智能合约安全综述

孟博; 刘加兵; 刘琴; 王潇潇; 郑旭睿; 王德军

doi:10.11959/j.issn.2096-109x.2020030

您当前的位置：

首页 >

文章列表页 >

智能合约安全综述

综述 | 更新时间：2024-06-03

- 智能合约安全综述
- Survey of smart contract security
- 网络与信息安全学报 2020年6卷第3期页码：1-13
- 作者机构：
- 作者简介：
  
  [ "孟博（1974- ），男，河北石家庄人，博士，中南民族大学教授，主要研究方向为区块链、安全协议和形式化方法" ]
  [ "刘加兵（1994- ），男，湖北黄石人，中南民族大学硕士生，主要研究方向为区块链智能合约、协议分析" ]
  [ "刘琴（1990- ），女，湖北黄冈人，中南民族大学硕士生，主要研究方向为智能合约代码与法律合约的一致性" ]
  [ "王潇潇（1996- ），女，安徽宿州人，中南民族大学硕士生，主要研究方向为区块链共识机制" ]
  [ "郑旭睿（1996- ），男，湖北武汉人，中南民族大学硕士生，主要研究方向为区块链自我主权认证" ]
  [ "王德军（1974- ），男，湖北荆门人，博士，中南民族大学副教授，主要研究方向为安全协议和形式化方法" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(61272497);湖北省自然科学基金;The Natural Science Foundation of Hubei Province(BZY18001);中央高校攻关计划专项基金;The Key Research Funds for the Central Universities(CZT20013)
- DOI：10.11959/j.issn.2096-109x.2020030
  中图分类号： TP393
- 网络首发：2020-06，
  
  纸质出版：2020-06-15
- 稿件说明：
移动端阅览
孟博, 刘加兵, 刘琴, 等. 智能合约安全综述[J]. 网络与信息安全学报, 2020,6(3):1-13.

Bo MENG, Jiabing LIU, Qin LIU, et al. Survey of smart contract security[J]. Chinese Journal of Network and Information Security, 2020, 6(3): 1-13.
孟博, 刘加兵, 刘琴, 等. 智能合约安全综述[J]. 网络与信息安全学报, 2020,6(3):1-13. DOI： 10.11959/j.issn.2096-109x.2020030.

Bo MENG, Jiabing LIU, Qin LIU, et al. Survey of smart contract security[J]. Chinese Journal of Network and Information Security, 2020, 6(3): 1-13. DOI： 10.11959/j.issn.2096-109x.2020030.

摘要

区块链为构建社会价值传递和信任机制提供了一种新的技术。区块链的快速发展促进了智能合约与人工智能、大数据、物联网等技术的深入融合，其安全性受到重点关注。近几年，区块链与智能合约安全研究取得了较大进展，基于区块链智能合约，对智能合约的运行机制、链上安全和链外安全的最新相关研究成果进行归类、分析、比较、总结和讨论，并展望了智能合约安全性的研究方向和趋势。

Abstract

Blockchain provides a new technology for building transmission and trust mechanism of social ralue.The rapid development of blockchain has promoted the deep integration of smart contract with artificial Intelligence

big data and internet of things

so its security has attracted attention.In recent years

researches on security of blockchain and smart contract have made great progress.Thus

based on smart contract on the blockchain

the related works on security of operating mechanism

on-chain smart contract security and off-chain security were classified

analyzed

compared

summarized and discussed.The hot issues of smart contract security in the future were forecasted.

关键词

Keywords

references

WIKIPEDIA . Smart contract [EB ] .

SZABO N . Formalizing and securing relationships on public networks [J ] . First Monday , 1997 , 2 ( 9 ).

OUADDAH A , ABOU E A , AIT O A . Fair-access:a new blockchain-based access control framework for the Internet of things [J ] . Security and Communication Networks , 2016 , 9 ( 18 ): 5943 - 5964 .

ZHENG Z , XIE S , DAI H , et al . An overview of blockchain technology:architecture,consensus,and future trends [C ] // 2017 IEEE International Congress on Big Data . 2017 : 557 - 564 .

LI X , JIANG P , CHEN T , et al . A survey on the security of blockchain systems [J ] . Future Generation Computer Systems , 2017 , 10 ( 8 ): 274 - 287 .

YLI-HUUMO J , KO D , CHOI S , et al . Where is current research on blockchain technology —a systematic review [J ] . PloS one , 2016 , 11 ( 10 ).

ZHENG Z , XIE S , DAI H N , et al . Blockchain challenges and opportunities:a survey [J ] . International Journal of Web and Grid Services , 2018 , 14 ( 4 ): 352 - 375 .

DINH T A , WANG J , CHEN G , et al . Blockbench:a framework for analyzing private blockchains [C ] // The 2017 ACM International Conference on Management of Data . New York:ACM , 2017 : 1085 - 1100 .

BARTOLETTI M , POMPIANU L . An empirical analysis of smart contracts:platforms,applications,and design patterns [C ] // International Conference on Financial Cryptography and Data Security . Berlin:Springer , 2017 : 494 - 509 .

