TXSPECTOR: Uncovering Attacks in Ethereum from Transactions
TXSPECTOR: Uncovering Attacks in Ethereum from Transactions
复制标题
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Mengya Zhang;Xiaokuan Zhang;Yinqian Zhang;Zhiqiang Lin
中科院分区：
文献类型：
--
作者：
Mengya Zhang;Xiaokuan Zhang;Yinqian Zhang;Zhiqiang Lin
以太坊智能合约的发明使区块链用户能够自定义交易中的计算逻辑。然而，与传统的计算机程序类似，智能合约也存在漏洞，可以被利用来造成合同所有者的经济损失。虽然有许多软件工具可以检测智能合约字节码中的漏洞，但很少有人专注于交易。在本文中，我们提出了T X S PECTOR，这是一个通用的逻辑驱动框架，用于研究以太坊交易以进行攻击检测。在高层次上，T X S PECTOR重放历史事务并记录EVM字节码级跟踪，然后将控制和数据依赖性编码为逻辑关系。T X S PECTOR允许用户指定自定义规则来发现交易中的各种类型的攻击，而不是设置一组预定义的功能。我们已经构建了一个T X S PECTOR的原型，并评估了它对三种以太坊攻击的检测：（i）重入漏洞，（ii）UncheckedCall漏洞，（iii）自杀漏洞。结果表明，T X S PECTOR可以有效地检测交易中的攻击，以及智能合约中相应的漏洞。我们还展示了T X S PECTOR如何用于对交易进行取证分析，并提出了检测规则，用于检测除三种重点以太坊攻击外的其他类型的攻击。
The invention of Ethereum smart contract has enabled the blockchain users to customize computing logic in transactions. However, similar to traditional computer programs, smart contracts have vulnerabilities, which can be exploited to cause financial loss of contract owners. While there are many software tools for detecting vulnerabilities in the smart contract bytecode, few have focused on transactions. In this paper, we propose T X S PECTOR , a generic, logic-driven framework to investigate Ethereum transactions for attack detection. At a high level, T X S PECTOR replays history transactions and records EVM bytecode-level traces, and then encodes the control and data dependencies into logic relations. Instead of setting a pre-defined set of functionalities, T X S PECTOR allows users to specify customized rules to uncover various types of attacks in the transactions. We have built a prototype of T X S PECTOR and evaluated it for the detection of three Ethereum attacks that exploit: ( i ) the Re-entrancy vulnerability, ( ii ) the UncheckedCall vulnerability, and ( iii ) the Suicidal vulnerability. The results demonstrate that T X S PECTOR can effectively detect attacks in the transactions and, as a byproduct, the corresponding vulnerabilities in the smart contracts. We also show how T X S PECTOR can be used for forensic analysis on transactions, and present Detection Rules for detecting other types of attacks in addition to the three focused Ethereum attacks.