage data block; according to the data block level corresponding to each storage data block and the number of storage data blocks contained in each data block level, the resource allocation ratio of each storage data block is determined; according to The resource allocation ratio of each storage data block and the total amount of the second monitoring resources are used to allocate monitoring resources for each storage data block, so as to perform security monitoring on the new node to be detected.

Specifically, the number of times each new node is audited every d days (the second total amount of monitoring resources) can be defined as newadNumperw, and its calculation formula is:

newadNumperw=newAdNum*24*d/newNum

Among them, newAdNum represents the total number of audit times per hour of all new nodes, and newNum represents the number of trusted storage nodes in the data strip to be detected.

Among them, the total number of audits per hour for all new nodes can be calculated according to the following formula:

newAdNum=numperh*newNum/(blNum+newNum)

Wherein, numperh represents the total amount of preset monitoring resources, and blNum represents the number of trusted storage nodes in the data strip to be detected.

Specifically, in order to ensure that each storage data block in the new node to be detected can be audited, the sum of the resource allocation ratios corresponding to each data block level may be 1.

Further, in order to perform security monitoring on multiple storage data blocks in a short period of time, security monitoring may be performed on the obtained storage data blocks with few monitoring resources first.

Similarly, in an embodiment, the second total amount of monitoring resources corresponding to the new node to be detected may be determined based on the preset monitoring resource allocation rule and the preset total amount of monitoring resources; the second total amount of monitoring resources is equally divided into Each storage data block in the new node to be detected.

Further, according to the access frequency of each stored data block in the new node to be detected, the security monitoring sequence of each stored data block is determined, and specifically, the security monitoring may be performed on the stored data block with high access frequency first.

On the basis of the above embodiment, as an implementable manner, in an embodiment, before selecting the node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data stripe to be detected, the Methods also include:

Step 401, obtaining historical monitoring records of each storage node;

Step 402: Calculate the confidence of each storage node based on a preset confidence calculation rule and historical monitoring records.

Exemplarily, the confidence level stConflevel of the storage node can be calculated according to the following formula:

stConflevel=the number of times the storage node has passed the audit in the last d days/the total number of audits of the storage node in the last d days.

Among them, the number of audits passed in the last d days and the total number of audits in the last d days can be obtained according to the historical monitoring records.

Further, the trusted storage node is defined as:

stConflevel≥0.99, and the number of trusted storage nodes is defined as blNum.

Correspondingly, the untrusted storage node is defined as:

stConflevel<0.99, and the number of untrusted storage nodes is defined as unblNum.

Specifically, in an embodiment, in order to avoid repeated auditing of a certain storage node in a short period of time and waste of monitoring resources, when selecting a node to be detected, it can be determined whether the time interval between the current node to be detected and the previous historical monitoring time is not is less than the preset time threshold; if so, abandon the current node to be detected.

Specifically, the preset time threshold may be one hour. If it is determined that the last security monitoring time of the currently selected node to be detected is less than one hour away from the current time, in order to avoid multiple security monitoring of a certain storage node in a short period of time ( Audit), and other storage nodes do not have the opportunity for security monitoring for a long time, they will abandon the current node to be detected, and re-select a new node to be detected.

Exemplarily, as shown in FIG. 1 , an embodiment of the present application provides a monitoring sequence construction device that can construct a monitoring sequence, specifically constructing a stripe sequence with a length of n, wherein the data strip is also called stripe, and the stripe sequence is taken each time. the first to be audited. Among them, the longest stripe sequence length of the audit center is defined as N, and the maximum storage stripe sequence space provided by the audit center is defined as adSpace. Since the storage space of each audit center may be different, if adSpace is set to a fixed value Obviously unreasonable, because the audit center does not only store stripe sequences, but also other contents, it is impossible to fill the storage space of the entire audit center. This method will use half of the storage space of the audit center, so it is possible to obtain The calculation formula of adSpace is:

adSpace=Audit center storage space size/2

Similarly, because the configuration of each audit center is different, it also means that although the stripe size in the same audit center is the same, the stripe size of different audit centers is not necessarily the same. Therefore, even if different audit centers have the same adSpace, their The longest stripe sequence length N is not necessarily the same, so the formula for N specified in the embodiment of the present application is as follows:

N=adSpace/stripe size (n≤N)

When n<N, the stripe sequence of the audit center needs to be filled. Specifically, the node to be detected and the new node to be detected selected in the above embodiment may be filled into the stripe sequence. In the stripe sequence in the initial state, the filling method is: when the user saves the file, a random stripe of a segment is randomly selected and added to the stripe queue. The random method of the segment is:

segment number

= (current unix timestamp) mod (the number of segments the user file is divided into)

After selecting a segment and then selecting a stripe, the random method is: stripe number = (current unix timestamp) mod (the number of stripes divided by the segment)

It needs to be explained that the data to be stored by the user will first be divided into segments (segments) of the same size, and then each segment is encrypted and divided into smaller data stripes (stripes), and each stripe is passed through Erasure After Encoding, it is divided into several data blocks (share) and stored in different storage nodes. And in the process of splitting, a segment number is allocated to each segment, and a stripe number is allocated to each stripe.

