WORLD SCI-TECH R&D ›› 2023, Vol. 45 ›› Issue (2): 233-242.doi: 10.16507/j.issn.1006-6055.2022.07.003

Previous Articles     Next Articles

Research on Security Risk Analysis and Countermeasures of Smart Contract Platform

WEI Xia1   BAI Guozhu2   ZHANG Wenjun2   SHI Jingxian2   

  1. 1. Xi'an Mingde Institute of Technology, Xi'an 710124, China; 2. Shaanxi Branch of National Computer Network and Information Security Management Center, Xi'an 710075, China
  • Online:2023-04-25 Published:2023-04-27

PDF (PC)

205

Abstract:

Smart contract is a computer protocol that can be disseminated, verified and executed in an information-based manner. It can be executed without a trusted third party and has been widely concerned and applied in many fields. However, because of its many security vulnerabilities, which have caused huge economic losses, research on its security has also become a hot spot. Firstly, the general architecture and operation mechanism of a smart contract is introduced; Secondly, the inherent security risks of the mainstream smart contract platform are analyzed from the two dimensions of programming language and execution environment; Thirdly, it analyzes the security risks of smart contracts and the research status of coping technologies from three aspects: privacy disclosure, contract vulnerabilities, and malicious contracts.The contract vulnerability part summarizes four response methods from byte code analysis, source code analysis, machine learning-based analysis, and dynamic analysis. It introduces the representative research technology of each method. Finally, the future research direction of a smart contract is given.

Key words: Blockchain, Smart Contract, Safety Risk, Malicious Contract, Transaction Privacy