Technical Usability Assessment of Security Analysis Tools for Ethereum Based Smart Contracts

被引:0
|
作者
Zeeshan, Rana [1 ]
Tal, Irina [2 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin, Ireland
[2] Dublin City Univ, Sch Comp, Lero, Dublin, Ireland
来源
2022 IEEE 22ND INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY, AND SECURITY COMPANION, QRS-C | 2022年
关键词
Smart contracts; Solidity; Blockchain; Ethere-um; Security Analysis Tools; Vulnerability analysis; Usability study;
D O I
10.1109/QRS-C57518.2022.00021
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Over the past few years, Ethereum has surfaced as a widely adopted standard Blockchain platform that is increasingly being utilized to develop Decentralized Applications (DApps). By introducing Smart Contracts to software developers and programmers, Ethereum has triggered the development of countless Blockchain solutions. Among its main applications, many involve the exchange of valuable financial assets. Simply put, we cannot afford to base our Blockchain solutions or applications on potentially vulnerable smart contracts. This is where the Security Analysis Tools come into picture, for the timely detection of vulnerabilities in the Smart Contracts. Since this is a recent phenomenon, it offers a lot of research opportunities for us to contribute towards improving the existing state of security analysis tools and resolving their shortcomings. Although most of these tools have been evaluated in terms of effectiveness, installation and reliability; the literature largely lacks the technical usability perspective i.e. execution and evaluation. Therefore, based on a selection criteria, we committed our time to 4 such tools for an extensive usability assessment. We designed our usability study in a manner that combined the advantages of multiple evaluation methods. The results were useful not only in terms of comparative analysis, but also as a validation of the need of identified usability improvements.
引用
收藏
页码:87 / 95
页数:9
相关论文
共 50 条
  • [1] A security framework for Ethereum smart contracts
    Lopez Vivar, Antonio
    Sandoval Orozco, Ana Lucila
    Garcia Villalba, Luis Javier
    COMPUTER COMMUNICATIONS, 2021, 172 : 119 - 129
  • [2] Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts
    Durieux, Thomas
    Ferreira, Joao F.
    Abreu, Rui
    Cruz, Pedro
    2020 ACM/IEEE 42ND INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING (ICSE 2020), 2020, : 530 - 541
  • [3] Security Vulnerabilities in Ethereum Smart Contracts
    Mense, Alexander
    Flatscher, Markus
    IIWAS2018: THE 20TH INTERNATIONAL CONFERENCE ON INFORMATION INTEGRATION AND WEB-BASED APPLICATIONS & SERVICES, 2014, : 375 - 380
  • [4] An Extensive Security Analysis on Ethereum Smart Contracts
    Ashouri, Mohammadreza
    SECURITY AND PRIVACY IN COMMUNICATION NETWORKS, SECURECOMM 2021, PT I, 2021, 398 : 144 - 163
  • [5] A Survey of Tools for Analyzing Ethereum Smart Contracts
    di Angelo, Monika
    Salzer, Gernot
    2019 IEEE INTERNATIONAL CONFERENCE ON DECENTRALIZED APPLICATIONS AND INFRASTRUCTURES (DAPPCON), 2019, : 69 - 78
  • [6] SmartCheck: Static Analysis of Ethereum Smart Contracts
    Tikhomirov, Sergei
    Voskresenskaya, Ekaterina
    Ivanitskiy, Ivan
    Takhaviev, Ramil
    Marchenko, Evgeny
    Alexandrov, Yaroslav
    2018 IEEE/ACM 1ST INTERNATIONAL WORKSHOP ON EMERGING TRENDS IN SOFTWARE ENGINEERING FOR BLOCKCHAIN (WETSEB), 2018, : 9 - 16
  • [7] ATL Model Checking for Analysis of Ethereum Smart Contracts
    Nam W.
    Kil H.
    Transactions of the Korean Institute of Electrical Engineers, 2021, 70 (12) : 2006 - 2014
  • [8] A Massive Analysis of Ethereum Smart Contracts Empirical Study and Code Metrics
    Pinna, Andrea
    Ibba, Simona
    Baralla, Gavina
    Tonelli, Roberto
    Marchesi, Michele
    IEEE ACCESS, 2019, 7 : 78194 - 78213
  • [9] Versioned Analysis of Software Quality Indicators and Self-admitted Technical Debt in Ethereum Smart Contracts with Ethstractor
    Hassan, Khalid
    Moradi, Saeed
    Chowdhury, Shaiful
    Rouhani, Sara
    2024 IEEE INTERNATIONAL CONFERENCE ON BLOCKCHAIN, BLOCKCHAIN 2024, 2024, : 512 - 519
  • [10] Finding Ethereum Smart Contracts Security Issues by Comparing History Versions
    Chen, Jiachi
    2020 35TH IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMATED SOFTWARE ENGINEERING (ASE 2020), 2020, : 1382 - 1384