The above random selection method is only an exemplary random selection method, and other random selection methods may also be adopted, which are not limited in the embodiments of the present application.

Further, fill the selected stripe into the stripe sequence, and the number of fillings shall not exceed N. After the initial filling of the stripe sequence method lasts for d days (d=7 is specified here), a new filling strategy is adopted. Specifically, the above embodiment can be used. The selected nodes to be detected, new nodes to be detected and storage data blocks are filled into the stripe sequence.

The blockchain security monitoring method provided by the embodiments of the present application obtains the data strip to be detected and the total amount of preset monitoring resources; Detecting nodes; based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, and according to the access frequency of the stored data blocks in the nodes to be detected, allocating monitoring resources to each stored data block, so as to perform security monitoring on the nodes to be detected. In the method provided by the above technical solutions, the nodes to be detected are selected according to the confidence, detection frequency and usage of each storage node, and monitoring resources are allocated according to the access frequency of each storage data block in the node, which balances the monitoring of each storage node. The frequency of monitoring resources is reasonably allocated, which improves the reliability of security monitoring results and lays a foundation for improving the security of the blockchain storage system. In addition, the security monitoring can also be performed on the newly added new node, which further improves the reliability of the obtained security monitoring result. In addition, the trusted storage node can be audited first, and the new node can be audited later, so that the data stored by the user can be verified as soon as possible, and at the same time, the new node can be audited.

The embodiments of the present application provide a blockchain security monitoring device, which is used to execute the blockchain security monitoring method provided by the above embodiments.

As shown in FIG. 3 , it is a schematic structural diagram of a blockchain security monitoring device provided in an embodiment of the present application. The blockchain security monitoring device 30 includes an acquisition module 301 , a determination module 302 and a monitoring module 303 .

Among them, the acquisition module is used to acquire the data strip to be detected and the total amount of preset monitoring resources; the determination module is used to select the node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data strip to be detected The monitoring module is used to allocate monitoring resources for each stored data block based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources and according to the access frequency of the stored data blocks in the nodes to be detected, so as to monitor the security of the nodes to be detected. .

Specifically, in an embodiment, the determining module is specifically used for:

According to the confidence of the storage node, filter the trusted storage nodes in the storage nodes;

According to the ascending sorting result of the monitoring frequency of the trusted storage nodes, determine the monitoring priority corresponding to each trusted storage node;

According to the updated monitoring priority of each trusted storage node, a node to be detected is selected from the trusted storage nodes.

Specifically, in an embodiment, the determining module is further configured to:

In the storage nodes corresponding to the data stripes to be detected, filter the new nodes newly added within the preset time;

Based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, and according to the monitoring frequency of the data blocks stored in the new node to be detected, monitoring resources are allocated to each stored data block, so as to perform security monitoring on the new node to be detected.

Specifically, in one embodiment, the monitoring module is specifically used for:

According to the resource allocation ratio of each storage data block and the total amount of first monitoring resources, monitoring resources are allocated to each storage data block, so as to perform security monitoring on the node to be detected.

Obtain the historical monitoring records of each storage node;

Based on the preset confidence calculation rules and historical monitoring records, the confidence of each storage node is calculated.

If so, abandon the current node to be detected.

Regarding the blockchain security monitoring device in this embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be described in detail here.

The blockchain security monitoring device provided by the embodiment of the present application is used to execute the blockchain security monitoring method provided by the above-mentioned embodiment, and the implementation method and principle are the same, and are not repeated here.

The embodiment of the present application provides an electronic device for executing the blockchain security monitoring method provided by the above embodiment.

As shown in FIG. 4 , it is a schematic structural diagram of an electronic device provided in an embodiment of the present application. The electronic device 40 includes: at least one processor 41 and a memory 42;

The memory stores computer-executable instructions; at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor executes the blockchain security monitoring method provided in the above embodiment.

An electronic device provided by an embodiment of the present application is used to execute the blockchain security monitoring method provided by the above-mentioned embodiment, and its implementation manner is the same as the principle, which will not be repeated.

