Technical Usability Assessment of Security Analysis Tools for Ethereum Based Smart Contracts

被引:0
作者
Zeeshan, Rana [1 ]
Tal, Irina [2 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin, Ireland
[2] Dublin City Univ, Sch Comp, Lero, Dublin, Ireland
来源
2022 IEEE 22ND INTERNATIONAL CONFERENCE ON SOFTWARE QUALITY, RELIABILITY, AND SECURITY COMPANION, QRS-C | 2022年
关键词
Smart contracts; Solidity; Blockchain; Ethere-um; Security Analysis Tools; Vulnerability analysis; Usability study;
D O I
10.1109/QRS-C57518.2022.00021
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Over the past few years, Ethereum has surfaced as a widely adopted standard Blockchain platform that is increasingly being utilized to develop Decentralized Applications (DApps). By introducing Smart Contracts to software developers and programmers, Ethereum has triggered the development of countless Blockchain solutions. Among its main applications, many involve the exchange of valuable financial assets. Simply put, we cannot afford to base our Blockchain solutions or applications on potentially vulnerable smart contracts. This is where the Security Analysis Tools come into picture, for the timely detection of vulnerabilities in the Smart Contracts. Since this is a recent phenomenon, it offers a lot of research opportunities for us to contribute towards improving the existing state of security analysis tools and resolving their shortcomings. Although most of these tools have been evaluated in terms of effectiveness, installation and reliability; the literature largely lacks the technical usability perspective i.e. execution and evaluation. Therefore, based on a selection criteria, we committed our time to 4 such tools for an extensive usability assessment. We designed our usability study in a manner that combined the advantages of multiple evaluation methods. The results were useful not only in terms of comparative analysis, but also as a validation of the need of identified usability improvements.
引用
收藏
页码:87 / 95
页数:9
相关论文
共 50 条
  • [31] HORSTIFY: Sound Security Analysis of Smart Contracts
    Holler, Sebastian
    Biewer, Sebastian
    Schneidewind, Clara
    2023 IEEE 36TH COMPUTER SECURITY FOUNDATIONS SYMPOSIUM, CSF, 2023, : 245 - 260
  • [32] Designing Secure Ethereum Smart Contracts: A Finite State Machine Based Approach
    Mavridou, Anastasia
    Laszka, Aron
    FINANCIAL CRYPTOGRAPHY AND DATA SECURITY, FC 2018, 2018, 10957 : 523 - 540
  • [33] Symbolic Value-Flow Static Analysis: Deep, Precise, Complete Modeling of Ethereum Smart Contracts
    Smaragdakis, Yannis
    Grech, Neville
    Lagouvardos, Sifis
    Triantafyllou, Konstantinos
    Tsatiris, Ilias
    PROCEEDINGS OF THE ACM ON PROGRAMMING LANGUAGES-PACMPL, 2021, 5 (OOPSLA):
  • [34] NeuCheck: A more practical Ethereum smart contract security analysis tool
    Lu, Ning
    Wang, Bin
    Zhang, Yongxin
    Shi, Wenbo
    Esposito, Christian
    SOFTWARE-PRACTICE & EXPERIENCE, 2021, 51 (10) : 2065 - 2084
  • [35] Advanced Security Auditing Methods for Solidity-Based Smart Contracts
    Xiao, Meihua
    Xu, Yangping
    Li, Zehuan
    Wan, Hongbin
    ELECTRONICS, 2024, 13 (20)
  • [36] EtherProv: provenance-aware detection, analysis, and mitigation of Ethereum smart contract security issues
    Linoy, Shlomi
    Ray, Suprio
    Stakhanova, Natalia
    2021 IEEE INTERNATIONAL CONFERENCE ON BLOCKCHAIN (BLOCKCHAIN 2021), 2021, : 11 - 20
  • [37] ADEFGuard: Anomaly detection framework based on Ethereum smart contracts behaviours
    Ndiaye, Malaw
    Diallo, Thierno Ahmadou
    Konate, Karim
    BLOCKCHAIN-RESEARCH AND APPLICATIONS, 2023, 4 (03):
  • [38] A Hybrid Formal Verification System in Coq for Ensuring the Reliability and Security of Ethereum-Based Service Smart Contracts
    Yang, Zheng
    Lei, Hang
    Qian, Weizhong
    IEEE ACCESS, 2020, 8 : 21411 - 21436
  • [39] Survey on Blockchain-Based Smart Contracts: Technical Aspects and Future Research
    Hewa, Tharaka Mawanane
    Hu, Yining
    Liyanage, Madhusanka
    Kanhare, Salil S.
    Ylianttila, Mika
    IEEE ACCESS, 2021, 9 : 87643 - 87662
  • [40] S-GRAM: Towards Semantic-Aware Security Auditing for Ethereum Smart Contracts
    Liu, Han
    Liu, Chao
    Zhao, Wenqi
    Jiang, Yu
    Sun, Jiaguang
    PROCEEDINGS OF THE 2018 33RD IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMTED SOFTWARE ENGINEERING (ASE' 18), 2018, : 814 - 819