{"id":5409,"date":"2018-03-04T03:04:09","date_gmt":"2018-03-04T03:04:09","guid":{"rendered":"https:\/\/www.legitgambling.com\/news\/?p=5409"},"modified":"2018-03-04T03:07:10","modified_gmt":"2018-03-04T03:07:10","slug":"ethereum-network-defends-eclipse-attacks","status":"publish","type":"post","link":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/","title":{"rendered":"How Ethereum Network Defends Itself From Eclipse Attacks?"},"content":{"rendered":"

\"\"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger. The patch was released after researchers at Boston University and University of Pittsburgh highlighted a vulnerability, known as \u201ceclipse attack.\u201d<\/strong><\/p>\n

What is an eclipse attack?<\/h2>\n

Eclipse attacks are network-level attacks carried out by other nodes by hoarding and monopolizing the victim’s peer-to-peer connection slots, keeping the node in an isolated network. These types of attacks are meant to isolate nodes by keeping up-to-date blockchain information from reaching the eclipsed node.<\/p>\n

According to Bleepingcomputer<\/a>, even Bitcoin is vulnerable to eclipse attacks. However, it requires thousands of malicious nodes to attack Bitcoin network. In case of Ethereum network, there was a need for only two malicious nodes to initiate the attack.<\/p>\n

Possible damages from an eclipse attack<\/h2>\n

Eclipse attacks prevent a cryptocurrency user<\/a> from connecting to real peers. Attacker-controlled peers redirect the target to a manipulated version of the blockchain network. That means transactions and contractual obligations can be modified at will. Even the affected party\u2019s computing power can be used to manipulate algorithms that establish crucial user consensus. Notably, self-enforcing \u201csmart contracts\u201d can also be modified.<\/p>\n

What does the research paper say?<\/h2>\n

Ethereum’s P2P network includes a mechanism for cryptographically authenticating messages. By default, peers establish 13 outgoing connections, versus eight for Bitcoin. Therefore, it was believed that Ethereum is less vulnerable to attacks than Bitcoin. However, the research report explained<\/a> that it was the opposite.<\/p>\n

\u201cWe demonstrate that the conventional wisdom is false. We present new eclipse attacks showing that, prior to the disclosure of this work in January 2018, Ethereum’s peer-to-peer network was significantly less secure than that of Bitcoin. Our eclipse attackers need only control two machines, each with only a single IP address. The attacks are off-path-the attacker controls endhosts only and does not occupy a privileged position between the victim and the rest of the Ethereum network. By contrast, the best known off-path eclipse attacks on Bitcoin require the attacker to control hundreds of host machines, each with a distinct IP address. For most Internet users, it is far from trivial to obtain hundreds (or thousands) of IP addresses. This is why the Bitcoin eclipse attacker envisioned [in the 2015 research] was a full-fledged botnet or Internet Service Provider, while the BGP-hijacker Bitcoin eclipse attacker envisioned [in the 2016 paper] needed access to a BGP-speaking core Internet router. By contrast, our attacks can be run by any kid with a machine and a script.\u201d<\/p><\/blockquote>\n

In January, the researchers informed Ethereum developers about the vulnerability. That led to the coding of version 1.8. The latest fix does not eliminate the attack, but raises the bar. The number of nodes required to attach the Ethereum network has been raised from two to thousands.<\/p>\n

Three possible attacks on Ethereum network<\/h2>\n

The research paper titled \u201cLow-Resource Eclipse Attacks on Ethereum’s Peer-to-Peer Network,\u201d described two possible attacks.<\/p>\n

According to ars Technica<\/a>, the simplest one relied on two IP addresses, which each generate large numbers of cryptographic keys that the Ethereum protocol uses to designate peer-to-peer nodes. The attacker then waits for a target to reboot the computer, either in the due course of time, or after the hacker sends various malicious packets that cause a system crash. As the target is rejoining the Ethereum network, the attacker uses the pool of nodes to establish incoming connections before the target can establish any outgoing ones. Ethereum developers have put a countermeasure in place against the attack. The patch would ensure that each node will always make outgoing connections to other peers.<\/p>\n

The second technique works by creating a large number of attacker-controlled nodes and sending a special packet that effectively poisons the target’s database with the fraudulent nodes. When the target reboots, all of the peers it connects to will belong to the attacker. In both cases, once the target is isolated from legitimate nodes, the attacker can present a false version of the blockchain. With no peers challenging that version, the target will assume the manipulated version is the official blockchain. The fix for this attack involved limiting the number of outgoing connections a target can make to the same \/24 chunk of IP address to 10. The changes are designed to make it significantly harder to completely isolate a user from other legitimate users. When even a single node presents users with a different version of the blockchain, they will be warned of an error that effectively defeats the attack.<\/p>\n

Other than the two described above, there is another easy way to attack an Ethereum network. it works by setting the target’s computer clock 20 or more seconds ahead of the other nodes in the Ethereum network. The same researchers published a separate paper in 2015. To prevent so-called replay attacks\u2014in which a hacker resends an old authenticated message in an attempt to get it executed more than once\u2014the Ethereum protocol rejects messages that are more than 20 seconds old. By setting a target’s clock ahead, attackers can cause the target to lose touch with all legitimate users. The attackers use malicious nodes with the same clock time to connect to the target. Ethereum developers haven’t implemented a fix for the time-based attack. Since it generally requires an attacker to manipulate traffic over the target’s Internet connection or to exploit non-Ethereum vulnerabilities on the target’s computer, it likely poses less of a threat than the other two attacks.<\/p>\n

