SmartScan: An approach to detect Denial of Service Vulnerability in Ethereum Smart Contracts
Blockchain technology’s (BT) Ethereum Smart Contracts allows programmable transactions that involve the transfer of monetary assets among peers on a BT network independent of a central authorizing agency. Ethereum smart contracts are programs that are deployed as decentralized applications, having the building blocks of the blockchain consensus protocol. This technology enables consumers to make agreements in a transparent and conflict-free environment. However, the security vulnerabilities within these smart contracts are a potential threat to the applications and their consumers and have shown in the past to cause immense financial losses. In this paper, we propose a framework that combines static and dynamic analysis to detect Denial of Service (DoS) vulnerability due to an unexpected revert in Ethereum Smart Contracts. Our framework, SmartScan, statically scans smart contracts under test (SCUTs) to identify patterns that are potentially vulnerable in these SCUTs and then uses dynamic analysis to precisely confirm their exploitability of the DoS-Unexpected Revert vulnerability, thus achieving increased performance and more precise results. We evaluated SmartScan on a set of 500 smart contracts collected from the Etherscan. Our approach shows an improvement in precision and recall when compared to available state of the art techniques.
Mon 31 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
| 15:00 - 16:20 | |||
| 15:0020m Talk | Design principles for constructing GDPR-compliant blockchain solutions WETSEB 2021 Maria Fernanda Molina Facultad de Ingeniería, Universidad de la República, Gustavo Betarte Facultad de Ingeniería, Universidad de la República, Carlos Luna Facultad de Ingeniería, Universidad de la RepúblicaMedia Attached | ||
| 15:2020m Talk | Opportunities and challenges of Blockchain-Oriented systems in the tourism industry. WETSEB 2021Media Attached | ||
| 15:4020m Talk | SmartScan: An approach to detect Denial of Service Vulnerability in Ethereum Smart Contracts WETSEB 2021Media Attached | ||
| 16:0020m Talk | Blockchain-Engineers Wanted: an Empirical Analysis on Required Skills, Education and Experience WETSEB 2021 Mohamad Kassab The Pennsylvania State University, Giuseppe Destefanis Brunel University London, Joanna DeFranco Pennsylvania State University, Prince Pranav Pennsylvania State UniversityMedia Attached | ||
Go directly to this room on Clowdr