arrow
返回

A security type verifier for smart contracts

delete2021-09-01
delete8
PRE
AI
X
Xinwen Hu *
庄
庄毅 (Yi Zhuang)
S
Shang‐Wei Lin
F
Fuyuan Zhang
S
Shuanglong Kan
曹
曹子宁 (Zining Cao)
DOI:10.1016/j.cose.2021.102343delete
delete原文链接
delete分享
delete收藏
摘要

摘要

En 中文
The widespread adoption of smart contracts demands strong security guarantees. Our work is motivated by the problem of statically checking potential information tampering in smart contracts. This paper presents a security type verification framework for smart contracts based on type systems. We introduce a formal calculus for reasoning smart contract operations and interactions and design a lightweight type system for checking secure information flow in Solidity (a popular high-level programming language for writing smart contracts). The soundness of our type system is proved w.r.t. non-interference. In addition, a type verifier based on our type system is proposed to assist users to automatically find an optimal secure type assignment for state variables, which makes contracts well-typed. We also prove that finding the optimal secure type assignment is theoretically a NP-complete problem. We develop a prototype implementation of the Solidity Type Verifier (STV) including the Solidity Type Checker (STC) based on the K-framework, and demonstrate its effectiveness on real world smart contracts. (C) 2021 Elsevier Ltd. All rights reserved.
Keyword:
Smart contracts
Information-flow integrity
Type system
Soundness proofs
K-framework
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

N
Nanyang Technological University
学者数:
4.9W
论文数: 4.8W
被引数: 8.1W
University of Kaiserslautern 封面图
University of Kaiserslautern
学者数:
3.9K
论文数: 3.3K
被引数: 4.3K
M
Max Planck Society
学者数:
8.2W
论文数: 7.7W
被引数: 3.3W
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
err分享
err收藏
err分享
err收藏
没有更多内容