Artemis: An Improved Smart Contract Verification Tool for Vulnerability Detection
Artemis: An Improved Smart Contract Verification Tool for Vulnerability Detection
复制标题
DOI：
10.1109/dsa51864.2020.00031
复制
发表时间：
2020-11
期刊：
影响因子：
--
通讯作者：
Anqi Wang;Hongya Wang;Bo Jiang;W. Chan
中科院分区：
文献类型：
--
作者：
Anqi Wang;Hongya Wang;Bo Jiang;W. Chan
智能合同是在区块链平台上运行的程序。有了智能合同，用户可以使用代码定义任意规则来管理他们的资产。然而，这些智能合同中的安全漏洞已经给用户造成了巨大的经济损失。现有的基于符号执行的智能合同验证工具在检测到的漏洞类型方面仍然不全面。在这项工作中，我们提出了一个改进的智能合同验证工具Artemis，它可以检测到包括贪婪、阻塞信息依赖、无气发送和危险委托呼叫在内的漏洞。我们已经在12899份智能合同上对我们的工具进行了彻底的漏洞检测有效性和效率评估。实验结果表明，ARTEMIS工具具有较高的精度和较高的性价比。
Smart contracts are programs running on top of the blockchain platform. With smart contract, users can use code to define arbitrary rules to manage their assets. However, the security vulnerabilities within those smart contracts have caused significant financial losses to their users. Existing smart contract verification tools based on symbolic execution are still not comprehensive in terms of the types of vulnerabilities detected. In this work, we present Artemis, an improved smart contract verification tool that can detect vulnerabilities that includes greedy, block information dependency, gasless send, and dangerous delegatecall. We have thoroughly evaluated our tool on 12899 smart contracts in terms of vulnerability detection effectiveness and efficiency. The experiment results show that the Artemis tool is precise and cost-effective for practical use.