Initial Evidence of Elevated Reconnaissance Attacks Against Nodes in P2P Overlay Networks
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2024
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866916497349148672 |
|---|---|
| author | Seidenberger, Scott Maiti, Anindya |
| author_facet | Seidenberger, Scott Maiti, Anindya |
| contents | We hypothesize that peer-to-peer (P2P) overlay network nodes can be attractive to attackers due to their visibility, sustained uptime, and resource potential. Towards validating this hypothesis, we investigate the state of active reconnaissance attacks on Ethereum P2P network nodes by deploying a series of honeypots alongside actual Ethereum nodes across globally distributed vantage points. We find that Ethereum nodes experience not only increased attacks, but also specific types of attacks targeting particular ports and services. Furthermore, we find evidence that the threat assessment on our nodes is applicable to the wider P2P network by having performed port scans on other reachable peers. Our findings provide insights into potential mitigation strategies to improve the security of the P2P networking layer. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2411_14623 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Initial Evidence of Elevated Reconnaissance Attacks Against Nodes in P2P Overlay Networks Seidenberger, Scott Maiti, Anindya Cryptography and Security Networking and Internet Architecture We hypothesize that peer-to-peer (P2P) overlay network nodes can be attractive to attackers due to their visibility, sustained uptime, and resource potential. Towards validating this hypothesis, we investigate the state of active reconnaissance attacks on Ethereum P2P network nodes by deploying a series of honeypots alongside actual Ethereum nodes across globally distributed vantage points. We find that Ethereum nodes experience not only increased attacks, but also specific types of attacks targeting particular ports and services. Furthermore, we find evidence that the threat assessment on our nodes is applicable to the wider P2P network by having performed port scans on other reachable peers. Our findings provide insights into potential mitigation strategies to improve the security of the P2P networking layer. |
| title | Initial Evidence of Elevated Reconnaissance Attacks Against Nodes in P2P Overlay Networks |
| topic | Cryptography and Security Networking and Internet Architecture |
| url | https://arxiv.org/abs/2411.14623 |