Intelligent contract vulnerability detection method and device

A smart contract and vulnerability detection technology, applied in the direction of platform integrity maintenance, etc., can solve the problems of inaccurate results, long cycle, high cost, etc., and achieve the effect of convenient detection, high accuracy and fast speed

Inactive Publication Date: 2019-06-25
杭州拜思科技有限公司
View PDF7 Cites 27 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In view of this, the present invention provides a method and device for smart contract vulnerability detection to improve developers' development Efficiency, enhanced code security, and reduced developer time and investment costs

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intelligent contract vulnerability detection method and device
  • Intelligent contract vulnerability detection method and device
  • Intelligent contract vulnerability detection method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0036] The embodiment of the present invention is a method for smart contract vulnerability detection, figure 1 It is a flow chart of a method for smart contract vulnerability detection provided by Embodiment 1 of the present invention; the method includes performing one or more of static analysis, dynamic analysis, and SVM-based dynamic and static hybrid analysis for smart contracts;

[0037] In this embodiment, the smart contract vulnerability detection method is an engine made through a series of technical detections for the smart contract written in Solidity and running on the Ethereum network, so as to realize a fully automatic analysis of the loopholes in the smart contract. In the face of the current complex and diverse smart contract market, it is understandable to ensure the security of smart contracts for your own projects, so it is also essential to check the security of smart contracts. This invention will give all developers a simpler, easier-to-use and more effici...

Embodiment 2

[0063] An embodiment of the present invention is a smart contract vulnerability detection device, such as Figure 5 Shown is a schematic structural diagram of a device for smart contract vulnerability detection provided by an embodiment of the present invention, and the device includes:

[0064] One or more of a static analysis module, a dynamic analysis module, and / or an SVM-based dynamic-static hybrid analysis module;

[0065] Static analysis module, including not executing the smart contract program, and analyzing the source code for vulnerabilities;

[0066] The static analysis performed by the static analysis module refers to analyzing the source code to find code defects without executing the computer program. Static analysis generally uses technologies such as data analysis flow, machine learning, and semantic simplification, which can quickly and accurately detect all code-level executable path combinations, directly face the source code, and analyze various problems,...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides an intelligent contract vulnerability detection method and device, and belongs to the technical field of intelligent contracts. The method comprises: one or more of static analysis, dynamic analysis and SVM-based dynamic and static hybrid analysis are executed on the smart contract; and determining a final detection result of the intelligent contract vulnerability accordingto one or more analysis results of static analysis, dynamic analysis and/or SVM-based dynamic and static hybrid analysis. According to the intelligent contract vulnerability detection method and device, the intelligent contract codes are analyzed through the analysis engine composed of static analysis, dynamic analysis and the SVM-based dynamic and static hybrid analysis technology, vulnerabilitycharacteristics are extracted according to the analysis result, intelligent contract vulnerabilities are completely and automatically detected, detection is convenient, the speed is high, and the accuracy rate is high.

Description

technical field [0001] The invention relates to the technical field of smart contracts, in particular to a method and a device for detecting smart contract vulnerabilities. Background technique [0002] Ethereum (Ethereum) is an open source public blockchain platform, which has the characteristics of decentralization, consensus, and distributed ledgers of the blockchain. It provides all developers with a smart contract solution platform based on the Solidity language. It provides various modules for users to create smart contracts for their own projects. [0003] A smart contract is a computer protocol designed to communicate, verify or enforce contracts in an informational manner. Smart contracts allow for trusted transactions without third parties, which are traceable and irreversible. The purpose of smart contracts is to provide a method of security superior to traditional contracts and to reduce other transaction costs associated with contracts. [0004] At present, t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/57G06F21/56
Inventor 王敏学刘智
Owner 杭州拜思科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products