See how Ahnheng Xuanwu Shield solves information security issues in blockchain games

Recently, Octopus Entertainment's leader meeting with the theme of "Blockchain Games Make Change Happen" was successfully held in Hangzhou. The meeting invited X.com Exchange, Ahnheng Information, Today's Coin Circle, Skyline Capital, Leilu Finance, Jiuzhou Capital and other leading companies in related industries to attend the meeting and share relevant technologies and knowledge on the game industry under the current blockchain environment.

In 2018, the hottest word is probably blockchain. Following "Internet +", "blockchain +" has become a new popular element due to its promising development prospects. Games are the best application scenario with natural soil for the entire blockchain.

The combination of blockchain and games has made many people see unlimited prospects, but it has also aroused the undue desires of lawbreakers. In the development of blockchain games, information security issues have become a major technical challenge. Hackers can destroy the blockchain environment and conduct illegal operations, which will cause huge economic losses and may even lead to the overthrow of the entire project.

Octopus Entertainment Blockchain Game Platform is one of the first blockchain + game + social digital entertainment ecological applications launched. It attaches great importance to the security of the blockchain ecosystem and is very concerned about common plug-in issues, account security, information security, data security, server and operation and maintenance security.

According to research, common forms of attacks on blockchain mainly manifest in six aspects: data layer, network layer, incentive layer, consensus layer, contract layer and business layer.

Based on the exploration, analysis and summary of mainstream attack incidents in different application scenarios of blockchain, ANHENG Information Storm Center proposed multiple security solutions for different scenarios, including DDoS defense, security reinforcement, penetration testing, anti-APT attack, data protection, and big data visualization analysis. Finally, it integrated and formed ANHENG Information Blockchain Industry Security - an overall solution for the entire life cycle of external defense and internal control.

Jia Tengfei, product manager of Smart City Security Storm Center, shared the blockchain security response plan on site

The gaming industry needs to be online 24/7, with large business investment, short life cycle, and high real-time requirements. In addition, the asymmetry between attack and defense makes the defense cost high. Usually, the defense cost is dozens of times the attack cost. New attack methods such as DNS, NTP, SNMP, and BT pose a huge challenge to the defense capabilities of enterprises.

The high profits and high competitiveness of the industry have intensified DDoS attacks. The attack methods are dynamic and complex. Simple static defense strategies can no longer effectively defend against attacks. Once an attack occurs, the number of players will drop sharply, which may cause the game to be offline.

Xuanwu Shield Cloud Protection has a DDoS protection capability of up to 2.5T, supports off-site disaster recovery and intelligent routing; it has a patented CC detection algorithm to effectively protect against CC slow attacks, malicious crawlers, meat machines and other application-layer DDoS attacks.

Xuanwu Shield security reinforcement can effectively prevent secondary packaging, hacker debugging and analysis, and tracking of key logic, avoiding the insertion of hacking Trojans and causing public relations crises. The security component SDK provides functions such as secure storage, secure encryption, secure signature, and secure detection, which can effectively resist risks such as plug-ins and secondary packaging, and ensure the integrity of platform applications, the credibility of the execution environment, and data confidentiality. It can also maximize business security and ensure a high-level experience for game users.

The asset security management of the gaming industry on the blockchain is relatively large in scale, with many business support systems. Gateways, bandwidth, databases, billing system-related storage systems, domain name DNS systems, CDN systems, etc. may have weaknesses.

Anheng Xuanwu Shield can improve the network security of blockchain platform games by designing and adjusting network security strategies, conducting security penetration tests, risk assessments and network architecture analysis, database and log security audits, vulnerability monitoring and management, and security early warning mechanisms.

APT attacks have always been a headache for the security industry. Latency and persistence are the biggest threat features of APT attacks, which target specific objects and steal data in a long-term, planned and organized manner. APT attacks are a common security issue for both the blockchain and the gaming industry.

In response to this attack, Storm Center has customized a specific Xuanwu Shield cloud protection response strategy: vulnerability detection management, domain name hijacking monitoring, tampering change monitoring, website invisibility, visual security protection, human-machine identification verification, etc. This series of cloud protection will effectively respond to APT attacks and protect the information security of the blockchain game ecosystem.

The big data analysis function of Ahnheng Xuanwu Shield conducts unified summary analysis of access and attack data, including availability analysis, attack type, attack source IP analysis, etc., to grasp the attack situation of the website in real time, and supports customized analysis function of statistical reports.

Through in-depth research on attacker portraits, behavioral characteristics, attack logic chains, and effective methods of loss evidence and recovery, we propose practical and effective means to build a security wall for enterprises and curb the attacks of cyber predators.

Through the collection, denoising, storage, mapping and other processing of monitoring data and defense data, the security elements are extracted - situation assessment - impact assessment - visualization, to form an effective regional security perception, form important site traffic analysis in the region, overall site security risk and threat analysis, and form a visual security analysis report based on multi-indicator modeling analysis.