From eb79aa8f6daa8459312f0486157ef04499c5023e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Radim=20Lipov=C4=8Dan?= Date: Sat, 11 Aug 2018 19:44:24 +0200 Subject: [PATCH] Monero use case --- Thesis.bib | 12 +++++++++++- Thesis.tex | 39 +++++++++++++++++++++++++------------- images/Screenshot_360.png | Bin 0 -> 11607 bytes 3 files changed, 37 insertions(+), 14 deletions(-) create mode 100644 images/Screenshot_360.png diff --git a/Thesis.bib b/Thesis.bib index cbb5adc..79bab04 100644 --- a/Thesis.bib +++ b/Thesis.bib @@ -408,5 +408,15 @@ Protocol @article{wijayamonero, title={Monero Ring Attack: Recreating Zero Mixin Transaction Effect}, - author={Wijaya, Dimaz Ankaa and Liu, Joseph and Steinfeld, Ron and Liu, Dongxi} + author={Wijaya, Dimaz Ankaa and Liu, Joseph and Steinfeld, Ron and Liu, Dongxi}, + year={2018} +} + + +@online{blackruby2018, + author = {Ravikant Tiwari}, + title = {Black Ruby: Combining Ransomware and Coin Miner Malware}, + year = 2018, + url = {https://www.acronis.com/en-us/blog/posts/black-ruby-combining-ransomware-and-coin-miner-malware}, + urldate = {2018-08-11} } \ No newline at end of file diff --git a/Thesis.tex b/Thesis.tex index e61beac..dec5470 100644 --- a/Thesis.tex +++ b/Thesis.tex @@ -126,6 +126,12 @@ \scantokens{#1\noexpand}% \endgroup } + +%images +\usepackage{graphicx} +\usepackage{float} +\graphicspath{ {./images/} } + \begin{document} \chapter{Introduction} @@ -675,26 +681,33 @@ Because of this targeting, they had to choose another cryptocurrency to solve th As mentioned in section Wallets, online wallets usage is a risky thing due to entrusting user's private keys to the third party. Users often choose them as they are not required to have any additional software. Due to this fact, there are more than ten domains that copy the design, functionality, and name of \url{mymonero.com} official online wallet with added code that steals user's wallet data. Detailed list of domains is avaiable at \url{https://www.reddit.com/r/Monero/wiki/avoid}. Aside from direct scams, there are also services offering wallet services which have their