Intelligent contract safety evaluation method based on a rule engine

Abstract

The invention discloses an intelligent contract safety evaluation method based on a rule engine, and the method comprises the following steps: obtaining a target intelligent contract, generating a grammar analyzer according to the language rule of the target intelligent contract, and enabling the language rule of the target intelligent contract not to carry an ambiguity statement; analyzing the target intelligent contract by using the syntax analyzer generated in the step S1, and generating a contract syntax tree; customizing a rule base of the intelligent contract vulnerability rule engine; s2, using an intelligent contract vulnerability rule engine to continuously traverse and scan the contract syntax tree in the step S2 to obtain a scanning result of each rule in the rule base; and S3;performing standard evaluation on the rule scanning result obtained in the step S3 to obtain a final evaluation result. According to the invention, the problem that the security risk of the smart contract is difficult to perceive before the smart contract is deployed to the blockchain is solved, and the detection and protection of the vulnerability hidden danger of the smart contract development to the blockchain application are realized.

Description

technical field [0001] The invention relates to the field of security evaluation of smart contracts, in particular to a rule engine-based smart contract security evaluation method. Background technique [0002] At present, the existing smart contract security evaluation methods mainly include the following: security evaluation methods based on formal verification, security evaluation methods based on symbolic execution and symbol abstraction; security evaluation methods based on machine learning and deep learning; among them, based on The formal verification method is essentially a verification method based on a mathematical model, which converts the program source code of the smart contract into a specific mathematical model, and proves the requirements that the contract code needs to meet as a property, that is, through mathematical language description Contract code, and prove that it satisfies specific properties. In the specific coding implementation process of this met...

AI Technical Summary

Problems solved by technology

However, as the main technology in the development of blockchain applications, smart contracts cannot be modified once they are deployed on the blockchain, resulting in security vulnerabilities caused by smart contracts that greatly affect the reliability of blockchain applications.

Images