[en] Payment systems are a critical component of everyday life in our society. While in many situations payments are still slow, opaque, siloed, expensive or even fail, users expect them to be fast, transparent, cheap, reliable and global. Recent technologies such as distributed ledgers create opportunities for near-real-time, cheaper and more transparent payments. However, in order to achieve a global payment system, payments should be possible not only within one ledger, but also across different ledgers and geographies.In this paper we propose Secure Payments with Overlay Networks (SPON), a service that enables global payments across multiple ledgers by combining the transaction exchange provided by the Interledger protocol with an intrusion-tolerant overlay of relay nodes to achieve (1) improved payment latency, (2) fault-tolerance to benign failures such as node failures and network partitions, and (3) resilience to BGP hijacking attacks. We discuss the design goals and present an implementation based on the Interledger protocol and Spines overlay network. We analyze the resilience of SPON and demonstrate through experimental evaluation that it is able to improve payment latency, recover from path outages, withstand network partition attacks, and disseminate payments fairly across multiple ledgers. We also show how SPON can be deployed to make the communication between different ledgers resilient to BGP hijacking attacks.
Centre de recherche :
Interdisciplinary Centre for Security, Reliability and Trust (SnT) > Services and Data management research group (SEDAN)
Disciplines :
Sciences informatiques
Auteur, co-auteur :
TRESTIOREANU, Lucian Andrei ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SEDAN
Nita-Rotaru, Cristina; Northeastern University, Boston, USA > Khoury College of Computer Sciences
Malhotra, Aanchal; Xpring / Northeastern University, Boston, USA
STATE, Radu ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > SEDAN
Co-auteurs externes :
yes
Langue du document :
Anglais
Titre :
SPON: Enabling Resilient Inter-Ledgers Payments with an Intrusion-Tolerant Overlay
Date de publication/diffusion :
04 octobre 2021
Nom de la manifestation :
IEEE Conference on Communications and Network Security
Lieu de la manifestation :
Tempe, AZ, Etats-Unis
Date de la manifestation :
4-6 October 2021
Manifestation à portée :
International
Titre du périodique :
IEEE Conference on Communications and Network Security
"An introduction to hyperledger, " https://www. hyperledger. org/learn/whitepapers, accessed: May 2021.
R. G. Brown, "The corda platform: An introduction, " https://www. corda. net/content/corda-platform-whitepaper. pdf, accessed: May 2021.
A. Baliga, I. Subhod, P. Kamat, and S. Chatterjee, "Performance evaluation of the quorum blockchain platform, " https://arxiv. org/pdf/1809. 03421. pdf, accessed: May 2021.
"Stellar consensus protocol, " https://www. stellar. org/papers/stellarconsensus-protocol?locale=en, accessed: May 2021.
"Open chain white paper, " https://docs. openfuture. io/OPEN-Chain-White-Paper. html, accessed: May 2021.
S. Thomas and E. Schwartz. (2016) A protocol for interledger payments. [Online]. Available: https://interledger. org/interledger. pdf
G. Yadav and K. Paul, "Architecture and security of scada systems: A review, " 2020.
M. Apostolaki, A. Zohar, and L. Vanbever, "Hijacking bitcoin: Routing attacks on cryptocurrencies, " in 2017 IEEE Symposium on Security and Privacy (SP), May 2017, pp. 375-392.
A. E. Gencer, S. Basu, I. Eyal, R. van Renesse, and E. G. Sirer, Decentralization in Bitcoin and Ethereum Networks. Springer Berlin Heidelberg, 2018.
M. Corallo, https://bitcoinfibre. org/, accessed: May 2021.
U. Klarman, S. Basu, A. Kuzmanovic, and E. G. Sirer, "bloXroute: A scalable trustless blockchain distribution network WHITEPAPER, " in IEEE Internet of Things Journal, 2018.
D. Obenshain, T. Tantillo, A. Babay, J. Schultz, A. Newell, M. E. Hoque, Y. Amir, and C. Nita-Rotaru, "Practical intrusion-tolerant networks, " in 2016 IEEE 36th International Conference on Distributed Computing Systems (ICDCS), June 2016, pp. 45-56.
P. Ekparinya, V. Gramoli, and G. Jourjon, "Impact of man-in-themiddle attacks on ethereum, " in 2018 IEEE 37th Symposium on Reliable Distributed Systems (SRDS), 2018, pp. 11-20.
"Ilp torrent-the technical deep dive, " https://coil. com/p/sabinebertram/ILP-Torrent-The-technical-deepdive/ S2cdTMKby/, accessed: May 2021.
T. Friedline, S. Naraharisetti, and A. Weaver, "Digital redlining: Poor rural communities' access to fintech and implications for financial inclusion, " Journal of Poverty, vol. 24, no. 5-6, pp. 517-541, 2020. [Online]. Available: https://doi. org/10. 1080/10875549. 2019. 1695162
A. Studer and A. Perrig, "The coremelt attack, " in Computer Security-ESORICS 2009, M. Backes and P. Ning, Eds. Berlin, Heidelberg: Springer Berlin Heidelberg, 2009, pp. 37-52.
M. S. Kang, S. B. Lee, and V. D. Gligor, "The crossfire attack, " in 2013 IEEE Symposium on Security and Privacy, 2013, pp. 127-141.
C. Danilov, "Performance and functionality in overlay networks, " Ph. D. dissertation, The Johns Hopkins University, Baltimore, Sep. 2004. [Online]. Available: http://www. dsn. jhu. edu/_yairamir/Claudiu_thesis. pdf
A. Babay, C. Danilov, J. Lane, M. Miskin-Amir, D. Obenshain, J. Schultz, J. Stanton, T. Tantillo, and Y. Amir, "Structured overlay networks for a new generation of internet services, " in 2017 IEEE 37th International Conference on Distributed Computing Systems (ICDCS), June 2017, pp. 1771-1779.
Y. Amir, C. Danilov, J. Schultz, D. Obenshain, T. Tantillo, and A. Babay. (2020, Mar.) Spines. [Online]. Available: http://spines. org
A. Babay, E. Wagner, M. Dinitz, and Y. Amir, "Timely, reliable, and cost-effective internet transport service using dissemination graphs, " in 2017 IEEE 37th International Conference on Distributed Computing Systems (ICDCS), June 2017, pp. 1-12.
W. Bi, H. Yang, and M. Zheng, "An accelerated method for message propagation in blockchain networks, " ArXiv, vol. abs/1809. 00455, 2018.
Y. Amir, C. Danilov, S. Goose, D. Hedqvist, and A. Terzis, "An overlay architecture for high-quality voip streams, " IEEE Transactions on Multimedia, vol. 8, no. 6, pp. 1250-1262, Dec 2006.
M. Apostolaki, G. Marti, J. Müller, and L. Vanbever, "SABRE: protecting bitcoin against routing attacks, " in 26th Annual Network and Distributed System Security Symposium, NDSS 2019, San Diego, California, USA, February 24-27, 2019. The Internet Society, 2019. [Online]. Available: https://www. ndss-symposium. org/ndss-paper/sabreprotecting-bitcoin-against-routing-attacks/
N. Brawn and R. Huber. (2019) Nebula. [Online]. Available: https://github. com/slackhq/nebula
A. Rodriguez-Natal, J. Paillisse, F. Coras, A. Lopez-Bresco, L. Jakab, M. Portoles-Comeras, P. Natarajan, V. Ermagan, D. Meyer, D. Farinacci, F. Maino, and A. Cabellos-Aparicio, "Programmable Overlays via OpenOverlayRouter, " IEEE Communications Magazine, vol. 55, no. 6, pp. 32-38, June 2017.