A Survey on Ethereum Systems Security: Vulnerabilities, Attacks, and Defenses
A Survey on Ethereum Systems Security: Vulnerabilities, Attacks, and Defenses
复制标题
DOI：
10.1145/3391195
复制
发表时间：
2020-06-01
影响因子：
16.6
通讯作者：
Xu, Shouhuai
中科院分区：
文献类型：
--
作者：
Chen, Huashan;Pendleton, Marcus;Xu, Shouhuai
区块链技术被许多人认为是许多应用领域的游戏规则改变者。虽然第一代区块链技术(即区块链1.0)几乎完全用于加密货币，但以以太为代表的第二代(即区块链2.0)是一个开放和去中心化的平台，能够实现在区块链之上运行的计算去中心化应用(Dapp)的新范式。Dapp丰富的应用程序和语义不可避免地引入了许多安全漏洞，这是比特币等纯加密货币系统所没有的。由于以太是一个新的、但又复杂的系统，必须从整体的角度对其安全性进行系统和全面的了解，这在以前的文献中是不存在的。就我们所知，本调查填补了这一空白，它也可以用作教程。我们将以太系统安全的三个方面系统化：漏洞、攻击和防御。我们对漏洞的根本原因、攻击后果和防御能力进行了深入的研究，为未来的研究方向指明了方向。
Blockchain technology is believed by many to be a game changer in many application domains. While the first generation of blockchain technology (i.e., Blockchain 1.0) is almost exclusively used for cryptocurrency, the second generation (i.e., Blockchain 2.0), as represented by Ethereum, is an open and decentrafind platform enabling a new paradigm of computing-Decentralized Applications (DApps) running on top of blockchains. The rich applications and semantics of DApps inevitably introduce many security vulnerabilities, which have no counterparts in pure cryptocurrency systems like Bitcoin. Since Ethereum is a new, yet complex, system, it is imperative to have a systematic and comprehensive understanding on its security from a holistic perspective, which was previously unavailable in the literature. To the best of our knowledge, the present survey, which can also be used as a tutorial, fills this void. We systematize three aspects of Ethereum systems security: vulnerabilities, attacks, and defenses. We draw insights into vulnerability root causes, attack consequences, and defense capabilities, which shed light on future research directions.