Automated intelligent contract code defect detection system and method

Abstract

The invention discloses an automatic intelligent contract code defect detection system and method. Combining static code analysis with dynamic path traversal, together with independently extensible security model library and rule matching library, the defect code inspection is more complete, accurate and reliable, and the problem of missing report in defect code is solved. At that same time, the interface call of the bottom platform of the block chain is load in real time, and the generated t cases and counterexamples are used on the block chain platform to verify whet the defect code is a pseudo error or not, so that the defect code of the intelligent contract can be effectively and accurately found out, and the defect error code can be located to the specific position of the intelligentcontract source code through the source code mapping engine.

Description

technical field [0001] The invention relates to the security field of blockchain smart contracts, in particular to an automated smart contract code defect detection system and method. Background technique [0002] Blockchain is a new application model of computer technologies such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. The technology of using a decentralized consensus mechanism to maintain a complete, distributed, and non-tamperable ledger database enables participants in the blockchain to implement a unified ledger system without establishing a trust relationship. A smart contract is a set of promises defined in digital form, including the agreement on which the parties to the contract can implement these promises. In the context of blockchain technology, smart contracts refer to program codes that run on the blockchain and can perform certain functions. The smart contract is written into the blockchain in ...

AI Technical Summary

Problems solved by technology

Theorem proof is based on axioms and formal deduction rules to verify whether the design and implementation meet the requirements. When performing security checks on blockchain smart contracts, due to the need for a large amount of human intervention, the efficiency is very low, and the technical requirements for the verifier are very high; model testing can Realize the automatic processing of smart contract vulnerabilities by the machine, but when dealing with more complex smart contract codes, problems such as state explosion, false positive errors, and missed negative errors often occur; and the equivalence proof mainly verifies the implementation of the program code and the function of the design prototype Whether it is consistent, it is impossible to check out program code loopholes

Images