codebase closed and store all wallet information. Best known example of such service is \url{freewallet.org}, that is strongly criticised for closed source as well as funds that go missing from user's accounts \cite{wijayamonero}. -\subsubsection{Crypto-jacking attack}\cite{higbee2018role} - - -\subsection{Monero scam list} - -\subsection{Targeted malware} - +\subsubsection{Crypto-jacking attack} +Crypto-jacking a type of attack where the attacker delivers a malicious payload to the user's computer. Rather than rendering the device unusable either by blocking like ransomware, part of system resources is used for mining. +Crypto-jacking is becoming more frequent than ransomware as it has proven that steady but low income is profitable than one-time payment in the form of ransomware \cite{higbee2018role}. +\vspace{-1em} +\subsubsection{Black Ruby} +Interesting intersection of ransomware and crypto-jacking category is Black Ruby malware that combines features of both. First, it encrypts files on the target computer and then proceeds to mine Monero using XMRig at full CPU load \cite{blackruby2018}. +\vspace{-1em} \section{Monero use case} +Aside from code quality and features, another important factor in cryptocurrency success are the ways how users can spend the funds. While numerous community around Monero that centers around Reddit \textit{/r/Monero} created \textit{/r/XMRtrader}, there are also projects that support Monero in day-to-day use like \url{https://xmr.to/}. -\subsection{Darknet markets} +What is most noticeable tough, are darknet markets, that started to support payments by Monero. This results in the rather negative use case of the crypto as payments by Monero are not directly likable to one's wallet as described in section \ref{sec:ringsignatures}. -\subsection{Monero markets} +\begin{figure}[H] +\begin{center} -\subsection{Trading problems associated with anonymity} - -\subsection{Usage comparison with other cryptocurrencies} + \vspace{-1em} + \includegraphics[trim={0.2cm 1.8cm 0 0},clip,width=0.71\textwidth]{Screenshot_360.png} + \caption{Darknet market payment options.