An efficient approach to secure smart contract of Ethereum blockchain using hybrid security analysis approach

被引:15
作者
Kushwaha, Satpal Singh [1 ]
Joshi, Sandeep [1 ]
Gupta, Amit Kumar [1 ]
机构
[1] Manipal Univ Jaipur, Dept Comp Sci & Engn, Jaipur, Rajasthan, India
关键词
Ethereum; Smart contract; Security; Vulnerability; Hybrid analysis; Decentralized; Blockchain;
D O I
10.47974/JDMSC-1815
中图分类号
O29 [应用数学];
学科分类号
070104 ;
摘要
The technology behind blockchain is quickly becoming one of the most crucial innovations in recent years. The Smart contracts are digital agreements, made in between two untrusted parties. Smart contracts are self-executable small piece of code that gets executed due to some predefined triggering conditions. Smart contracts store cryptocurrencies as their balances and deal in cryptocurrencies on network transactions. Because of this, smart contracts are constantly open to the possibility of being attacked. A single security vulnerability can make the smart contract very much insecure. The immutability property of the blockchain ensures that, once a smart contract has been placed on the blockchain, cannot be modified in any way. So, the smart contract must be analyzed for any kind of security vulnerability before its deployment on the blockchain. Existing analysis approaches detect vulnerabilities with high false positive rates. Our proposed approach analyses the smart contracts using a hybrid combination of pattern matching and symbolic execution, which produces results with a low false positive rate. We have performed a comparative analysis of our proposed approach to prove its efficiency with the existing research approaches on a data set of 453 smart contracts with tagged vulnerabilities.
引用
收藏
页码:1499 / 1517
页数:19
相关论文
共 25 条
[1]   SolAnalyser: A Framework for Analysing and Testing Smart Contracts [J].
Akca, Sefa ;
Rajan, Ajitha ;
Peng, Chao .
2019 26TH ASIA-PACIFIC SOFTWARE ENGINEERING CONFERENCE (APSEC), 2019, :482-489
[2]  
Averin A., 2019, 2019 INT MULT IND EN, P1, DOI [DOI 10.1109/FAREASTCON.2019.8934243, DOI 10.1109/FAREASTCON.2019]
[3]   GasChecker: Scalable Analysis for Discovering Gas-Inefficient Smart Contracts [J].
Chen, Ting ;
Feng, Youzheng ;
Li, Zihao ;
Zhou, Hao ;
Luo, Xiaopu ;
Li, Xiaoqi ;
Xiao, Xiuzhuo ;
Chen, Jiachi ;
Zhang, Xiaosong .
IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTING, 2021, 9 (03) :1433-1448
[4]  
etherscan, ETH ETH BLOCKCH EXPL
[5]   Slither: A Static Analysis Framework For Smart Contracts [J].
Feist, Josselin ;
Greico, Gustavo ;
Groce, Alex .
2019 IEEE/ACM 2ND INTERNATIONAL WORKSHOP ON EMERGING TRENDS IN SOFTWARE ENGINEERING FOR BLOCKCHAIN (WETSEB 2019), 2019, :8-15
[6]   Addressing the DAO Insider Attack in RPL's Internet of Things Networks [J].
Ghaleb, Baraq ;
Al-Dubai, Ahmed ;
Ekonomou, Elias ;
Qasem, Mamoun ;
Romdhani, Imed ;
Mackenzie, Lewis .
IEEE COMMUNICATIONS LETTERS, 2019, 23 (01) :68-71
[7]  
github, ConsenSys. Mythril.
[8]  
github, SmartBugs Wild Dataset
[9]  
github, SB Curated: A Curated Dataset of Vulnerable Solidity Smart Contracts
[10]   MadMax: Surviving Out-of-Gas Conditions in Ethereum Smart Contracts [J].
Grech, Neville ;
Kong, Michael ;
Jurisevic, Anton ;
Brent, Lexi ;
Scholz, Bernhard ;
Smaragdakis, Yannis .
PROCEEDINGS OF THE ACM ON PROGRAMMING LANGUAGES-PACMPL, 2018, 2 (OOPSLA)