10

This question already has an answer here:

So it seems like all of the security solutions mentioned so far are focused on preventing double spend attacks.

But what about attacks that aren't motivated by actually successfully double spending?

What if, for example, a government entity or a malicious hacker group or a hedge fund wanted to simply grind IOTA to a halt for no direct monetary gain of its own?

Without the central Coordinator, couldn't such a group just spam hundreds of thousands of conflicting transactions at random nodes in the tangle? Sure, there's a tiny bit of proof of work involved in every transaction, but it's supposedly minimal enough that a battery powered IoT device can handle it.

In this scenario, wouldn't legit transactions pile up on top of all of the bad actor conflicting transactions? Then when enough nodes discovered the conflicting transactions, they'd have to discard all of the legit transactions as well. It's easy to imagine these conflicting transactions covering the tangle in muck, making it so few legit transactions could get through (and would therefore have to be reissued).

Without a central coordinator preventing such an attack, what's there to prevent it? Again, this has nothing to do with double spending.

marked as duplicate by Helmar, Zauz, aboose, ben75, Tobi MZ Dec 30 '17 at 11:15

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • You said that your scenario has "nothing to do with double spend". Ok, it means that those evil transactions have invalid signature ? In this case an honest node will never consider those evil tx as tip and no valid tx will be attached to them. – ben75 Dec 17 '17 at 9:40
  • Conflicting tx and double spend is the same concept. As far as I undderstand your point, the only diff is the goal of the attacker. – ben75 Dec 17 '17 at 9:50
  • 1
    I clarified the title. What I mean is that the attacker isn't trying to successfully double spend, but rather just trying to disrupt the network with double spend attempts. – Ian Fisch Dec 17 '17 at 10:04
  • Hi Ian, what is the difference to the attack scenario lex describes in his question? – Helmar Dec 17 '17 at 14:36
  • I think the questions are somewhat similar, but that one wasn't actually answered either. – Ian Fisch Dec 17 '17 at 21:17