} + \vspace{-1.5em} + \label{pic:withoutresdrawable} +\end{center} + \end{figure} -\section{Usage anonymity} +Although darknet markets may support Monero, a short inspection of top 10 markets revealed that only 5 of them list Monero as the general way to pay. Rest of them are not forcing the sellers to use Monero. This results at about 40\% availability of Monero payment option on these type of markets. + \chapter{Monero user research} \section{Definition, research questions} diff --git a/images/Screenshot_360.png b/images/Screenshot_360.png new file mode 100644 index 0000000000000000000000000000000000000000..54807b0e3e804db9bee9ef00ec2f54396047ca0a GIT binary patch literal 11607 zcmb7q2V9d+)-H-t1O?1pduZlNhgF}m8v2gX`y#SLJhr0kRUA} zy@LdZgeHU*>J9Ghy}S4O_I`WGk0CEJbKaRbbDr~@GxPqbw(89rcW)385#3Z*Q_>?M zx=KR$zDsslg7R-h5dK_&=&33Y!BC8AgokT(@>=plL{+gAr_^%U{4|buVV%Q+zdKp>u+;&sKVv zDQT=7@KC`gKs7TysKxJjU{=NiTlLA&+a_O2&a{+7>^JOlPh6DwUjG2J8+%~5)~)V| zk0KU&LqtR^{21`)`9-6f$h1dH>w}*SvHt56(6JDqRMOZnRZNJlr28zYPu+90d(G`Y zMYUlwZLS-8ULJ*oZ^%s`Z!LeIKDogIU`MgxcI2SdEP((L& zb=?acyx-D<9~(hsUTI8pE1$~Y9Gn^XkkQRjGEp!;A?H)Yc8iGUez7Vbpkmzo)4)p0 z@!-4Y>z0-6r>^MQso(p^Q^kG54pq=i3IqtH|9L*#5aGi1kOc4#yM~}Rj z=XG5(ZXSC(XqjqYdZOh8uA!gPNB9Y}9X+nU(?$U{VH&~d`WcFR*~TYMW@*Z0PiK%z z$Bu3;cWL%q%y;%|WfBoFO8G4aPo5pMcz!M(Gj6;o6Y9O3ogTgXYaKJT!fP-#y}pUW zO-J^?e(+Lmt@*9kG@}XHSJpSLjQ0eM8}{wrATHJE&3?v95BuClKi;pAcw2k!=|#k2L-0+5T4Qp~g>P&jNG29?b^as4fkD>Hb)0uu|A@Eh+R z0scgmVLDT$d~@bU)=~sBgx4xEbX~t!g$2tF?RGz?f56SD4mS?bllsD zgo?!+p{F&0!FHS*7cqe>i=WD{8o)bfP-PXuVpf_352*%M`_eJf;vpZl#9rIdkhEIm z;&&pX?)eh*B{#|4F*Wjj1D!aYW&6=#oA{%Dw*|`<;F&Vg z4tukQ)->Ajbn+HGiMI9VLbMx(-ep&DlSkWiTRR}9Z5B4SaFysy+z-UpD%{ZAhix;k zZ3TdM_Kw9~mzqlr4|%AVEJwZWfDudwkc90UT>+h;aNBRdh_7>&5~btqHM)v!+W@6N z!3;Yk`A62><(%Rdibw?^8#E5uljYTJu-&)~9{TxfeIa2kopSzYROK&%%w~1b zsYDx0w?B5;;WwG)ym+Z2Ezz4oTUSI*CHRlLiYT3INMyiH9r)OC%CJw1n=&ilwfIhN z(FLv?oc-kK%mFXdys>19YIF92?2Q-?rx`v}jK3 zwi?yDE>Y2uG%ak+P-*}neKAe0I4|>ANZyvmPF2`RL>FrA{cIzNHD-Y#y|*tCHechN zr{ku{MtOHbnl|5j{uYPA|Ah94_q6a!JeaGyY^23+Jw4=5jkvX$ z1NP67mMguh$_7E_p%r$pAQSKh?