A Dynamic Behavior Verification Method for Composite Smart Contracts Based on Model Checking

Author:

Jin Jun1ORCID,Zhan Wenhao1,Li Haisheng2,Ding Yi1,Li Jie134ORCID

Affiliation:

1. School of Information, Beijing Wuzi University, Beijing 101149, China

2. Beijing Key Laboratory of Big Data Technology for Food Safety, Beijing Technology and Business University, Beijing 100048, China

3. School of Computer Science and Engineering, Beihang University, Beijing 100191, China

4. Yunnan Key Laboratory of Blockchain Application Technology, Kunming 650233, China

Abstract

A composite smart contract can execute smart contracts that may belong to other owners or companies through external calls, bringing more security challenges to blockchain applications. Traditional static verification methods are inadequate for analyzing the dynamic execution of these contracts, resulting in misjudgment and omission issues. Therefore, this paper proposes a model checking approach based on dynamic behavior that verifies the security and business logic of composite smart contracts. Utilizing automata, the method models contracts, users, attackers, and extracts properties, focusing on six types of common security vulnerabilities. A thorough case study and experimental evaluation demonstrate the method’s efficiency in identifying vulnerabilities and ensuring alignment with business requirements. The UPPAAL tool is employed for comprehensive verification, proving its effectiveness in enhancing smart contract security.

Funder

Open Research Fund of Beijing Key Laboratory of Big Data Technology for Food Safety from Beijing Technology and Business University

Open Research Fund of Yunnan Key Laboratory of Blockchain Application Technology

Beijing Natural Science Foundation

Beijing Wuzi University Youth Research Fund

Science and Technique General Program of Beijing Municipal Commission of Education

Publisher

MDPI AG

Reference27 articles.

1. Yaga, D., Mell, P., Roby, N., and Scarfone, K. (2019). Blockchain Technology Overview. arXiv.

2. An Overview on Smart Contracts: Challenges, Advances and Platforms;Zheng;Future Gener. Comput. Syst.,2020

3. Nakamoto, S. (2024, July 18). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https://assets.pubpub.org/d8wct41f/31611263538139.pdf.

4. Ethereum: A Secure Decentralised Generalised Transaction Ledger;Wood;Ethereum Proj. Yellow Pap.,2014

5. Wohrer, M., and Zdun, U. (2018, January 20). Smart Contracts: Security Patterns in the Ethereum Ecosystem and Solidity. Proceedings of the 2018 International Workshop on Blockchain Oriented Software Engineering (IWBOSE), Campobasso, Italy.

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3