智能合约安全威胁及现有解决方案分析

An Analysis of Smart Contracts Security Threats Alongside Existing Solutions.

作者信息

López Vivar Antonio, Castedo Alberto Turégano, Sandoval Orozco Ana Lucila, García Villalba Luis Javier

机构信息

Group of Analysis, Security and Systems (GASS), Department of Software Engineering and Artificial Intelligence (DISIA), Faculty of Computer Science and Engineering, Office 431, Universidad Complutense de Madrid (UCM), Calle Profesor José García Santesmases, 9, Ciudad Universitaria, 28040 Madrid, Spain.

Raona Enginyers S.L. Calle de Goya, 115, 2n, 28009 Madrid, Spain.

出版信息

Entropy (Basel). 2020 Feb 11;22(2):203. doi: 10.3390/e22020203.

DOI:10.3390/e22020203

PMID:33285978

原文链接:https://pmc.ncbi.nlm.nih.gov/articles/PMC7516633/

Abstract

Smart contracts have gained a lot of popularity in recent times as they are a very powerful tool for the development of decentralised and automatic applications in many fields without the need for intermediaries or trusted third parties. However, due to the decentralised nature of the blockchain on which they are based, a series of challenges have emerged related to vulnerabilities in their programming that, given their particularities, could have (and have already had) a very high economic impact. This article provides a holistic view of security challenges associated with smart contracts, as well as the state of the art of available public domain tools.

摘要

智能合约近年来广受欢迎，因为它们是一种非常强大的工具，可用于在许多领域开发去中心化和自动化应用程序，而无需中介或可信第三方。然而，由于它们所基于的区块链的去中心化性质，出现了一系列与编程漏洞相关的挑战，鉴于其特殊性，这些漏洞可能（并且已经）产生非常高的经济影响。本文全面介绍了与智能合约相关的安全挑战，以及可用公共领域工具的技术现状。