Method, system and medium for checking smart contract vulnerabilities

A technology of smart contracts and inspection methods, applied in the fields of instruments, computing, electrical digital data processing, etc., can solve problems such as uncollected data, no explanations or reports found, achieve excellent detection capabilities, improve coverage and efficiency, enhance The effect of error detection

Active Publication Date: 2021-05-04
SHANGHAI JIAOTONG UNIV
View PDF9 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] At present, there is no description or report of the similar technology of the present invention, and no similar data at home and abroad have been collected yet.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, system and medium for checking smart contract vulnerabilities
  • Method, system and medium for checking smart contract vulnerabilities

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0077] The present invention will be described in detail below in conjunction with specific embodiments. The following examples will help those skilled in the art to further understand the present invention, but do not limit the present invention in any form. It should be noted that those skilled in the art can make several changes and improvements without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0078] A method for checking smart contract loopholes according to the present invention includes:

[0079] Solidity program static taint analysis steps: analyze the source code of the Solidity program grammatically, traverse all possible execution processes for each function in the source code of the Solidity program, form a control flow chart, and then mark all possible taint data to obtain And store the taint analysis results;

[0080] State matrix generation step: generate a transaction sequence, t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The present invention provides a method, system and medium for checking smart contract loopholes, including: Solidity program static taint analysis step: analyzing the source code of the Solidity program from the syntax, traversing all functions in the source code of the Solidity program Possible execution process, forming a control flow chart, and then marking all possible tainted data, obtaining and storing taint analysis results; State matrix generation steps: generating transaction sequences, reorganizing transaction sequences, generating reorganized transaction sequences, and then according to Obtain the result of taint analysis and obtain the State matrix. The invention combines deep learning and fuzz testing, optimizes the fuzz testing technology by using the deep reinforcement learning model and stain analysis, and greatly improves the coverage and efficiency of the fuzz testing. The invention realizes a smart contract loophole detection technology with high coverage, high efficiency and low misjudgment rate.

Description

technical field [0001] The present invention relates to the technical field of Ethereum smart contract security, in particular to a method, system and medium for checking smart contract loopholes. In particular, it involves a smart contract vulnerability detection method based on deep reinforcement learning and fuzz testing technology. Further, it relates to a smart contract vulnerability detection method based on deep reinforcement learning (Deep Q-Learning) and fuzzing technology (fuzzing). Background technique [0002] In recent years, as the blockchain has become a hot topic in the global market, more and more hackers are focusing on the security loopholes of the blockchain. As the blockchain platform with the second market capitalization, Ethereum supports the smart contract in the virtual machine to execute a series of codes with pre-configured rules when the transaction arrives. The attackers illegally obtained a huge amount of Ethereum by attacking the loopholes in...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/57
CPCG06F21/577G06F2221/034
Inventor 张晴钊王艺卓鲁梦华陶思文刘功申
Owner SHANGHAI JIAOTONG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products