NWPT 2023 - 34th Nordic Workshop on Programming Theory (series) / NWPT 2023 /
Exposing Flaws by Modeling Vulnerable-by-Design Smart Contracts
Smart contracts can manage assets worth millions of Euro but are often not formally modeled and, as a consequence, may contain vulnerabilities. This paper explores the application of Dynamic Condition Response (DCR) graphs, initially developed for modeling business processes, to model and analyze smart contracts’ embedded processes. Using DCR graphs, we demonstrate high-level properties in the contracts, such as event partial ordering and role-based access control via empirical analysis of several high-profile successful exploits on smart contracts. The result of our analysis offers valuable insights and underscores the potential of DCR graphs in preventing the vulnerabilities causing the breaches.
Thu 23 NovDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
Thu 23 Nov
Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
16:00 - 17:20 | |||
16:00 20mTalk | Exposing Flaws by Modeling Vulnerable-by-Design Smart Contracts NWPT 2023 Mojtaba Eshghie KTH Royal Institute of Technology, Cyrille Artho KTH Royal Institute of Technology, Sweden, Wolfgang Ahrendt Chalmers University of Technology, Thomas T. Hildebrandt University of Copenhagen, Gerardo Schneider University of Gothenburg Pre-print | ||
16:20 20mTalk | Time-Sensitive Control Closure: A Key Component for Secure Information Flow NWPT 2023 Pre-print | ||
16:40 20mTalk | Buzzy: An eBPF Fuzzer NWPT 2023 Mikkel Tolstrup Jensen Aalborg University, Tobias Bruun Sandberg Hansen Aalborg University, Danny Bøgsted Poulsen Aalborg University, René Rydhof Hansen Aalborg University, Denmark Pre-print | ||
17:00 20mTalk | Enhancing CRYSTAL: Preventive Recovery in Brief NWPT 2023 Fereidoun Moradi Mälardalen University, Zahra Moezkarimi Mälardalen University, Marjan Sirjani Malardalen University Pre-print |