-xOO*}=yR{>85kv+&kRx+PbL9#;tchDJ(woU8}_ z6y#kEx(PN9>j1;A|=^ATfxgLoiY^$ob_!ha{&SCP7t|K9pXw^8&1O!2QEBG!qf_8k^De zTvaniyd@{o1b5!aY%ZHY90+uOZ`e1$AV?{D+J)?o3LzrcQ6Y)tZv}Auvg-Lk2L~&` ztL9K37L}LgM}zOV_OSo$*&-Vsfc~2oZ3Yb1vmCM9Oy4{UX$=t~a0~&m&_HA>z|Jfv zQAat<^{hPuKi1{@_8(QN_=5@T!Ka6wYypbr-*>RZQme!W!jPKy+6YaE-ZWmeBqE}^ z{2$RHGGapc`*IjWUqk;?=sX9U?o2FPyZZJqEA=hIk`AW-(&WGG`)0-VB+IC(-LLU{ z2-$H?{Si)8cGxQ?eg4}o(Qai+A6R9;T3&nD~HXX=y=IlXT5rlK^kxkL6n@n+3Yy(%a@~Hi#i@6qpN3- zCUqICm@0v2wiu>0)&aey=?4LpLl6_G3Nt^fPPfes=`^1&m`EUyJeP>OtCO0Vr1IO# z$aX)|a`E61t);Fdn9r?pA-8T(*Bq-#$mVqVGeAS5gLqEs+(Wf>otaok4=<4$qAz&M zR2I8m*=u!o|3#u|hkLMfkvEVasAYrO$^HwVnXjd5lJjaJ@~ zdEh0O=48ZN-1JNisNV)RYd1U~!3a!Q4V}N1SfznWT55*2B3IXv(i8v+4VJz3IULfUF!|^ok}ZsZdV{~A|tp4<&iB;+cEBa-UZP{juaQ}xS*bF zGG0!sR_PV1$49L^)8FG)8g9->FxTsTvtchTi0vF$7=zN2fPpTek{$*jOkAH8?bz3) zc5F8i@UOu@MZH*QuSp-di-dMJkHGZHUv6+W@=yzOq^FWxrb;I^4 z)Pe7{3cd91mUVbdTM^z`X+INGvEbYtv>`Q+RimL1x;!wc3(q9JO4t;Ms1WT8*XmRp z6ojz&i-8N;I?FQxrFMZL}g$CiRVTc@4^PQa|&%2qB0i?T?sUzmi8=*Ix9N^kp7)I;( z=IiEeG4Y)=CWb&Gu4$LMS^&)^oJDyS!J&ULhx>4z(GW zLWB>1A8&4EkgXxhcW{E>9ovUl7W1Kt;>jK+?w2c?kQw3G^hmkcgd?Gx5+EPeSea^NKtc#%G!SOu8}}3uOc4v z5MLy+``y_$Aar?by?~q20T*Xq+>^M$DFrhXv|?~KTX|G1=`B8<;L5$iG8|d(F0h-{zOYV2gFwe2^TZhP-d znfW<^X4Nqcf>wo7(+%AEIkv>!?H1YablzT|X9EHV6&f?CYsz z(vhqIomQjv zs+^l^N)najvg*$D=B&_G361Y!5^I-yFyqm-a+qQv*qUTB+NfpSo3*yJNwvl$CW*uhV*o2AR z%V+8qjtU^lO%)iE0mIH5d!@2reqq>u8S}_)V(wXd zZ;6GcolDthc7iEm$`FqS3#m%wo~#zV9NgHj`SQx$ivzqSDLH-GiS_=<9RQUxbqr5`ap>r$wDyRztZd}D)r{MBUnmGYQ`UF{LPfk6&!X>$ z^A%iS0B*FYP@OA1$3TzHGmnU!xd73-i~(Rc)zB(vkM>s=_jFYKyr)u*Yi# z(#YV?79G;POwt)PwpigSHf%E-cVk?!s&7Blg%OFxo5-t69Y*?ni&De)Jen)N|3e11pEV$EccX z9)V#8Gq+)habj&r+c|m}hl>~L&OI(F=MwV0w%y{T#rEu9xSUnlA$N``%E*|_{h=h7;yPVrhKo>@HP9h!h-{(6XNm6ln|8G6I(sLb50w7v!%2c z46_eHfBzWrDVnc*rfALLqadGap9<6+x*!da7QX#KkcGq-F;fp-csK=mf}zfK3}hTe zzj1;Ft~h6#v@ z+E0s{wj4HBbujS1<0%^ZeD=aeGt9%}0Y1vg@%4tNp`5dcl=f28h?l8fx&c-35wtbN z5pGEner6+`#$mvgebo*BpRZYOn>FuG+A`m`B=r_Q z09=#;GLARxb?iglyRaP!dqNFqy37sYPT0vAUO|fR$Vhpgh6LNg1esXery3mu zU8ZJlF^`ZD@2C0Yvr{sc)CbH$_B$gnW5SZ-KX(o8cVkkPk3Ke~1G!rieA z_QnWauCX+Vix(H`EeXF(Wbk4r|Gm-lrh_#>Db7w5yXOhwgVe!?