A static code auditing system and method for an Ethereum smart contract

Abstract

The invention discloses a static code auditing system and method for an intelligent contract on an Ethernet workshop platform of a block chain, and belongs to the technical field of information security. According to the method, security threats existing on the smart contract written on the Ethereum platform by using the Solidity language can be detected, the specific position is positioned, the harm is explained, and a corresponding solution is given. The method comprises the steps that firstly, a user inputs a to-be-detected project directory or a path of a single file into a system, the system conducts preprocessing operation on input content, the whole project is copied into a temporary work directory, and annotation content in a Solidity file in the temporary work directory is deleted; Secondly, the system analyzes each Solidity file into a syntax tree form through operations such as lexical analysis and grammatical analysis; Then, the system performs static feature matching on the syntax tree structure and a pre-established logic matching feature to obtain a matching result; And finally, classifying and summarizing the matched results by the system to generate a report file,namely a detection result.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a static code audit system and method for smart contracts on the Ethereum platform of the block chain. Background technique [0002] In a narrow sense, blockchain technology is a chained data structure that combines data blocks in a sequential manner in chronological order, and is a cryptographically guaranteed non-tamperable and unforgeable distributed ledger. Broadly speaking, blockchain technology uses block chain data structures to verify and store data, uses distributed node consensus algorithms to generate and update data, uses cryptography to ensure the security of data transmission and access, and uses automated scripts to A new distributed infrastructure and computing method for programming and manipulating data through smart contracts composed of code. [0003] Ethereum is an open source public blockchain platform with smart contract functions....

AI Technical Summary

Problems solved by technology

[0005] At present, there are many smart contract applications on the blockchain-based Ethereum platform, such as Backfeed on the social and economic platform, Augur on the decentralized prediction market, and TransActive Grid on the smart grid. However, in the development process of many applications, the design Those who only pay attention to its functionality without considering its security issues lead to potential safety hazards in the application, and because the content of the smart contract is public, anyone can analyze its source code to find loopholes

Images