智能合约安全漏洞检测技术研究综述 智能检测技术与应用综述用什么软件写

智能合约安全漏洞检测技术研究综述

Abstract:Smartcontract,oneofthemostsuccessfulapplicationsofblockchain,providesthefoundationforrealizingvariousreal-worldapplicationsofblockchain,playinganessentialroleintheblockchainecosystem.However,frequentsmartcontractsecurityeventsnotonlycausedhugeeconomiclossesbutalsodestroyedtheblockchain-basedcreditsystem.Thesecurityandreliabilityofsmartcontractthusgainwideattentionfromresearchersworldwide.Thisstudyfirstintroducesthecommontypesandtypicalcasesofsmartcontractvulnerabilitiesfromthreelevels,i.e.,Soliditycodelayer,EVMexecutionlayer,andblockchainsystemlayer.Then,theresearchprogressofsmartcontractvulnerabilitydetectionisreviewedandexistingeffortsareclassifiedintofivecategories,namelyformalverification,symbolicexecution,fuzzingtesting,intermediaterepresentation,anddeeplearning.Thedetectablevulnerabilitytypes,accuracy,andtimeconsumptionofexistingvulnerabilitydetectionmethodsarecomparedindetailaswellastheirlimitationsandimprovements.Finally,basedonthesummaryofexistingresearches,thechallengesinthefieldofsmartcontractvulnerabilitydetectionarediscussedandcombinedwiththedeeplearningtechnologytolookforwardtofutureresearchdirections.