首页|关键路径预搜索的符号执行智能合约漏洞检测

关键路径预搜索的符号执行智能合约漏洞检测

扫码查看
针对传统符号执行在不必要、不相关的路径上消耗大量时间与资源,效率低等问题,提出了利用静态检测预扫描智能合约关键路径优化符号执行验证,避免非必要路径搜索增加的资源消耗,实现基于关键路径预搜索的符号执行.该方法与现有主流检测工具进行对比实验,结果显示:Gas耗尽拒绝服务漏洞覆盖率达98%,检测准确度为84.3%,远高于均值37.2%;对存储覆盖漏洞合约的全覆盖,检测准确率为86.1%,验证了该方法的高效性与稳定性.
Smart Contract Vulnerability Detection of Symbol Execution with Critical Path Pre-searching
This paper proposes a pre-searching paths for symbolic execution method to guide the critical path symbol execution of scanning smart contract vulnerabilities through static detection.This approach aims to avoid unnecessary resource consumption of path search,thereby achieving accurate and fast smart contract vulnerability detection.This method is compared with existing mainstream detection tools.The results show that the Gas exhaustion denial of service vulnerability coverage reaches 98%,with a detection ac-curacy of 84.3%,which is far higher than the average value of 37.2%.Furthermore,the full coverage of storage coverage vulnerability contracts is realized with a detection accuracy of 86.1%,which validates the efficiency and stability of this method.

smart contractvulnerability detectionsymbol executionpre-search of criti-cal pathblockchain security

王泽旭、文斌

展开 >

海南师范大学数据科学与智慧教育教育部重点实验室,海南海口 571158

中山大学软件工程学院,广东珠海 519082

海南师范大学信息科学技术学院,海南海口 571158

智能合约 漏洞检测 符号执行 关键路径预搜索 区块链安全

国家自然科学基金海南省自然科学基金

62362029623RC485

2024

应用科学学报
上海大学 中国科学院上海技术物理研究所

应用科学学报

CSTPCD北大核心
影响因子:0.594
ISSN:0255-8297
年,卷(期):2024.42(2)
  • 22