ZHENG Z , XIE S , DAI H N , et al . Blockchain challenges and opportunities:a survey [J ] . International Journal of Web and Grid Services , 2018 , 14 ( 4 ): 352 - 375 .

WOOD G . Ethereum:a secure decentralised generalised transaction ledger [J ] . Ethereum Project Yellow Paper , 2014 , 151 : 1 - 32 .

BOGNER A , CHANSON M , MEEUW A . A decentralised sharing app running a smart contract on the ethereum block-chain [C ] // The 6th International Conference on the Internet of Things . New York:ACM , 2016 : 177 - 178 .

ANDROULAKI E , BARGER A , BORTNIKOV V , et al . Hyperledger Fabric:a distributed operating system for permissioned block-chains [C ] // The Thirteenth EuroSys Conference . New York:ACM , 2018 :30.

CACHIN C , . Architecture of the hyperledger blockchain fabric [C ] // Workshop on Distributed Cryptocurrencies and Consen-susLed- gers . 2016 ,310.

WANG S , YUAN Y , WANG X , et al . An overview of smart contract:architecture,applications,and future trends [C ] // 2018 IEEE Intelligent Vehicles Symposium (IV) . 2018 : 108 - 113 .

LI J , TANG J , ZHANG J , et al . Eos:expertise oriented search using social networks [C ] // The 16th international conference on World Wide Web . 2007 : 1271 - 1272 .

KALRA S , GOEL S , DHAWAN M , et al . Zeus:analyzing safety of smart contracts [C ] // The 25th Annual Network and Distributed System Security Symposium . 2018 : 18 - 21 .

SÁNCHEZ D C . Raziel:private and verifiable smart contracts on blockchains [J ] . arXiv preprint,arXiv:1807.09484 , 2018

DARGAYE Z , KIRCHNER F , TUCCI-PIERGIOVANNI S . et al Towards secure and trusted-by-design smart contracts [C ] // The 29th Francophone Days of Application Languages . 2018 : 7 - 18 .

KOSBA A , MILLER A , SHI E , et al . Hawk:the blockchain model of cryptography and privacy-preserving smart contracts [C ] // 2016 IEEE symposium on security and privacy (SP) . 2016 : 839 - 858 .

WÖHRER M , ZDUN U . Smart contracts:security patterns in the Ethereum ecosystem and solidity [C ] // 2018 International Workshop on Blockchain Oriented Software Engineering (IWBOSE) . 2018 : 2 - 8 .

付梦琳 , 吴礼发 , 洪征 , 等 . 智能合约安全漏洞挖掘技术研究 [J ] . 计算机应用 , 2019 , 39 ( 7 ): 1959 - 1966 .

FU M L , WU L F , HONG Z , et al . Research on smart contract security vulnerability mining technology [J ] . Journal of Computer Applications , 2019 , 39 ( 7 ): 1959 - 1966 .

NATOLI C , GRAMOLI V . The blockchain anomaly [J ] . arXiv preprint,arXiv:1605.05438 , 2016

ATZEI N , BARTOLETTI M , CIMOLI T . A survey of attacks on Ethereum smart contracts (SOK) [C ] // Principles of Security and Trust . 2017 : 164 - 186 .

TONELLI R , DESTEFANIS G , MARCHESI M , et al . Smart contracts software metrics:a first study [J ] . arXiv preprint,arXiv:1802.01517 , 2018

GRISHCHENKO I , MAFFEI M , SCHNEIDEWIND C . A semantic framework for the security analysis of Ethereum smart contracts [C ] // International Conference on Principles of Security and Trust . Berlin:Springer , 2018 : 243 - 269

FRANTZ C K , NOWOSTAWSKI M . From institutions to code:towards automated generation of smart contracts [C ] // 2016 IEEE 1st International Workshops on Foundations and Applications of Self*Systems (FAS*W) . 2016 : 210 - 215 .

CLACK C D , BAKSHI V A , BRAINE L . Smart contract templates:foundations,design landscape and research directions [J ] . arXivpre-print,arXiv:1608.00771 , 2016

沈鑫 , 裴庆祺 , 刘雪峰 . 区块链技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 11 ): 11 - 20 .

SHEN X , PEI Q Q , LIU X F . Survey of block chain [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 11 ): 11 - 20 .

周学峰 , 赵梓皓 . 解析计算法律学 [J ] . 北京：中国计算机学会通讯 , 2017 : 43 - 51 .

ZHOU X F , ZHAO Z H . Analysis of computational law [J ] . Beijing:Communications of the CCF , 2017 : 43 - 51

NECULA G . Proof-carrying code [J ] . Encyclopedia of Cryptography ＆ Security , 1996 , 141 ( 1 ): 106 - 119 .

THOMAS D , PAUL G , MAURICE H , et al . Proof-carrying smart contracts [J ] . Stevens Institute of Technology , 2018 , 325 - 338 .