@`=^p?R(pV_kML3 zjTSoEYMR;`JTrhBJMvPtou&kiT67wlr!p!N;%9i1SMQ1(43*LRS-@Pf0wo6YO~0r* zem!<0#6Y|36NS`v_(MU37*k*BJ$2j>@ribrwsC98dh6$LR60FRcl%>e~HuI)P0 z$iWYd>@MHzivkzWewd*0*5`{1QLt;^r@d9Ypu>8zp{&=Xe4oisAs?7ma6rzywD)j< z=e%Gg;&J4sU>P`ASduV_9bbKOkHg%rsP?fB%QBv(XM-xr0iN(iTDQGSRnSt^9STP* zyBJ}`A4h@_Ie($%zdt(kMl7}*>sUq(k`vQ<&$dTC?R@`kiT%yo#pj1>imXPbOc7&L zqbV~};?#tG$;t5u*3*#uJ8-X+i0RWU`}6B^7u>n0>ftaUH-kMJVVYfBxoDla%)J(9 z)k&*g1^yK$ZA@E`?%ZkK?*ul29ukBH`XUXdQ>eNrLZh&4(WO7bI;x)gN><%I$Fuqx z$d_iaY?nHg9SFY*)8GCqNcxV35I%PHhmeOd?f>}vE%Vv>!c@r(>4TA56@f=l(P?kz zx*c#CXU{sZtub#1BYb(EP7_e;eI>>WKaG5LbeYd`&S=fAa~^e?+_se1tvjAY5}NU` zQ*cp^!UQG)%sasF-Jd!=HNhufF!)!glGr`+$ zHxp6bh@i$Fz_McJHZ+z$XoWDP_aHEsN*-$xSI8 zL=KxYfVW~!JV0F;0`yho%Jf&MDo%XDuC%Dx-X@vnaRDg8%vaic>OlRkj5RHXq=+U4 zQ$Wm9fK;kAlUh`>wP=*Re&x~286#6sdV>xlaZn)|+FV6O>;vv+rJS|8=G?G_l0TBT z_Yrqv((LB-4-#G_RUcyLl#6dpw3Um_WYO|=uv5{~t^QCo07!I{ z_a&Cb;owH!S0792yRVwmRo7n7G{-U1M+>RPPSZX?uo_%++$QdAJ|>US@Afr=oSaPrNM$ zYc>4ljGs0?{B84RPpGEf>|Nt(uw6yl^zK}=oS9H7B1b=XeUkn}SK;mx4Ch{S=DjA| zkWzsanXn8b{$q38^s{Y~qz&nE|2Hz7@<>$iWGK|JRXaNKJ7f33kfWT;f!_Z0%xdE4 z&_as>q1Vv`v>ErpBPNp68O_}{D1}?nqnD)i?}W+om_ppbP=-ofTmRe+9*Gpx-N z5zqlxySVR2RaR;wIaOBrI!b|_r$@b-D-Gm=7**Lxe4oU7;h=3fb5(HWleLRG&nohv zKMy`c+fcPo=H(5Q_5d;h97WRq4>9vU`}<;pe@VD;zZD`x&)2S6k}Hxka}tF8hlh%P z6Pcz9c%-+kYW9NHJA2wH@_leAxuXMQMny51V9;J)I7|$TL9#ZEohv^q_p?4kcoI@} zrQJ7IKE|aDM-`^06;gw zK>G_miNX;-nG8gCG%XmM7dsI4$cN2wdkyo>Xkg?bu7{1BF7Bi6GDm`B&pjIl3Ll=o zj|MK$odK;dO3xjnOV}fMukkH!UIH`%Du5N%$CsvlAO9e0S-?aBVgtRXt4JL+f7sn7 zVCBeLRybgKOjBg%R3j#EJC=V-T2$@{wW1nRZ||fQxsepwfYk($sr-u0q*n47y>8sa z6d@-`d+}5!prIg3W@Kk!-XSLV?5MuzTdsA<=J@VF`f8;w2%abihic(CQ1B7k34CwF zaBFB%NVH}zwJ~+XDlNj(jGqfc?NYZ>HK{n&rl;Wl#JP{L!gX2DtA8F`p=b8J%Q6c0 zO3E^BDh$amoiNh;9+)Rw9^F`gpK%8j>_=*U6R2Hi{}k#vx?Mdvf1z^gmYkw2=Zd7EuFhp2_dEnwE~_x&d$#Hi3kego=H7VkgC3#~JF5^m_R0 zYL>?Os^ivU4$NDARBTU}`~=Mknl%&<;C!$5YAprGol>jOLVhYhK&K~OB5!Y4A!;dD ze{lXUPnVGQ`VNO^4OtW)Dxgi-hA{mlTP<2^X2eCOWLaU?JIGB&e~&S44pjZ%Dj#7K zds89#;;=>9<8_fGR#$d@y`tnT>XVWwBYmC9j{5FWp~}GOdorX~j5Anfg?