Technical Usability Assessment of Security Analysis Tools for Ethereum Based Smart Contracts

被引:0
作者
Zeeshan, Rana [1 ]
Tal, Irina [2 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin, Ireland
[2] Dublin City Univ, Sch Comp, Lero, Dublin, Ireland
来源
2022 IEEE 22ND INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY, AND SECURITY COMPANION, QRS-C | 2022年
关键词
Smart contracts; Solidity; Blockchain; Ethere-um; Security Analysis Tools; Vulnerability analysis; Usability study;
D O I
10.1109/QRS-C57518.2022.00021
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Over the past few years, Ethereum has surfaced as a widely adopted standard Blockchain platform that is increasingly being utilized to develop Decentralized Applications (DApps). By introducing Smart Contracts to software developers and programmers, Ethereum has triggered the development of countless Blockchain solutions. Among its main applications, many involve the exchange of valuable financial assets. Simply put, we cannot afford to base our Blockchain solutions or applications on potentially vulnerable smart contracts. This is where the Security Analysis Tools come into picture, for the timely detection of vulnerabilities in the Smart Contracts. Since this is a recent phenomenon, it offers a lot of research opportunities for us to contribute towards improving the existing state of security analysis tools and resolving their shortcomings. Although most of these tools have been evaluated in terms of effectiveness, installation and reliability; the literature largely lacks the technical usability perspective i.e. execution and evaluation. Therefore, based on a selection criteria, we committed our time to 4 such tools for an extensive usability assessment. We designed our usability study in a manner that combined the advantages of multiple evaluation methods. The results were useful not only in terms of comparative analysis, but also as a validation of the need of identified usability improvements.
引用
收藏
页码:87 / 95
页数:9
相关论文
共 50 条
  • [21] An ABI-based Classification Approach for Ethereum Smart Contracts
    Sun, Xun
    Lin, Xingwei
    Liao, Zhou
    2021 IEEE INTL CONF ON DEPENDABLE, AUTONOMIC AND SECURE COMPUTING, INTL CONF ON PERVASIVE INTELLIGENCE AND COMPUTING, INTL CONF ON CLOUD AND BIG DATA COMPUTING, INTL CONF ON CYBER SCIENCE AND TECHNOLOGY CONGRESS DASC/PICOM/CBDCOM/CYBERSCITECH 2021, 2021, : 99 - 104
  • [22] Ethereum smart contracts: Analysis and statistics of their source code and opcodes
    Bistarelli, Stefano
    Mazzante, Gianmarco
    Micheletti, Matteo
    Mostarda, Leonardo
    Sestili, Davide
    Tiezzi, Francesco
    INTERNET OF THINGS, 2020, 11
  • [23] Ethereum Smart Contract Analysis Tools: A Systematic Review
    Kushwaha, Satpal Singh
    Joshi, Sandeep
    Singh, Dilbag
    Kaur, Manjit
    Lee, Heung-No
    IEEE ACCESS, 2022, 10 : 57037 - 57062
  • [24] Performance analysis of Ethereum smart contracts: A Study on Gas cost and block size impact
    Do, Tien Quyet
    Ta, Minh Thanh
    2023 IEEE STATISTICAL SIGNAL PROCESSING WORKSHOP, SSP, 2023, : 591 - 595
  • [25] An Efficient Code-Embedding-Based Vulnerability Detection Model for Ethereum Smart Contracts
    Xu, Zhigang
    Chen, Xingxing
    Dong, Xinhua
    Han, Hongmu
    Yan, Zhongzhen
    Ye, Kangze
    Li, Chaojun
    Zheng, Zhiqiang
    Wang, Haitao
    Zhang, Jiaxi
    INTERNATIONAL JOURNAL OF DATA WAREHOUSING AND MINING, 2023, 19 (02)
  • [26] Classification Method of Ethereum Smart Contracts Based on Statistical Model Checking
    Lp, Miaoer
    Zhu, Yi
    Liu, Yali
    Yin, Chan
    2024 IEEE 24TH INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY AND SECURITY, QRS, 2024, : 733 - 744
  • [27] An Analysis of Smart Contracts Security Threats Alongside Existing Solutions
    Vivar, Antonio Lopez
    Castedo, Alberto Turegano
    Orozco, Ana Lucila Sandoval
    Villalba, Luis Javier Garcia
    ENTROPY, 2020, 22 (02)
  • [28] The Structural Role of Smart Contracts and Exchanges in the Centralisation of Ethereum-Based Cryptoassets
    De Collibus, Francesco Maria
    Piskorec, Matija
    Partida, Alberto
    Tessone, Claudio J.
    ENTROPY, 2022, 24 (08)
  • [29] Sound analysis and migration of data from Ethereum smart contracts
    Maha Ayub
    Muhammad Waiz Khan
    Muhammmad Umar Janjua
    Automated Software Engineering, 2024, 31
  • [30] Sound analysis and migration of data from Ethereum smart contracts
    Ayub, Maha
    Khan, Muhammad Waiz
    Janjua, Muhammmad Umar
    AUTOMATED SOFTWARE ENGINEERING, 2024, 31 (01)