LUU L , CHU D H , OLICKEL H , et al . Making smart contracts smarter [C ] // The 2016 ACM SIGSAC Conference on Computer and Communications Security . 2016 : 254 - 269 .

BHARGAVAN K , DELIGNAT-LAVAUD A FOURNET C , et al . Formal verification of smart contracts:short paper [C ] // The 2016 ACM Workshop on Programming Languages and Analysis for Security . New York:ACM , 2016 : 91 - 96 .

BAI X , CHENG Z , DUAN Z , et al . Formal modeling and verification of smart contracts [C ] // The 7th International Conference on Software and Computer Applications . Washington:ACM , 2018 : 322 - 326 .

章峰 , 史博轩 , 蒋文保 . 区块链关键技术及应用研究综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 4 ): 22 - 29 .

ZHANG F , SHI B X , JIANG W B . Review of key technology and its application of blockchain [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 4 ): 22 - 29 .

薛锐 , 吴迎 , 刘牧华 , 等 . 可验证计算研究进展 [J ] . 中国科学:信息科学 , 2015 , 45 ( 11 ): 1370 - 1388 .

XUE R , WU Y , LIU M H , et al . Progress in verifiable computing [J ] . China Science:Information Science , 2015 , 45 ( 11 ): 1370 - 1388 .

HARZ D . Trust and verifiable computation for smart contracts in permissionless blockchains [D ] . KTH,School of Information and Communication Technology , 2017 .

TEUTSCH J,REITWIEßNER C . A scalable verification solution for blockchains [EB ] .

ZYSKIND G . Efficient secure computation enabled by blockchain technology [D ] . Massachusetts:Massachusetts Institute of Technology , 2016 .

AS S , . Enabling data markets using smart contracts and multi-party computation [C ] // Business Information Systems Workshops:BIS 2018 International Workshops . Berlin:Springer , 2019 :258.

NEIDHARDT N , KOHLER C , NUTTGENS M . Cloud service billing and service level agreement monitoring based on blockchain [C ] // EMISA . 2018 : 65 - 69 .

MOLINA-JIMENEZ C , SOLAIMAN E , SFYRAKIS I , et al . On and off-blockchain enforcement of smart contracts [C ] // European Conference on Parallel Processing . 2018 : 342 - 354 .

XU X , PAUTASSO C , ZHU L , et al . The blockchain as a software connector [C ] // 2016 13th Working IEEE/IFIP Conference on Software Architecture (WICSA) . 2016 : 182 - 191 .

EBERHARDT J , TAI S . On or off the blockchain? Insights on off-chaining computation and data [C ] // European Conference on Service-Oriented and Cloud Computing . 2017 : 3 - 15 .

ZHANG F , CECCHETTI E , CROMAN K , et al . Town crier:an authenticated data feed for smart contracts [C ] // The 2016 ACM SIGSAC Conference on Computer and Communications Security . 2016 : 270 - 282 .

ADLER J , BERRYHILL R , VENERIS A , et al . Astraea:a decentralized blockchain oracle [C ] // 2018 IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communica-tions (GreenCom) and IEEE Cyber,Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData) . 2018 : 1145 - 1152 .

VOYIATZIS A G , WEIPPL E . Whom you gonna trust? a longi-tudinal study on TLS notary services [C ] // Data and Applications Security and Privacy XXX:30th Annual IFIP WG 11.3 Conference . 2016 : 18 - 20 .

RITZDORF H , WÜST K , GERVAIS A , et al . TLS-N:non-repudiation over TLS enabling ubiquitous content signing for disintermediation [J ] . IACR ePrint Report , 2017 ,578.

JAKOBSSON M , LEIGHTON T , MICALI S , et al . Fractal Merkle tree representation and traversal [C ] // Cryptographers’ Track at the RSA Conference . 2003 : 314 - 326 .

XUE J , XU C , ZHANG Y , et al . DStore:a distributed cloud storage system based on smart contracts and blockchain [C ] // International Conference on Algorithms and Architectures for Parallel Processing . 2018 : 385 - 401 .

GUARNIZO J , SZALACHOWSKI P . PDFS:practical data feed service for smart contracts [J ] . arXiv preprint,arXiv:1808.06641 , 2018

XU X , PAUTASSO C , ZHU L , et al . The blockchain as a software connector [C ] // 2016 13th Working IEEE/IFIP Conference on Software Architecture (WICSA) . 2016 : 182 - 191 .

BANERJEE A , . Blockchain technology:supply chain insights from ERP [M ] // Advances in Computers . 2018 : 69 - 98 .

FABIANO N , . The internet of things ecosystem:the blockchain and privacy issues the challenge for a global privacy standard [C ] // 2017 International Conference on Internet of Things for the Global Community (IoTGC) . 2017 : 1 - 7 .

浏览量

1807

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于GR算法的区块链智能合约漏洞检测

基于字节码的以太坊智能合约分类方法

基于形式化方法的智能合约验证研究综述

基于区块链的访问控制技术研究进展

基于智能合约的高对抗性僵尸网络研究