Survey of smart contract security

Bo MENG; Jiabing LIU; Qin LIU; Xiaoxiao WANG; Xurui ZHENG; Dejun WANG

doi:10.11959/j.issn.2096-109x.2020030

您当前的位置：

首页 >

文章列表页 >

Survey of smart contract security

Comprehensive Review | 更新时间：2024-06-03

- Survey of smart contract security
- Chinese Journal of Network and Information Security Vol. 6, Issue 3, Pages: 1-13(2020)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020030
  CLC： TP393
- Online First：2020-06，
  
  Published：15 June 2020
- 稿件说明：
移动端阅览
Bo MENG, Jiabing LIU, Qin LIU, et al. Survey of smart contract security[J]. Chinese Journal of Network and Information Security, 2020, 6(3): 1-13.
DOI：

Bo MENG, Jiabing LIU, Qin LIU, et al. Survey of smart contract security[J]. Chinese Journal of Network and Information Security, 2020, 6(3): 1-13. DOI： 10.11959/j.issn.2096-109x.2020030.

摘要

区块链为构建社会价值传递和信任机制提供了一种新的技术。区块链的快速发展促进了智能合约与人工智能、大数据、物联网等技术的深入融合，其安全性受到重点关注。近几年，区块链与智能合约安全研究取得了较大进展，基于区块链智能合约，对智能合约的运行机制、链上安全和链外安全的最新相关研究成果进行归类、分析、比较、总结和讨论，并展望了智能合约安全性的研究方向和趋势。

Abstract

Blockchain provides a new technology for building transmission and trust mechanism of social ralue.The rapid development of blockchain has promoted the deep integration of smart contract with artificial Intelligence

big data and internet of things

so its security has attracted attention.In recent years

researches on security of blockchain and smart contract have made great progress.Thus

based on smart contract on the blockchain

the related works on security of operating mechanism

on-chain smart contract security and off-chain security were classified

analyzed

compared

summarized and discussed.The hot issues of smart contract security in the future were forecasted.

关键词

Keywords

references

WIKIPEDIA . Smart contract [EB ] .

SZABO N . Formalizing and securing relationships on public networks [J ] . First Monday , 1997 , 2 ( 9 ).

OUADDAH A , ABOU E A , AIT O A . Fair-access:a new blockchain-based access control framework for the Internet of things [J ] . Security and Communication Networks , 2016 , 9 ( 18 ): 5943 - 5964 .

ZHENG Z , XIE S , DAI H , et al . An overview of blockchain technology:architecture,consensus,and future trends [C ] // 2017 IEEE International Congress on Big Data . 2017 : 557 - 564 .

LI X , JIANG P , CHEN T , et al . A survey on the security of blockchain systems [J ] . Future Generation Computer Systems , 2017 , 10 ( 8 ): 274 - 287 .

YLI-HUUMO J , KO D , CHOI S , et al . Where is current research on blockchain technology —a systematic review [J ] . PloS one , 2016 , 11 ( 10 ).

ZHENG Z , XIE S , DAI H N , et al . Blockchain challenges and opportunities:a survey [J ] . International Journal of Web and Grid Services , 2018 , 14 ( 4 ): 352 - 375 .

DINH T A , WANG J , CHEN G , et al . Blockbench:a framework for analyzing private blockchains [C ] // The 2017 ACM International Conference on Management of Data . New York:ACM , 2017 : 1085 - 1100 .

BARTOLETTI M , POMPIANU L . An empirical analysis of smart contracts:platforms,applications,and design patterns [C ] // International Conference on Financial Cryptography and Data Security . Berlin:Springer , 2017 : 494 - 509 .

ZHENG Z , XIE S , DAI H N , et al . Blockchain challenges and opportunities:a survey [J ] . International Journal of Web and Grid Services , 2018 , 14 ( 4 ): 352 - 375 .

WOOD G . Ethereum:a secure decentralised generalised transaction ledger [J ] . Ethereum Project Yellow Paper , 2014 , 151 : 1 - 32 .

BOGNER A , CHANSON M , MEEUW A . A decentralised sharing app running a smart contract on the ethereum block-chain [C ] // The 6th International Conference on the Internet of Things . New York:ACM , 2016 : 177 - 178 .

ANDROULAKI E , BARGER A , BORTNIKOV V , et al . Hyperledger Fabric:a distributed operating system for permissioned block-chains [C ] // The Thirteenth EuroSys Conference . New York:ACM , 2018 :30.

CACHIN C , . Architecture of the hyperledger blockchain fabric [C ] // Workshop on Distributed Cryptocurrencies and Consen-susLed- gers . 2016 ,310.

