Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Intelligent contract vulnerability detection method and device, electronic equipment and storage medium

A smart contract and vulnerability detection technology, which is applied in the blockchain field, can solve the problems of not actually running the chaincode, it is difficult to effectively evaluate the security of the chaincode, and the chaincode vulnerability cannot be detected.

Active Publication Date: 2020-10-09
西安深信科创信息技术有限公司
View PDF7 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, static analysis does not actually run the chain code, and cannot detect possible loopholes in the actual operation of the chain code; and, static analysis often detects errors that do not exist in the actual operation of the chain code; therefore, using static analysis It is difficult to effectively evaluate the security of chain codes without the method of detecting vulnerabilities

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intelligent contract vulnerability detection method and device, electronic equipment and storage medium
  • Intelligent contract vulnerability detection method and device, electronic equipment and storage medium
  • Intelligent contract vulnerability detection method and device, electronic equipment and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0089] The present invention will be described in further detail below with reference to specific embodiments, but the embodiments of the present invention are not limited thereto.

[0090] In order to effectively evaluate the security of the chain code, the embodiments of the present invention provide a smart contract vulnerability detection method, device, electronic device and storage medium.

[0091] The execution body of the smart contract vulnerability detection method provided by the embodiment of the present invention is the smart contract vulnerability detection device provided by the embodiment of the present invention; the device can be applied to electronic equipment. In a specific application, the electronic device can be: a desktop computer, a portable computer, a node server of a blockchain network, etc., which are not limited here, and any electronic device that can implement the present invention belongs to the protection scope of the present invention.

[009...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses an intelligent contract vulnerability detection method and device, electronic equipment and a storage medium. The method comprises the steps of obtaining a to-be-detected chaincode; generating a test API file of the chain code, and generating a control flow graph; inserting a coverage label and a detection label into the chain code according to the control flow graph; wherein the coverage label is used for recording an execution path of the chain code; wherein the detection label is used for recording branch transfer-in information of an execution path; performing multiple fuzzy tests on the plug-in chain code through the test API file to obtain a test result of each fuzzy test; wherein the test text set is updated or not updated according to the test result of each fuzzy test; wherein the input parameter of each fuzzy test which is not the first time is generated according to a test text set obtained after the last fuzzy test is executed; and according to thetest results of the multiple fuzzy tests, determining the vulnerability of the plug-in chain code as the vulnerability of the to-be-detected chain code. According to the invention, the security of thechain code can be effectively evaluated.

Description

technical field [0001] The invention belongs to the technical field of blockchain, and in particular relates to a smart contract vulnerability detection method, device, electronic device and storage medium. Background technique [0002] Hyperledger Fabric is a blockchain platform proposed and maintained by the Linux Foundation, focusing on privacy and security. The smart contracts it supports are chaincodes; with the widespread adoption of chaincodes, the security of chaincodes requirements are gradually increasing. Therefore, it is necessary to perform vulnerability detection on the chaincode before deploying it to the blockchain to avoid security vulnerabilities in the chaincode deployed on the blockchain. [0003] In the related art, the vulnerability of the chain code is analyzed based on the static analysis method. However, static analysis does not actually run the chain code, so it cannot detect the loopholes that may exist in the chain code when it is actually runni...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F21/57
CPCG06F21/577G06F2221/033
Inventor 不公告发明人
Owner 西安深信科创信息技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com