COIN-MIXING SERVICE ANALYSIS METHOD BASED ON HEURISTIC TRADING ANALYSIS

摘要

A coin-mixing service analysis method based on heuristic trading analysis, comprising the following steps: selecting a target service to be analyzed; first, performing security analysis on the target service to be analyzed, and determining whether an API provided thereby contains a vulnerability; if the API of the target service contains a vulnerability, then obtaining sample trades directly by means of the API containing the vulnerability; and if API of the target service does not contain a vulnerability, then obtaining sample trades by means of performing an exchange with the service using a small amount of bitcoin, the sample trades comprising trades input into the service and output from the service, and an original correspondence relationship between the trades input into the service and output from the service; using a heuristic trading analysis method and a determination standard to analyze the target service and the sample trades thereof, and determine a service category to which the target service belongs, the service categories being two types, one being an switched coin-mixing service, i.e. using an output chain as a core coin-mixing process of the service, and the other being an obfuscated coin-mixing service, i.e. using centralized output trades and anonymity sets as a core coin-mixing process of the service; and for an obfuscated coin-mixing service, by means of a heuristic method, further using structural defects contained in trades generated by the coin-mixing service to identify all coin-mixing trades of a coin-mixing service of this type. Classification, category determination, and complete process analysis on the coin-mixing service helps to deeply understand the coin-mixing service, and provides clues for investigations, such as investigations into bitcoin-related criminal activities.