WANG S , YUAN Y , WANG X , et al . An overview of smart contract:architecture,applications,and future trends [C ] // 2018 IEEE Intelligent Vehicles Symposium (IV) . 2018 : 108 - 113 .

LI J , TANG J , ZHANG J , et al . Eos:expertise oriented search using social networks [C ] // The 16th international conference on World Wide Web . 2007 : 1271 - 1272 .

KALRA S , GOEL S , DHAWAN M , et al . Zeus:analyzing safety of smart contracts [C ] // The 25th Annual Network and Distributed System Security Symposium . 2018 : 18 - 21 .

SÁNCHEZ D C . Raziel:private and verifiable smart contracts on blockchains [J ] . arXiv preprint,arXiv:1807.09484 , 2018

DARGAYE Z , KIRCHNER F , TUCCI-PIERGIOVANNI S . et al Towards secure and trusted-by-design smart contracts [C ] // The 29th Francophone Days of Application Languages . 2018 : 7 - 18 .

KOSBA A , MILLER A , SHI E , et al . Hawk:the blockchain model of cryptography and privacy-preserving smart contracts [C ] // 2016 IEEE symposium on security and privacy (SP) . 2016 : 839 - 858 .

WÖHRER M , ZDUN U . Smart contracts:security patterns in the Ethereum ecosystem and solidity [C ] // 2018 International Workshop on Blockchain Oriented Software Engineering (IWBOSE) . 2018 : 2 - 8 .

付梦琳 , 吴礼发 , 洪征 , 等 . 智能合约安全漏洞挖掘技术研究 [J ] . 计算机应用 , 2019 , 39 ( 7 ): 1959 - 1966 .

FU M L , WU L F , HONG Z , et al . Research on smart contract security vulnerability mining technology [J ] . Journal of Computer Applications , 2019 , 39 ( 7 ): 1959 - 1966 .

NATOLI C , GRAMOLI V . The blockchain anomaly [J ] . arXiv preprint,arXiv:1605.05438 , 2016

ATZEI N , BARTOLETTI M , CIMOLI T . A survey of attacks on Ethereum smart contracts (SOK) [C ] // Principles of Security and Trust . 2017 : 164 - 186 .

TONELLI R , DESTEFANIS G , MARCHESI M , et al . Smart contracts software metrics:a first study [J ] . arXiv preprint,arXiv:1802.01517 , 2018

GRISHCHENKO I , MAFFEI M , SCHNEIDEWIND C . A semantic framework for the security analysis of Ethereum smart contracts [C ] // International Conference on Principles of Security and Trust . Berlin:Springer , 2018 : 243 - 269

FRANTZ C K , NOWOSTAWSKI M . From institutions to code:towards automated generation of smart contracts [C ] // 2016 IEEE 1st International Workshops on Foundations and Applications of Self*Systems (FAS*W) . 2016 : 210 - 215 .

CLACK C D , BAKSHI V A , BRAINE L . Smart contract templates:foundations,design landscape and research directions [J ] . arXivpre-print,arXiv:1608.00771 , 2016

沈鑫 , 裴庆祺 , 刘雪峰 . 区块链技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 11 ): 11 - 20 .

SHEN X , PEI Q Q , LIU X F . Survey of block chain [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 11 ): 11 - 20 .

周学峰 , 赵梓皓 . 解析计算法律学 [J ] . 北京：中国计算机学会通讯 , 2017 : 43 - 51 .

ZHOU X F , ZHAO Z H . Analysis of computational law [J ] . Beijing:Communications of the CCF , 2017 : 43 - 51

NECULA G . Proof-carrying code [J ] . Encyclopedia of Cryptography ＆ Security , 1996 , 141 ( 1 ): 106 - 119 .

THOMAS D , PAUL G , MAURICE H , et al . Proof-carrying smart contracts [J ] . Stevens Institute of Technology , 2018 , 325 - 338 .

LUU L , CHU D H , OLICKEL H , et al . Making smart contracts smarter [C ] // The 2016 ACM SIGSAC Conference on Computer and Communications Security . 2016 : 254 - 269 .

BHARGAVAN K , DELIGNAT-LAVAUD A FOURNET C , et al . Formal verification of smart contracts:short paper [C ] // The 2016 ACM Workshop on Programming Languages and Analysis for Security . New York:ACM , 2016 : 91 - 96 .

BAI X , CHENG Z , DUAN Z , et al . Formal modeling and verification of smart contracts [C ] // The 7th International Conference on Software and Computer Applications . Washington:ACM , 2018 : 322 - 326 .

章峰 , 史博轩 , 蒋文保 . 区块链关键技术及应用研究综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 4 ): 22 - 29 .

