Intelligent contract vulnerability detection method and device, electronic equipment and storage medium

A smart contract and vulnerability detection technology, which is applied in the blockchain field, can solve the problems of not actually running the chaincode, it is difficult to effectively evaluate the security of the chaincode, and the chaincode vulnerability cannot be detected.

Active Publication Date: 2020-10-09
西安深信科创信息技术有限公司
View PDF7 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, static analysis does not actually run the chain code, and cannot detect possible loopholes in the actual operation of the chain code; and, static analysis often detects errors that do not

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intelligent contract vulnerability detection method and device, electronic equipment and storage medium
  • Intelligent contract vulnerability detection method and device, electronic equipment and storage medium
  • Intelligent contract vulnerability detection method and device, electronic equipment and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0089] The present invention will be described in further detail below with reference to specific embodiments, but the embodiments of the present invention are not limited thereto.

[0090] In order to effectively evaluate the security of the chain code, the embodiments of the present invention provide a smart contract vulnerability detection method, device, electronic device and storage medium.

[0091] The execution body of the smart contract vulnerability detection method provided by the embodiment of the present invention is the smart contract vulnerability detection device provided by the embodiment of the present invention; the device can be applied to electronic equipment. In a specific application, the electronic device can be: a desktop computer, a portable computer, a node server of a blockchain network, etc., which are not limited here, and any electronic device that can implement the present invention belongs to the protection scope of the present invention.

[009...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an intelligent contract vulnerability detection method and device, electronic equipment and a storage medium. The method comprises the steps of obtaining a to-be-detected chaincode; generating a test API file of the chain code, and generating a control flow graph; inserting a coverage label and a detection label into the chain code according to the control flow graph; wherein the coverage label is used for recording an execution path of the chain code; wherein the detection label is used for recording branch transfer-in information of an execution path; performing multiple fuzzy tests on the plug-in chain code through the test API file to obtain a test result of each fuzzy test; wherein the test text set is updated or not updated according to the test result of each fuzzy test; wherein the input parameter of each fuzzy test which is not the first time is generated according to a test text set obtained after the last fuzzy test is executed; and according to thetest results of the multiple fuzzy tests, determining the vulnerability of the plug-in chain code as the vulnerability of the to-be-detected chain code. According to the invention, the security of thechain code can be effectively evaluated.

Description

technical field [0001] The invention belongs to the technical field of blockchain, and in particular relates to a smart contract vulnerability detection method, device, electronic device and storage medium. Background technique [0002] Hyperledger Fabric is a blockchain platform proposed and maintained by the Linux Foundation, focusing on privacy and security. The smart contracts it supports are chaincodes; with the widespread adoption of chaincodes, the security of chaincodes requirements are gradually increasing. Therefore, it is necessary to perform vulnerability detection on the chaincode before deploying it to the blockchain to avoid security vulnerabilities in the chaincode deployed on the blockchain. [0003] In the related art, the vulnerability of the chain code is analyzed based on the static analysis method. However, static analysis does not actually run the chain code, so it cannot detect the loopholes that may exist in the chain code when it is actually runni...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/57
CPCG06F21/577G06F2221/033
Inventor 不公告发明人
Owner 西安深信科创信息技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products