BAC-L3-SEC-105Blockchain security
RPC and API security
The entry point through which a public service exposes its chain, and through which an attacker reaches it without ever touching consensus.
- Level
- L3 — Infrastructure engineer
- Duration
- 3 h
- Track
- Blockchain security
- Maintainer
- Blockchain Security Engineer
Learning objectives
- 01Filter exposed methods according to the node's role
- 02Protect an RPC service against abuse and exhaustion
- 03Detect abnormal use through metrics
Guided lab
Freeze a node with a legitimate but expensive query, then build the defence.
Independent lab
Deploy abuse detection on the cohort's RPC service and trigger it.
Security angle
The offensive exercise runs exclusively on the cohort's infrastructure, within an announced window.
Assessment
Defence tested by a peer's attack, with no outage.