Open Access Open Access  Restricted Access Subscription Access

Smart contract security protection and detection platform implementation

Yu-Qing Jiang,
Yuan-Di Chen,
Ming-Hsien Lu,
Yu-Han Wang,
Tzung-Her Chen,

Abstract


Ethereum is the largest Blockchain platform that supports Smart Contracts. After deploying smart contracts by publishing Bytecode of smart contracts to the chain, they are irreparable. It is important to check the security of smart contracts before deploying. There are currently many smart contract vulnerability detection tools available to developers to ensure the security of smart contracts. However, these tools have not comprehensively detected vulnerabilities while various attack methods are being updated with the times. It is easier for developers to miss the possibility of various attacks. This study implements a smart contract vulnerability detection tool (called Ladybugs) with comprehensive detection. In addition to increasing the coverage rate from 55% to 94%, it also increases the precision rate and recall rate to more than 80%. Furthermore, a web platform, ContractPecker, is implemented based on Ladybugs by providing a dynamic weakness-detection mechanism to scan the smart contract deployed on Ethereum blockchain. With vulnerability introduction on the basis of Ladybugs Weakness Detection.


Citation Format:
Yu-Qing Jiang, Yuan-Di Chen, Ming-Hsien Lu, Yu-Han Wang, Tzung-Her Chen, "Smart contract security protection and detection platform implementation," Communications of the CCISA, vol. 29, no. 1 , pp. 35-52, Feb. 2023.

Full Text:

PDF

Refbacks

  • There are currently no refbacks.





Published by Chinese Cryptology and Information Security Association (CCISA), Taiwan, R.O.C
CCCISA Editorial Office, No.1, Sec. 1, Shennong Rd., Yilan City, Yilan County 260, Taiwan (R.O.C.)
E-mail: ccisa.editor@gmail.com