SmartScan: An approach to detect Denial of Service Vulnerability in Ethereum Smart Contracts
Blockchain technology’s (BT) Ethereum Smart Contracts allows programmable transactions that involve the transfer of monetary assets among peers on a BT network independent of a central authorizing agency. Ethereum smart contracts are programs that are deployed as decentralized applications, having the building blocks of the blockchain consensus protocol. This technology enables consumers to make agreements in a transparent and conflict-free environment. However, the security vulnerabilities within these smart contracts are a potential threat to the applications and their consumers and have shown in the past to cause immense financial losses. In this paper, we propose a framework that combines static and dynamic analysis to detect Denial of Service (DoS) vulnerability due to an unexpected revert in Ethereum Smart Contracts. Our framework, SmartScan, statically scans smart contracts under test (SCUTs) to identify patterns that are potentially vulnerable in these SCUTs and then uses dynamic analysis to precisely confirm their exploitability of the DoS-Unexpected Revert vulnerability, thus achieving increased performance and more precise results. We evaluated SmartScan on a set of 500 smart contracts collected from the Etherscan. Our approach shows an improvement in precision and recall when compared to available state of the art techniques.
Mon 31 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
15:00 - 16:20 | |||
15:00 20mTalk | Design principles for constructing GDPR-compliant blockchain solutions WETSEB 2021 Maria Fernanda Molina Facultad de Ingeniería, Universidad de la República, Gustavo Betarte Facultad de Ingeniería, Universidad de la República, Carlos Luna Facultad de Ingeniería, Universidad de la República Media Attached | ||
15:20 20mTalk | Opportunities and challenges of Blockchain-Oriented systems in the tourism industry. WETSEB 2021 Media Attached | ||
15:40 20mTalk | SmartScan: An approach to detect Denial of Service Vulnerability in Ethereum Smart Contracts WETSEB 2021 Media Attached | ||
16:00 20mTalk | Blockchain-Engineers Wanted: an Empirical Analysis on Required Skills, Education and Experience WETSEB 2021 Mohamad Kassab The Pennsylvania State University, Giuseppe Destefanis Brunel University London, Joanna DeFranco Pennsylvania State University, Prince Pranav Pennsylvania State University Media Attached |
Go directly to this room on Clowdr