Mobile Networks and Management. 9th International Conference, MONAMI 2017, Melbourne, Australia, December 13-15, 2017, Proceedings

Research Article

Malicious Bitcoin Transaction Tracing Using Incidence Relation Clustering

Download
696 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-90775-8_25,
        author={Baokun Zheng and Liehuang Zhu and Meng Shen and Xiaojiang Du and Jing Yang and Feng Gao and Yandong Li and Chuan Zhang and Sheng Liu and Shu Yin},
        title={Malicious Bitcoin Transaction Tracing Using Incidence Relation Clustering},
        proceedings={Mobile Networks and Management. 9th International Conference, MONAMI 2017, Melbourne, Australia, December 13-15, 2017, Proceedings},
        proceedings_a={MONAMI},
        year={2018},
        month={5},
        keywords={Bitcoin Blockchain Incidence relation Cluster},
        doi={10.1007/978-3-319-90775-8_25}
    }
    
  • Baokun Zheng
    Liehuang Zhu
    Meng Shen
    Xiaojiang Du
    Jing Yang
    Feng Gao
    Yandong Li
    Chuan Zhang
    Sheng Liu
    Shu Yin
    Year: 2018
    Malicious Bitcoin Transaction Tracing Using Incidence Relation Clustering
    MONAMI
    Springer
    DOI: 10.1007/978-3-319-90775-8_25
Baokun Zheng,*, Liehuang Zhu1,*, Meng Shen1,*, Xiaojiang Du2,*, Jing Yang1,*, Feng Gao1,*, Yandong Li1,*, Chuan Zhang1,*, Sheng Liu3,*, Shu Yin3,*
  • 1: Beijing Institute of Technology
  • 2: Temple University
  • 3: Union Mobile Financial Technology Co., Ltd.
*Contact email: zhengbk168@163.com, liehuangz@bit.edu.cn, shenmeng@bit.edu.cn, dxj@ieee.org, jingy@bit.edu.cn, gaofengbit@foxmail.com, leeyandong@bit.edu.cn, chuanzdlut@163.com, liusheng@umfintech.com, yinshu@umfintech.com

Abstract

Since the generation of Bitcoin, it has gained attention of all sectors of the society. Law breakers committed crimes by utilizing the anonymous characteristics of Bitcoin. Recently, how to track malicious Bitcoin transactions has been proposed and studied. To address the challenge, existing solutions have limitations in accuracy, comprehensiveness, and efficiency. In this paper, we study Bitcoin blackmail virus WannaCry event incurred in May 2017. The three Bitcoin addresses disclosed in this blackmail event are only restricted to receivers accepting Bitcoin sent by victims, and no further transaction has been found yet. Therefore, we acquire and verify experimental data by example of similar Bitcoin blackmail virus CryptoLocker occurred in 2013. We focus on how to track malicious Bitcoin transactions, and adopt a new heuristic clustering method to acquire incidence relation between addresses of Bitcoin and improved Louvain clustering algorithm to further acquire incidence relation between users. In addition, through a lot of experiments, we compare the performance of our algorithm with another related work. The new heuristic clustering method can improve comprehensiveness and accuracy of the results. The improved Louvain clustering algorithm can increase working efficiency. Specifically, we propose a method acquiring internal relationship between Bitcoin addresses and users, so as to make Bitcoin transaction deanonymisation possible, and realize a better utilization of Bitcoin in the future.