| In recent years,the integrated application of blockchain technology has gradually become an important driving force for new technological innovation and industrial transformation.Various industries have increased investment,research and development,and application implementation of blockchain related technologies,and the integration of blockchain technology and the real economy is accelerating.With the rapid development of blockchain technology and applications,many industries’blockchain applications are still in the exploratory stage.In the process of exploring blockchain applications,the obstacles to security risks are gradually becoming prominent.Although blockchain provides reliable security guarantees in the underlying technology,attackers can still find security issues in the blockchain system and carry out attacks,and the losses caused by network attacks are increasing year by year.At present,the research and application of security detection for blockchain applications are relatively scattered,and most detection technologies and tools can only detect the security of a certain blockchain technology.In response to the current demand for blockchain application security detection and evaluation in various industries,as well as the insufficient coverage of existing detection technologies such as smart contract detection technology,this paper proposes a blockchain core technology security evaluation scheme and conducts research and implementation on relevant detection and evaluation key technologies and systems.The main work of this paper is as follows:1.Proposed a blockchain core technology security evaluation system model.The core security detection layer in this model covers three parts:smart contracts,consensus mechanisms,and upper layer applications that are most attacked in blockchain systems.This model integrates security detection and evaluation technology into the blockchain system itself,achieving systematization,automation of security detection,and reliable traceability of subsequent detection results.2.Proposed key solutions for security assessment of blockchain core technologies.Design a security evaluation scheme based on the detection schemes of the three core blockchain technologies mentioned in the above model,which combines fuzzy analytic hierarchy process to provide evaluation criteria.This scheme optimizes the smart contract audit technology based on static detection to cover a wider range of security indicator evaluation needs and designs a consensus mechanism security detection method based on two invocation methods and an application security detection method based on fuzzing testing.At the same time,referring to industry authority literature,fuzzy analytic hierarchy process is used to calculate the required weights for evaluation and provide specific evaluation indicators.This evaluation scheme provides a relatively objective and accurate evaluation method for blockchain security level by combining analytical methods while covering the most vulnerable blockchain technologies.3.Designed and implemented a blockchain core technology security evaluation system.This paper adopts Hyperledger Fabric as the underlying blockchain architecture to support trusted traceability of detection results.The above model and solution are implemented in code and integrated into the system,which achieves security evaluation of the blockchain system in a user-friendly manner;And the functionality and performance of the system were tested,and the test results showed that the model and scheme proposed in this paper have good feasibility. |