A carregar...
Publicação
Proof-of-Attention: uma implementação em blockchain segura e confiável?
| Nome: | Descrição: | Tamanho: | Formato: | |
|---|---|---|---|---|
| 294.12 KB | Adobe PDF |
Orientador(es)
Resumo(s)
Em 2018, a Aptoide lançou a AppCoins, uma criptomoeda baseada em Ethereum. Esta tem por base um protocolo aberto e distribuído para todos os marketplaces de aplicações Android. Com esta divisa em mente, as AppCoins foram criadas para colmatar as duas principais falhas no modelo de negócio em aplicações Android, nomeadamente a falta de transparência nas transações, e consequente falta de confiança por todas as partes envolvidas, e a falta de reaproveitamento de valor no sistema [8]. Para resolver o segundo ponto, este protocolo implementa um conceito de “prémios” (rewards) chamado Proof-of-Attention (PoA) [8], que permite a qualquer utilizador receber AppCoins Tokens após utilizar qualquer aplicação durante 2 minutos. Em suma, um desenvolvedor ao criar uma campanha de PoA para a sua aplicação, estará a criar uma pool de AppCoins Tokens que depois serão distribuídas pelos seus utilizadores. Mais tarde, estes poderão utilizar os Tokens em compras dentro de qualquer aplicação (In-App Purchases), implementando assim o conceito de economia circular. No primeiro trimestre de 2020, a Aptoide detetou que uma grande percentagem de PoA realizados eram provenientes de utilizadores fraudulentos, revelando assim falhas a nível de confiabilidade. Utilizadores maliciosos podem utilizar inúmeras técnicas para ultrapassar a segurança existente ao tentar converter um PoA, como ataques Man-in-the-Middle ou de scripting. Como tal, o objetivo deste projeto é investigar o estado da arte e avanços nas técnicas associadas ao Proof-of-Attention em duas partes: (1) garantir que este serviço está disponível para todos os utilizadores da Aptoide, através da migração da lógica de negócio relativa ao Proof-of-Attention do AppCoins Advertisement SDK para a AppCoins Wallet; (2) prevenir ataques de Man-in-the-Middle e/ou scripting, através da implementação de técnicas que garantam a confiabilidade deste serviço. No final desta investigação, espera-se poder responder à questão: “É possível desenvolver um sistema de “proof-of-attention” que seja fiável e seguro?”
In 2018, Aptoide launched AppCoins, an Ethereum-based cryptocurrency. AppCoins is based on an open and distributed protocol for all Android application marketplaces. With this motto, AppCoins were created to address the two main flaws in the business model in Android applications, namely the lack of transparency in transactions and consequent lack of trust by all parties involved, and the lack of reusing value in the system. [8]. To solve the second point, this protocol implements a concept of ”rewards” called Proof-of-Attention (PoA) [8], which allows any user to receive AppCoins Tokens after using any application for 2 minutes. In short, when a developer creates a PoA campaign for his application, he will be creating a pool of AppCoins Tokens that will then be distributed by his users. They will then be able to use these Tokens for purchases within any application (In-App Purchases), thus implementing the concept of circular economy. In the first quarter of 2020, Aptoide detected that a large percentage of PoA came from fraudulent users, thus revealing flaws in reliability. Malicious users can use numerous techniques to overcome existing security when trying to convert a PoA, such as Man-inthe-Middle or scripting attacks. As such, the objective of this project is to investigate the state of the art and advances in techniques associated with Proof-of-Attention in two parts: (1) ensure that this service is available to all Aptoide users by migrating the Proof-of-Attention business logic from the AppCoins Advertisement SDK to the AppCoins Wallet; (2) prevent Man-in-the-Middle attacks and / or scripting, through the implementation of techniques that guarantee the reliability of this service. At the end of this investigation, we hope to be able to answer the question: ”Is it possible to develop a ”proof-of-attention” system that is reliable and safe?”
In 2018, Aptoide launched AppCoins, an Ethereum-based cryptocurrency. AppCoins is based on an open and distributed protocol for all Android application marketplaces. With this motto, AppCoins were created to address the two main flaws in the business model in Android applications, namely the lack of transparency in transactions and consequent lack of trust by all parties involved, and the lack of reusing value in the system. [8]. To solve the second point, this protocol implements a concept of ”rewards” called Proof-of-Attention (PoA) [8], which allows any user to receive AppCoins Tokens after using any application for 2 minutes. In short, when a developer creates a PoA campaign for his application, he will be creating a pool of AppCoins Tokens that will then be distributed by his users. They will then be able to use these Tokens for purchases within any application (In-App Purchases), thus implementing the concept of circular economy. In the first quarter of 2020, Aptoide detected that a large percentage of PoA came from fraudulent users, thus revealing flaws in reliability. Malicious users can use numerous techniques to overcome existing security when trying to convert a PoA, such as Man-inthe-Middle or scripting attacks. As such, the objective of this project is to investigate the state of the art and advances in techniques associated with Proof-of-Attention in two parts: (1) ensure that this service is available to all Aptoide users by migrating the Proof-of-Attention business logic from the AppCoins Advertisement SDK to the AppCoins Wallet; (2) prevent Man-in-the-Middle attacks and / or scripting, through the implementation of techniques that guarantee the reliability of this service. At the end of this investigation, we hope to be able to answer the question: ”Is it possible to develop a ”proof-of-attention” system that is reliable and safe?”
Descrição
Trabalho de Projeto de Mestrado, Engenharia Informática, 2022, Universidade de Lisboa, Faculdade de Ciências
Palavras-chave
Ethereum Proof-of-Attention Ciberataques Fraude Aptoide Teses de mestrado - 2022