&0GP2a?z z6etz6up9};&Qsp@-2LHH90P&a-MtH+cS?2#!VYitMQt{ zuS7<@9P#&`L`|0$da8kfc!18Q>V8rehL!O>rBe#uhXU@tKa|aVAoS59?b(UpR|JBSO{a)RZ#D`6|Du`{H@=U)NRW}BfMnMqF+B90IPk^Rxj84looE$gQx4>u5*|SUOv~bNDp#!B z;$3k+FX8~{nGbW;7B`hk%KdecZ{*ACr7+V;hw1e|uzHFy5r>oMuIJ{a4BCZt`P16)+`1Py^7Qm_&Y)s=ah4SEw_D9? z)71*U@D7&XGp#>B`7?63WgFln2Xgf(7!RCIpPsGz5mzXi%wy|huq6xcPTur)C^YIO99Uq7MOUDHC(~vm z5z{XG3t#MSCEA_k$~dJKnhUr-I@EpHTCDlpJ}ZM?ZEo_rN54ohxb5?H$x)bDHtx3{ zbjz6|w{%-au~CyO7gCS>5)mqe#D{PR{*}w3v&7 z7m(BS?)HbAw>baU$+%eLKusgfH>yno#U&GIn`V@^M*SE8B-xx_u_p?9Xm|GqCK;?s z&ORMMzbVNWHUFMMFqhG~{+(kLwnu!(*txPKdUx>TQp+S%h)g`I|2{_y*Y>xZP9n}( zLCO%}l-gh88Mo}uatUCudFZ;b2;6Vxt2=Cu5A7U$Iu``& z6vWEQk~Q%!iDVdiZ?}AeHJ^qDvWADAkDG8J79!xv7Qx+GJCt{{Fj^z7oC&p9N}4`9 zN{AJW63uqiWgz&_2E&nSX_3E!#km4kUVUpMVH+|hm%5FS9$Kx8w`Y(l4#mhy$Eq+c zZ+=Zk)(B8_sX^U4(5-p625BJRrRCZCO>A5Z*a;le&q0~qqZNHGUo-!G7~fPCUz{hU zm%OSM@fD?g_fjQu6IQ181@-s~o9gG(#u z`s2g2lIY-s=;-Eq_LS-$5%C4Zxa{k|w2WMc6s!5TcL6;G!_TLC3+frQDKj}Tb+K~+ ze}HqS{r)9zs!)V(ta5lz^7=4eGyGs>m?Ib5;*)+oS%O{%>l1SQ4$U|5C>6R~s`}9y z3tdTfJYp~0>W|}0x*trtW2-1SsCY6)Ej@8=HR5Gv{jwmCpp^)ey-r(#;P6W+HOIOP{fnkL6;#ZG;E-P`w6j@DD>oWB{>QZ)I<38NO zb|ivTLg|fKUVog9>08<52R)p*nfc<;{IpzNH<)E%0c8(#;sbotXxKc>Jr;K@q4xJhayDk zUfIJ|rO$hg^Hh91ocY^~S;KsH>!y<8aY#B0YD16(ah^->=9QTJ4z)@g_a^#l-Wz@t zOIXL%>J>BAS$d_+3D~16l{7E^s_de_^6yT0{{<2EZiLF6A44xsZLT5iQE)a`{U;dw z&m5NY4{B%qKv+1U3HRD)fG@U7o&TVz>2&-k*F?lAbbKTkRwLYi+4IF9ix}ccW{3Z7UF|S=Xw?i)|lspUScyq-BCYK%ocqsRl7o548 z!LNgMqb_%on^AxFp6gxc3u>bHJ}%yZc8md6|1tYLD4j-Ooe{oIwQUIfCkSu!p2T zDEa+%CJsT<26#X6I*u-+^X# zuz#84`969f{dQzRZk=(TxTDb%F}o!pMNBGlH>HA1 z=5M@{$I>jVBHBNCuEEp1Cfg~KNmuVNb_5UdWb!rcbKYvKb!kJHQWH2I5FP#&py=S1 z{s&7*gpWcJVKI*S0xzF>xy-iw#q^%@i6DP1_qq7~hL$eoeyT*Fmt5O2x__x3WBlyW z&$^7)Mj+Bf0N|klgG{)D0aOqw4sN>xrRY#8Dx9F>Q$$PQQjgxep7%cuS6pow(Z14S z{0}V6mAPM6rU(lpVCe=v=B@Y*;p%%1f3c;9>p_kJ(RZC5=nbw$m^xXuQ0U4KkTmku ze}<$3>B+1+^UQjxW^?_Ds%7@8a{bVMz$uT@K*Bzgp1}J=_n>^|4a9NikhxF9WO&zs z@aOh>weYHolz_bD4mwQN{Jbz3SD97Z3dX=9?)p$!ziPB&i;t0KR)>ItPGt^T$dT=j z?`(TNll|!U9;gbKr?$CKGNCVBzEmwFwI+7s{_r0_T~jO-pa6-;=uf5>{gPICq_T4C zbf4zRS_VD&W~qxKimL0p-gt3cAkl<+~loK zL0U>-sUSr4j#=DvI%A*d2Qd^AApjGlQ=t@8P|^%Roarb z#*b_mJFEC(%Km`q4MYmuclbE`3I%^4on6*oWB4893XWf_OISPOg>bfQQEk@4Pm}6X z_FVhVn4BMv3No3T+>VXjpn7f$uyB01@Pm3<0kD7(ya7rWG8rhY`-yeArcs}D_HEe{p5