Embodiments of the present application provide a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and when the processor executes the computer-executable instructions, the blockchain security monitoring method provided in any of the above embodiments is implemented.

The storage medium containing the computer-executable instructions of the embodiments of the present application can be used to store the computer-executable instructions of the blockchain security monitoring method provided in the foregoing embodiments.

Those skilled in the art can clearly understand that, for the convenience and brevity of the description, only the division of the above functional modules is used for illustration. The internal structure is divided into different functional modules to complete all or part of the functions described above. For the specific working process of the apparatus described above, reference may be made to the corresponding process in the foregoing method embodiments, and details are not described herein again.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features thereof can be equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present application. scope.

Claims

A blockchain security monitoring method, comprising:

Obtain the data strips to be detected and the total amount of preset monitoring resources;

selecting a node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data strip to be detected;

Based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources, and according to the access frequency of the stored data blocks in the nodes to be detected, monitoring resources are allocated to each stored data block, so as to perform security monitoring on the nodes to be detected.
The method according to claim 1, wherein the selecting the node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data stripe to be detected comprises:

Screening trusted storage nodes in the storage nodes according to the confidence of the storage nodes;

Determine the monitoring priority corresponding to each trusted storage node according to the ascending sorting result of the monitoring frequency of the trusted storage node;

For each trusted storage node with the same monitoring priority, update the monitoring priority of each trusted storage node based on the descending sorting result of the usage of each trusted storage node;

According to the updated monitoring priority of each trusted storage node, a node to be detected is selected from the reliability storage nodes.
The method of claim 1, further comprising:

In the storage nodes corresponding to the data stripes to be detected, filter new nodes that are newly added within a preset time;

Based on the monitoring frequency and joining time of each new node, a new node to be detected is selected from the new nodes;

Based on the preset monitoring resource allocation rule and the preset total amount of monitoring resources, and according to the monitoring frequency of the stored data blocks in the new node to be detected, monitoring resources are allocated to each stored data block, so as to perform security monitoring of the new node to be detected.
The method according to claim 3, wherein the selecting a new node to be detected from the new nodes based on the monitoring frequency and joining time of each new node, comprising:

Determine the monitoring priority corresponding to each new node according to the ascending sorting result of the monitoring frequency corresponding to each new node;

For each new node with the same monitoring priority, update the monitoring priority of each new node based on the order of the joining time of each new node;

According to the updated monitoring priority of each new node, a new node to be detected is selected from the new nodes.
The method according to claim 1, wherein, based on a preset monitoring resource allocation rule and the preset total amount of monitoring resources, according to the access frequency of the stored data blocks in the node to be detected, for each storage data block Allocate monitoring resources for security monitoring of nodes to be detected, including:

Determine the first total amount of monitoring resources corresponding to the node to be detected based on the preset monitoring resource allocation rule and the preset total amount of monitoring resources;

According to the access frequency of the storage data block, determine the data block level corresponding to the storage data block;

Determine the resource allocation ratio of each storage data block according to the data block level corresponding to each storage data block and the number of storage data blocks included in each data block level;

According to the resource allocation ratio of each storage data block and the total amount of the first monitoring resources, monitoring resources are allocated to each storage data block, so as to perform security monitoring on the node to be detected.
The method according to claim 1, wherein before selecting the node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data stripe to be detected, the method further comprises:

Obtain historical monitoring records of each of the storage nodes;

Based on a preset confidence calculation rule, the confidence of each storage node is calculated according to the historical monitoring records.
The method of claim 1, further comprising:

Determine whether the time interval between the current node to be detected and the last historical monitoring time is less than a preset time threshold;

If so, abandon the current node to be detected.
A blockchain security monitoring device, characterized in that it includes:

an acquisition module, used to acquire the data strip to be detected and the total amount of preset monitoring resources;

a determination module, configured to select a node to be detected according to the confidence, monitoring frequency and usage of the storage node corresponding to the data strip to be detected;

The monitoring module is configured to allocate monitoring resources for each stored data block based on the preset monitoring resource allocation rules and the preset total amount of monitoring resources and according to the access frequency of the stored data blocks in the nodes to be detected, so as to ensure the security of the nodes to be detected monitor.
An electronic device, comprising: at least one processor and a memory;

the memory stores computer-executable instructions;

The at least one processor executes computer-implemented instructions stored in the memory, causing the at least one processor to perform the method of any one of claims 1-7.
A computer-readable storage medium, wherein computer-executable instructions are stored in the computer-readable storage medium, and when a processor executes the computer-executable instructions, the computer-executable instructions as claimed in any one of claims 1 to 7 are implemented. method.