ZHANG F , SHI B X , JIANG W B . Review of key technology and its application of blockchain [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 4 ): 22 - 29 .

薛锐 , 吴迎 , 刘牧华 , 等 . 可验证计算研究进展 [J ] . 中国科学:信息科学 , 2015 , 45 ( 11 ): 1370 - 1388 .

XUE R , WU Y , LIU M H , et al . Progress in verifiable computing [J ] . China Science:Information Science , 2015 , 45 ( 11 ): 1370 - 1388 .

HARZ D . Trust and verifiable computation for smart contracts in permissionless blockchains [D ] . KTH,School of Information and Communication Technology , 2017 .

TEUTSCH J,REITWIEßNER C . A scalable verification solution for blockchains [EB ] .

ZYSKIND G . Efficient secure computation enabled by blockchain technology [D ] . Massachusetts:Massachusetts Institute of Technology , 2016 .

AS S , . Enabling data markets using smart contracts and multi-party computation [C ] // Business Information Systems Workshops:BIS 2018 International Workshops . Berlin:Springer , 2019 :258.

NEIDHARDT N , KOHLER C , NUTTGENS M . Cloud service billing and service level agreement monitoring based on blockchain [C ] // EMISA . 2018 : 65 - 69 .

MOLINA-JIMENEZ C , SOLAIMAN E , SFYRAKIS I , et al . On and off-blockchain enforcement of smart contracts [C ] // European Conference on Parallel Processing . 2018 : 342 - 354 .

XU X , PAUTASSO C , ZHU L , et al . The blockchain as a software connector [C ] // 2016 13th Working IEEE/IFIP Conference on Software Architecture (WICSA) . 2016 : 182 - 191 .

EBERHARDT J , TAI S . On or off the blockchain? Insights on off-chaining computation and data [C ] // European Conference on Service-Oriented and Cloud Computing . 2017 : 3 - 15 .

ZHANG F , CECCHETTI E , CROMAN K , et al . Town crier:an authenticated data feed for smart contracts [C ] // The 2016 ACM SIGSAC Conference on Computer and Communications Security . 2016 : 270 - 282 .

ADLER J , BERRYHILL R , VENERIS A , et al . Astraea:a decentralized blockchain oracle [C ] // 2018 IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communica-tions (GreenCom) and IEEE Cyber,Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData) . 2018 : 1145 - 1152 .

VOYIATZIS A G , WEIPPL E . Whom you gonna trust? a longi-tudinal study on TLS notary services [C ] // Data and Applications Security and Privacy XXX:30th Annual IFIP WG 11.3 Conference . 2016 : 18 - 20 .

RITZDORF H , WÜST K , GERVAIS A , et al . TLS-N:non-repudiation over TLS enabling ubiquitous content signing for disintermediation [J ] . IACR ePrint Report , 2017 ,578.

JAKOBSSON M , LEIGHTON T , MICALI S , et al . Fractal Merkle tree representation and traversal [C ] // Cryptographers’ Track at the RSA Conference . 2003 : 314 - 326 .

XUE J , XU C , ZHANG Y , et al . DStore:a distributed cloud storage system based on smart contracts and blockchain [C ] // International Conference on Algorithms and Architectures for Parallel Processing . 2018 : 385 - 401 .

GUARNIZO J , SZALACHOWSKI P . PDFS:practical data feed service for smart contracts [J ] . arXiv preprint,arXiv:1808.06641 , 2018

XU X , PAUTASSO C , ZHU L , et al . The blockchain as a software connector [C ] // 2016 13th Working IEEE/IFIP Conference on Software Architecture (WICSA) . 2016 : 182 - 191 .

BANERJEE A , . Blockchain technology:supply chain insights from ERP [M ] // Advances in Computers . 2018 : 69 - 98 .

FABIANO N , . The internet of things ecosystem:the blockchain and privacy issues the challenge for a global privacy standard [C ] // 2017 International Conference on Internet of Things for the Global Community (IoTGC) . 2017 : 1 - 7 .

Views

1807

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Blockchain smart contract vulnerability detection based on GR algorithm

Bytecode-based approach for Ethereum smart contract classification

State-of-the-art survey of smart contract verification based on formal methods

Research progress of access control based on blockchain

High resistance botnet based on smart contract

Related Author

WANG Deguang

SHAN Mengtao

LI Fengqi

TONG Ning

Dan LIN

Kaixin LIN

Jiajing WU

Zibin ZHENG

Related Institution

Software Technology Institute, Dalian Jiaotong University

School of Computer Science and Engineering, SunYat-sen University

School of Software Engineering, Sun Yat-sen University

Shanghai University of Electric Power

Shanghai Key Laboratory of Trustworthy Computing

⁰