Intelligent contract vulnerability checking method, system and medium

A smart contract and inspection method technology, which is applied in the direction of instruments, electrical digital data processing, platform integrity maintenance, etc., can solve the problems of not yet collecting data, not finding explanations or reports, etc., achieving excellent detection capabilities and reducing operational difficulty And the dependence on the environment, the effect of improving coverage and efficiency

Active Publication Date: 2019-11-01
SHANGHAI JIAO TONG UNIV
View PDF9 Cites 25 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] At present, there is no description or report of the similar technology of t

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intelligent contract vulnerability checking method, system and medium
  • Intelligent contract vulnerability checking method, system and medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0077] The present invention will be described in detail below in conjunction with specific embodiments. The following examples will help those skilled in the art to further understand the present invention, but do not limit the present invention in any form. It should be noted that those skilled in the art can make several changes and improvements without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0078] A method for checking smart contract loopholes according to the present invention includes:

[0079] Solidity program static taint analysis steps: analyze the source code of the Solidity program grammatically, traverse all possible execution processes for each function in the source code of the Solidity program, form a control flow chart, and then mark all possible taint data to obtain And store the taint analysis results;

[0080] State matrix generation step: generate a transaction sequence, t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides an intelligent contract vulnerability checking method, a system and a medium. The method comprises a Solidy program static stain analysis step: grammatically analyzing a sourcecode of a Solidy program, traversing all possible execution processes for each function in the source code of the Solidy program to form a control flow chart, marking all possible stain data, and obtaining and storing a stain analysis result; a State matrix generation step: generating a transaction sequence, recombining the transaction sequence to generate a recombined transaction sequence, and obtaining a State matrix according to the obtained stain analysis result. According to the method, deep learning and fuzzy testing are combined. The fuzzy testing technology is optimized through the deep reinforcement learning model and stain analysis. The coverage rate and the efficiency of fuzzy testing are greatly improved. According to the invention, an intelligent contract vulnerability detection technology with high coverage rate, high efficiency and low misjudgment rate is realized.

Description

technical field [0001] The present invention relates to the technical field of Ethereum smart contract security, in particular to a method, system and medium for checking smart contract loopholes. In particular, it involves a smart contract vulnerability detection method based on deep reinforcement learning and fuzz testing technology. Further, it relates to a smart contract vulnerability detection method based on deep reinforcement learning (Deep Q-Learning) and fuzzing technology (fuzzing). Background technique [0002] In recent years, as the blockchain has become a hot topic in the global market, more and more hackers are focusing on the security loopholes of the blockchain. As the blockchain platform with the second market capitalization, Ethereum supports the smart contract in the virtual machine to execute a series of codes with pre-configured rules when the transaction arrives. The attackers illegally obtained a huge amount of Ethereum by attacking the loopholes in...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/57
CPCG06F21/577G06F2221/034
Inventor 张晴钊王艺卓鲁梦华陶思文刘功申
Owner SHANGHAI JIAO TONG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products