The researchers have suggested node operators to upgrade to geth v1.8.<\/p>\n","protected":false},"excerpt":{"rendered":"

Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger. The patch was released after researchers at Boston University and University of Pittsburgh highlighted a vulnerability, known as \u201ceclipse attack.\u201d What is an eclipse attack? Eclipse […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[68,70],"tags":[],"class_list":["post-5409","post","type-post","status-publish","format-standard","hentry","category-cryptocurrency","category-ethereum"],"yoast_head":"\nHow Ethereum Network Defends Itself From Eclipse Attacks?<\/title>\n<meta name=\"description\" content=\"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Ethereum Network Defends Itself From Eclipse Attacks?\" \/>\n<meta property=\"og:description\" content=\"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-04T03:04:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-03-04T03:07:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/ethereum.jpg\" \/>\n<meta name=\"author\" content=\"Cameron Bishop\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cameron Bishop\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/\"},\"author\":{\"name\":\"Cameron Bishop\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\"},\"headline\":\"How Ethereum Network Defends Itself From Eclipse Attacks?\",\"datePublished\":\"2018-03-04T03:04:09+00:00\",\"dateModified\":\"2018-03-04T03:07:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/\"},\"wordCount\":940,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/ethereum.jpg\",\"articleSection\":[\"Cryptocurrency\",\"Ethereum\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/\",\"name\":\"How Ethereum Network Defends Itself From Eclipse Attacks?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/ethereum.jpg\",\"datePublished\":\"2018-03-04T03:04:09+00:00\",\"dateModified\":\"2018-03-04T03:07:10+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\"},\"description\":\"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/ethereum-network-defends-eclipse-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/ethereum.jpg\",\"contentUrl\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/ethereum.jpg\",\"width\":380,\"height\":250},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/#\\\/schema\\\/person\\\/0e2e077765174748afc2362c890e3f91\",\"name\":\"Cameron Bishop\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g\",\"caption\":\"Cameron Bishop\"},\"description\":\"Cameron works tirelessly behind the scenes ensuring his many US news stories are factual, informative and brought to you in a timely fashion before most other media outlets have them. He is an investigative journalist at heart who also has a fond interest in the money and business markets too.\",\"url\":\"https:\\\/\\\/www.legitgambling.com\\\/news\\\/author\\\/cameron-bishop\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Ethereum Network Defends Itself From Eclipse Attacks?","description":"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/","og_locale":"en_US","og_type":"article","og_title":"How Ethereum Network Defends Itself From Eclipse Attacks?","og_description":"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger.","og_url":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/","article_published_time":"2018-03-04T03:04:09+00:00","article_modified_time":"2018-03-04T03:07:10+00:00","og_image":[{"url":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/ethereum.jpg","type":"","width":"","height":""}],"author":"Cameron Bishop","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cameron Bishop","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/#article","isPartOf":{"@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/"},"author":{"name":"Cameron Bishop","@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91"},"headline":"How Ethereum Network Defends Itself From Eclipse Attacks?","datePublished":"2018-03-04T03:04:09+00:00","dateModified":"2018-03-04T03:07:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/"},"wordCount":940,"commentCount":0,"image":{"@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/ethereum.jpg","articleSection":["Cryptocurrency","Ethereum"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/","url":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/","name":"How Ethereum Network Defends Itself From Eclipse Attacks?","isPartOf":{"@id":"https:\/\/www.legitgambling.com\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/#primaryimage"},"image":{"@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/ethereum.jpg","datePublished":"2018-03-04T03:04:09+00:00","dateModified":"2018-03-04T03:07:10+00:00","author":{"@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91"},"description":"Ethereum network developers recently released geth v1.8 for node operators. The patch plugs the security loophole that can be used to manipulate individual users\u2019 access to the public ledger.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.legitgambling.com\/news\/ethereum-network-defends-eclipse-attacks\/#primaryimage","url":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/ethereum.jpg","contentUrl":"https:\/\/www.legitgambling.com\/news\/wp-content\/uploads\/2018\/01\/ethereum.jpg","width":380,"height":250},{"@type":"WebSite","@id":"https:\/\/www.legitgambling.com\/news\/#website","url":"https:\/\/www.legitgambling.com\/news\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.legitgambling.com\/news\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.legitgambling.com\/news\/#\/schema\/person\/0e2e077765174748afc2362c890e3f91","name":"Cameron Bishop","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f635e871248df28d6828ec38af2b48c04796e65e714639cfa0c2d3d1c91b0bc7?s=96&d=monsterid&r=g","caption":"Cameron Bishop"},"description":"Cameron works tirelessly behind the scenes ensuring his many US news stories are factual, informative and brought to you in a timely fashion before most other media outlets have them. He is an investigative journalist at heart who also has a fond interest in the money and business markets too.","url":"https:\/\/www.legitgambling.com\/news\/author\/cameron-bishop\/"}]}},"_links":{"self":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts\/5409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/comments?post=5409"}],"version-history":[{"count":0,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/posts\/5409\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/media?parent=5409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/categories?post=5409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.legitgambling.com\/news\/wp-json\/wp\/v2\/tags?post=5409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}